Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda/00ab0e0c-a930-322f-aa25-d16164065582.roa
File:                     00ab0e0c-a930-322f-aa25-d16164065582.roa (raw, json)
Hash identifier:          6+QE0va3IDUTNKDhX7lHDcJIEY8dhMyxR6jSqZ5NdRk=
Subject key identifier:   DD:39:FA:75:43:1A:17:74:CE:27:DB:BC:13:BF:55:BF:52:EC:87:34
Certificate issuer:       /CN=322dc169-3c90-4ef2-9c84-cda14edd7dda
Certificate serial:       010D0C9F43285849FCAA771F4F7E7C8A9CD2EB80
Authority key identifier: 33:8C:CF:2B:DA:06:28:92:99:C8:7F:7C:C4:CE:ED:B9:6E:DF:15:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda/00ab0e0c-a930-322f-aa25-d16164065582.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     53423
IP address blocks:        69.5.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda/322dc169-3c90-4ef2-9c84-cda14edd7dda.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda/322dc169-3c90-4ef2-9c84-cda14edd7dda.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:77:1f:4f:7e:7c:8a:9c:d2:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322dc169-3c90-4ef2-9c84-cda14edd7dda
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=39e542ec-af38-4c4f-9c92-e1fef5ae78a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3d:2c:46:06:c6:08:92:1f:8f:0f:ae:e4:ea:
                    40:a9:d0:f1:74:77:f2:ff:90:33:a5:03:c3:76:dc:
                    7a:96:ce:db:f0:a3:b4:a9:b6:f3:8b:3e:4c:68:e9:
                    67:67:0d:7b:08:79:47:93:14:e1:b7:65:d2:75:e7:
                    55:ff:6e:11:ab:e1:48:0d:01:f7:91:9d:4c:11:18:
                    63:97:4b:85:7d:4f:10:0f:f6:0d:1d:ec:f0:f6:31:
                    2d:21:56:d2:2f:14:c1:f0:26:8b:a0:42:3f:70:de:
                    71:6c:be:0d:dc:1f:ab:18:f6:22:02:0b:fb:09:0b:
                    45:f3:54:d8:1b:99:52:87:88:61:39:50:0a:4e:f6:
                    b5:5c:bd:51:4e:52:c7:5f:d9:df:dd:17:ca:5a:4d:
                    d5:87:e1:4e:26:4d:62:e6:54:f7:e0:12:2d:a2:42:
                    8e:31:83:0e:8a:81:24:f7:ca:c0:e5:4d:19:c4:5e:
                    85:03:a3:e3:41:d2:29:6f:94:ec:71:8b:6f:62:b1:
                    de:09:fc:5e:b6:ac:4d:42:7e:d1:38:22:45:9a:89:
                    f0:ec:56:e0:f6:73:3c:65:e8:62:37:76:7f:5b:95:
                    bb:0e:0b:fa:19:d5:80:76:cf:5c:52:c5:37:cc:6f:
                    06:82:d1:8f:99:e3:f9:ba:35:b3:33:32:f6:4b:0d:
                    01:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:39:FA:75:43:1A:17:74:CE:27:DB:BC:13:BF:55:BF:52:EC:87:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda/00ab0e0c-a930-322f-aa25-d16164065582.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda/322dc169-3c90-4ef2-9c84-cda14edd7dda.crl

            X509v3 Authority Key Identifier:
                keyid:33:8C:CF:2B:DA:06:28:92:99:C8:7F:7C:C4:CE:ED:B9:6E:DF:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/322dc169-3c90-4ef2-9c84-cda14edd7dda.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.5.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d2:84:60:87:d4:7d:2e:69:8e:0d:45:ec:2c:12:e5:38:f9:
         2f:62:bf:9f:66:48:2d:76:53:73:75:6e:72:74:14:90:fe:47:
         a1:26:51:57:98:26:05:16:30:bf:b8:f1:e0:12:d4:7c:59:09:
         c9:7b:7f:6f:88:38:6b:30:ce:da:ed:af:51:73:01:26:4e:af:
         1b:ff:f6:fe:68:1b:50:38:55:b4:2f:a9:ef:65:e2:25:21:23:
         05:40:6f:95:79:21:35:41:e1:16:90:b8:bc:f7:8e:d4:9c:e9:
         ad:06:1a:f7:e7:8d:76:f1:fe:f1:a2:24:10:c2:14:14:6e:58:
         1e:71:76:37:76:ba:67:6c:de:24:bd:1a:94:d7:aa:ec:22:76:
         9c:32:c6:37:cb:59:30:67:b4:7d:36:23:b0:a7:99:e3:dd:d7:
         8b:f3:dc:6e:f0:cc:b0:20:89:25:7c:97:0e:d1:73:3f:05:e0:
         6d:45:fb:99:e1:7b:68:c8:b5:45:81:ff:73:dd:e9:4f:92:74:
         50:d9:e4:ed:87:c7:3e:56:8e:27:2c:d8:57:4e:6f:92:4e:6d:
         d1:84:dc:55:22:f9:bd:bf:4f:d5:5b:93:ae:e3:a0:d0:f7:7a:
         fb:e3:7e:ff:4a:8c:eb:67:94:b8:64:a1:01:13:85:55:d9:9d:
         fc:9b:fe:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:09 2025 by rpki-client