Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a537620b-3061-317a-97ff-67f36d74c233.roa
File:                     a537620b-3061-317a-97ff-67f36d74c233.roa (raw, json)
Hash identifier:          ocv6G9bmO4Iymj0I8LXDym+pgUT86aZQxG6uf37lBJo=
Subject key identifier:   4D:36:7B:D2:C6:60:52:38:8A:B0:7F:2E:F6:86:1B:C2:79:90:B3:04
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A90A0C19D14CC6C8FB73EC280
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a537620b-3061-317a-97ff-67f36d74c233.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     13692
IP address blocks:        69.1.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c1:9d:14:cc:6c:8f:b7:3e:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=c89130ab-4b00-493e-8263-fafdf4d73956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e2:a6:ef:f7:dc:e0:ce:ce:b5:2e:4d:44:88:
                    71:b5:9d:81:e1:83:3b:fd:31:d8:f3:19:18:ed:62:
                    92:ad:51:3a:b0:11:23:22:69:62:d0:2e:83:9c:b0:
                    95:dd:29:22:53:c1:6f:a8:81:c6:3d:19:f7:8b:7d:
                    3b:44:70:15:00:eb:21:e4:38:ae:85:f3:da:a8:7a:
                    0d:34:42:fd:69:1f:ba:50:a5:47:7c:07:db:83:eb:
                    dc:bb:4d:9c:ce:89:6a:c5:a6:31:b0:02:30:67:e0:
                    e4:19:0f:79:52:26:00:a1:fa:2d:55:5d:cd:82:9d:
                    c3:f7:08:3e:90:51:79:02:a8:51:25:9b:f9:6a:1c:
                    77:ec:b6:57:c2:4e:a9:e1:d6:c9:5c:8a:33:b1:cd:
                    b2:61:a0:57:8b:45:f0:36:51:ee:18:d7:70:17:3f:
                    87:98:af:f7:ad:ea:ab:6e:2d:e4:4c:72:ca:3b:71:
                    58:e1:e6:39:e4:82:8f:1c:11:d3:10:b0:c9:a8:95:
                    7d:42:83:9f:9d:63:55:16:c6:89:64:6e:ba:4e:7b:
                    a9:f2:46:08:8f:81:0c:40:ee:6d:d6:6f:71:20:2d:
                    54:80:7b:a5:45:b4:3f:a6:65:8a:1c:70:66:81:d8:
                    a7:1c:ed:c1:9f:0e:0a:48:c5:66:e7:30:1f:7c:b9:
                    2f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:36:7B:D2:C6:60:52:38:8A:B0:7F:2E:F6:86:1B:C2:79:90:B3:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a537620b-3061-317a-97ff-67f36d74c233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:3d:5a:f8:08:a4:79:58:b9:d2:f5:da:bd:83:e5:a1:7c:
         61:e3:92:01:b3:4d:ea:65:77:dc:46:e3:bb:fa:c3:a9:8f:9a:
         82:40:df:cf:23:3a:31:c0:4d:ec:d3:b3:d8:fb:d6:20:19:17:
         fc:c3:56:aa:b6:41:dc:85:3c:24:ac:07:98:a4:bd:af:0a:9e:
         00:dd:f0:be:6d:ff:4b:a4:55:f9:89:bb:58:ae:b0:7d:c6:45:
         24:b0:20:77:27:85:ef:b8:f7:2d:5a:a4:0f:ec:5e:9a:aa:a5:
         d6:96:97:7d:f1:54:e9:a7:d7:48:75:96:b7:25:24:03:2e:81:
         4b:16:3e:e0:66:80:c6:08:63:29:dc:a1:94:1a:d2:06:97:ca:
         d1:f5:9c:d5:97:87:8a:05:37:ba:33:55:49:27:d1:89:0c:95:
         d1:ae:fb:d5:b2:35:87:8e:61:46:48:ee:26:16:c9:8e:e3:64:
         2b:9e:18:58:9d:0b:cf:75:fd:20:48:5d:66:b8:a2:5c:53:10:
         34:87:50:04:6f:3e:a1:63:13:8e:07:f4:8f:25:ac:c4:41:83:
         e7:b0:65:45:da:ed:05:3e:45:f8:06:b9:43:e4:f1:ca:fc:08:
         4d:ce:88:34:c6:ac:f3:75:09:a5:e5:24:88:63:1c:8a:2e:b7:
         c8:62:ef:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:17:25 2025 by rpki-client