Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/990a62e3-1d14-3057-96be-e832a75e7d08.roa
File:                     990a62e3-1d14-3057-96be-e832a75e7d08.roa (raw, json)
Hash identifier:          bZOslT6oWm/i17EWZ1C5fMRoib1wKGYYFdVOENezsIM=
Subject key identifier:   F0:9D:F9:5C:72:08:5E:85:4D:57:CD:B0:8D:1F:32:E0:10:76:01:AD
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285849A4B9F5357A3AE59BCAE51740
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/990a62e3-1d14-3057-96be-e832a75e7d08.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     14813
IP address blocks:        69.73.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:b9:f5:35:7a:3a:e5:9b:ca:e5:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=71dbd3fd-8897-484d-9483-cb7a5c81ac1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:20:b3:96:c5:a6:c1:3a:8b:e3:10:1f:d8:54:
                    5a:23:33:11:ea:f4:d2:83:20:5d:11:75:51:e9:9a:
                    03:a5:24:6c:0d:ef:b3:bd:65:e0:c2:a9:8b:56:26:
                    91:40:ac:b9:d5:d4:99:b9:52:6b:45:a8:2a:8d:e5:
                    5a:52:65:e4:24:67:f1:41:9f:ce:e7:7e:2f:c0:a9:
                    5c:e2:43:d6:d8:d6:99:2f:5f:04:f7:23:84:ae:11:
                    ea:d7:c3:6a:63:b0:7a:0f:b7:55:05:8e:98:5c:5d:
                    54:ee:6d:b9:7c:9c:2e:96:21:1d:2f:27:d0:d4:47:
                    ad:c5:ca:ff:f4:a3:ac:a1:e1:ba:3d:e0:78:20:77:
                    9f:32:8e:0f:46:b0:ca:f2:f6:b3:93:f1:9e:9f:aa:
                    21:2d:87:cb:16:08:de:3c:70:2e:c1:3c:fd:8b:af:
                    5b:ff:bb:bb:c8:0a:41:8a:a2:b5:07:af:96:a2:f8:
                    a6:56:df:83:88:9e:1d:af:5e:22:c1:ba:23:0b:2e:
                    04:60:8a:ea:c6:af:8a:5a:98:eb:23:62:aa:22:6d:
                    2f:d9:84:1f:8d:6e:44:23:a1:2f:36:62:4e:89:b3:
                    00:d2:04:04:ec:e4:13:e9:96:b2:06:a4:25:9f:7a:
                    eb:cd:a0:5b:97:6d:b6:ae:56:a2:4d:e4:f2:4f:3a:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9D:F9:5C:72:08:5E:85:4D:57:CD:B0:8D:1F:32:E0:10:76:01:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/990a62e3-1d14-3057-96be-e832a75e7d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:c1:70:77:a0:e4:a3:3b:1a:f9:38:73:18:2f:dd:66:21:3e:
         1a:68:91:37:43:a3:61:86:aa:4d:38:f6:10:e1:2a:53:63:cf:
         40:8a:7e:d7:80:7e:29:74:99:a2:09:e1:1d:96:2c:d0:e8:54:
         0a:40:9e:b4:22:2a:b7:38:19:45:07:ac:9a:6b:72:a5:46:0f:
         d8:38:d2:6c:d1:77:2c:02:16:14:26:65:f6:04:2d:fe:e4:d8:
         9c:64:3b:86:fa:68:16:2f:ed:89:25:66:08:3d:7a:39:28:c8:
         42:54:a3:f2:4e:01:f6:f2:f0:02:c1:ed:b8:6f:92:cc:1b:59:
         33:33:b5:9b:90:83:57:c7:9d:b2:8d:66:59:33:07:78:ad:18:
         30:ee:2f:ea:c3:8f:09:0a:25:ba:05:e7:e7:a1:f1:cd:15:2e:
         b2:87:43:ea:a5:c6:86:c8:73:58:cc:b4:9f:86:73:8f:6a:bf:
         e8:1e:d1:72:be:95:32:21:b0:7e:a3:3f:8e:f0:38:a8:04:4a:
         d1:23:07:58:e6:71:67:84:8d:63:d9:66:f1:1d:18:4e:86:b4:
         6a:90:2b:89:5c:43:22:86:c8:2e:7a:56:59:78:8f:10:ad:02:
         6f:11:ec:8e:56:b6:da:21:32:67:a8:96:45:60:49:3d:7c:10:
         3c:8c:8b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:15:24 2025 by rpki-client