Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa
File:                     f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa (raw, json)
Hash identifier:          hDyqixfeDLl0H8OH0z/uFKsSYlZr6nxsRBUeLoR9dTg=
Subject key identifier:   9A:AC:DC:1E:0C:D6:52:FC:DD:92:AD:68:FD:42:21:91:E5:62:1B:71
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584A268ABFB5AD990D83B3820200
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     3695
IP address blocks:        70.36.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:bf:b5:ad:99:0d:83:b3:82:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=fa60bb07-bfcf-4a44-afd0-f1f962368344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:54:65:70:73:4c:f1:83:02:42:94:b5:36:7a:
                    bd:b0:1b:ac:08:2b:79:e1:00:ed:cd:0c:f6:ca:1b:
                    c8:79:cc:c6:02:b3:0f:6e:bd:ef:4b:7a:72:b6:b8:
                    0d:25:d5:80:84:5f:91:9f:7d:66:7a:56:d9:37:24:
                    87:82:05:f6:59:21:15:6f:73:c6:59:19:99:68:2c:
                    1e:07:32:e3:0f:e2:52:25:38:fc:09:23:2e:79:12:
                    06:46:77:63:ed:53:80:4c:de:fd:5a:e9:74:fc:a5:
                    97:25:cd:86:61:31:8d:47:80:64:6f:67:dd:92:3f:
                    50:b3:5d:f8:87:b6:b7:2d:47:9f:76:04:be:b6:4d:
                    f1:29:b3:19:69:80:ba:6c:8c:d6:fc:3f:f0:b8:62:
                    29:8a:c6:85:a3:16:16:ee:39:ed:11:e5:74:e2:e4:
                    a2:d7:1f:cf:6d:94:e3:24:94:f6:ab:4d:aa:7b:32:
                    f3:74:3d:72:ae:8f:70:ca:6e:f8:a8:23:fd:df:08:
                    8f:cb:fb:ab:cf:5e:18:1c:2d:f8:45:27:8b:be:ec:
                    41:e4:30:a7:9e:c6:54:2a:49:57:5b:9e:20:e9:c4:
                    e1:73:4c:31:40:d0:54:2b:1b:c2:ed:36:18:c7:eb:
                    0f:37:a9:05:e2:ac:84:75:f5:ff:3d:6d:c0:c5:c6:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AC:DC:1E:0C:D6:52:FC:DD:92:AD:68:FD:42:21:91:E5:62:1B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:d0:e6:f2:cb:e5:c6:b1:43:65:f8:8d:b8:f0:ed:08:89:c3:
         81:c1:e8:25:9a:7d:8b:90:09:2d:29:19:97:f4:65:af:01:80:
         23:81:f0:f0:50:f9:bf:bf:7b:75:92:e8:13:0f:38:ee:e8:c4:
         29:1b:6c:ee:25:a5:4b:e3:dc:b8:8b:7a:f4:c4:ea:79:ef:43:
         1c:02:56:20:18:ff:2a:cd:3d:b0:ac:62:ed:5a:04:7f:49:d2:
         9a:66:5d:72:33:09:ee:23:7a:36:1c:ef:6b:a5:3b:2a:b8:4c:
         e2:7f:34:1b:aa:43:ec:eb:f5:e3:18:e8:85:72:15:62:a4:6a:
         63:ae:6c:7f:f0:19:cb:a6:14:82:cc:15:23:f2:80:de:04:05:
         19:d2:74:b2:4e:25:3e:19:2e:ed:9c:3b:dc:6e:f7:2e:d8:73:
         83:cb:63:05:4d:63:92:41:69:46:c4:a3:67:59:a1:c1:ac:be:
         41:2c:56:1b:92:44:e5:df:43:aa:40:93:c1:f9:52:73:8a:a7:
         3d:1a:d1:2a:f3:bd:71:9e:24:2a:b0:83:43:1a:9b:1b:ac:f0:
         31:9c:7b:60:d5:c8:ac:b5:76:c2:48:b5:67:7f:6d:98:92:75:
         6f:e5:cb:41:65:66:0e:79:c8:17:92:08:e7:e9:a3:96:4f:dd:
         e0:2f:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:12 2025 by rpki-client