Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/42e2d2e0-f64e-3caa-b82a-299df2894365.roa
File:                     42e2d2e0-f64e-3caa-b82a-299df2894365.roa (raw, json)
Hash identifier:          r4X2eQ6EKBXpeqdKdmb8iJWt7UX1QS8FS+GCBfdJgiY=
Subject key identifier:   BB:3A:79:55:F1:16:E9:F9:79:33:D0:4C:0F:4F:7F:E7:58:A9:7B:1F
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A9900C022DABD5EEFC84B7280
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/42e2d2e0-f64e-3caa-b82a-299df2894365.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     397422
IP address blocks:        69.1.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c0:22:da:bd:5e:ef:c8:4b:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=a63c35d4-2657-467d-b309-1e5b15ce2af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c8:e0:e1:13:fb:68:5c:79:3b:77:be:d5:5f:
                    35:98:cf:58:0b:bc:0c:42:e7:85:e5:f1:c6:b8:f5:
                    5b:9a:b5:c9:f1:d9:08:87:cd:5f:e0:26:0d:e2:23:
                    bb:85:93:59:e0:cf:84:41:18:2d:16:18:f3:c0:dd:
                    61:1b:6c:72:80:65:1f:11:c4:5f:9a:99:66:0f:2c:
                    48:05:b5:5e:f2:bd:38:33:8a:c8:2c:8b:83:dc:b7:
                    ba:92:06:c8:00:c6:35:3e:d2:4c:87:92:ef:f6:60:
                    89:8f:55:68:06:a1:49:50:83:ec:66:db:71:37:7b:
                    d0:d4:8f:81:7a:be:67:57:89:25:c0:d8:c3:cb:19:
                    9b:d1:bd:77:20:9a:99:72:6f:df:3b:e6:cb:cd:37:
                    6d:ce:84:a8:87:17:6c:7b:32:3b:a0:ff:37:52:45:
                    1f:27:93:cc:28:c5:91:6b:52:7d:28:77:0b:54:6b:
                    8c:ce:7d:84:b8:f6:e0:80:1b:c2:c8:83:97:09:1b:
                    97:df:2b:9c:ba:c3:6d:60:74:e8:51:e5:be:33:cf:
                    1a:41:62:49:58:9d:89:ac:c2:a9:c2:d9:37:30:41:
                    2a:ab:fc:0b:6c:9e:3d:50:d7:5a:d4:c3:88:3d:e7:
                    f2:ea:7f:0b:e3:f6:9f:da:f1:a7:de:a1:ac:d2:64:
                    76:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3A:79:55:F1:16:E9:F9:79:33:D0:4C:0F:4F:7F:E7:58:A9:7B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/42e2d2e0-f64e-3caa-b82a-299df2894365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f2:95:34:35:98:1d:54:09:36:bd:cd:32:0c:4a:73:f0:d4:
         c6:4c:e7:59:08:86:9c:b1:48:8e:e0:7e:e5:27:23:70:d7:4d:
         6b:91:ef:69:a2:db:fd:37:b3:f6:49:c7:d3:09:31:f4:b3:23:
         9b:a5:c3:90:01:15:03:b7:7f:f7:56:0b:ad:cd:ef:ba:1b:aa:
         12:fa:67:08:6e:fe:76:d6:fd:e9:dc:07:cb:11:29:9f:33:a1:
         1c:0d:28:37:c6:5e:8c:87:c3:81:04:ed:3e:8b:0b:48:e7:00:
         60:7c:dd:8e:ee:ec:12:14:29:2d:69:43:d8:4d:92:27:72:31:
         60:96:30:a1:ff:a6:f2:fd:de:c9:1a:b6:44:20:a5:11:e8:a8:
         db:63:90:82:54:0c:b1:29:fa:c8:96:06:2a:24:0f:a1:56:d4:
         26:43:a6:0d:09:b8:98:75:6f:20:91:5c:ce:c7:6c:b4:c5:d6:
         02:9e:a0:a0:ec:10:89:e2:c4:80:32:67:3d:45:bc:7e:92:c1:
         13:bd:64:70:0e:9d:c6:89:f2:c9:3f:36:29:f5:8e:62:12:92:
         20:28:dd:5d:93:7f:15:3e:79:ef:7d:a2:ad:15:1b:63:3c:83:
         30:72:49:4d:cc:c4:02:91:81:dd:21:5d:b0:6f:e6:b4:b7:d2:
         3f:dd:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:12:09 2025 by rpki-client