Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa
File:                     6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa (raw, json)
Hash identifier:          iegXx0U3/E9Gx8pYp7/rWKdBlOmbcvNS3aY/KVk4F0g=
Subject key identifier:   4F:80:3D:FC:23:95:04:9C:13:A2:B3:27:3B:FF:D0:BB:4D:78:84:3F
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584BBE403A162D45A1469DDE8E00
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     19107
IP address blocks:        216.234.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:3a:16:2d:45:a1:46:9d:de:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=78c3207b-1057-4444-95c0-5d2dd198953d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a1:db:db:37:d1:11:99:98:89:c6:cf:c2:88:
                    2f:6d:b8:89:84:2d:be:df:b2:b7:9f:84:5f:ec:fa:
                    64:b6:4a:f7:5b:19:20:4e:b5:08:86:1a:95:77:98:
                    c7:8e:77:8f:bc:d4:03:fc:38:98:b5:2c:f1:c3:be:
                    a7:aa:51:cf:9b:d6:22:e2:12:e6:ad:8f:5d:d2:3c:
                    11:63:d8:91:47:35:9e:5b:ce:e8:9b:bd:ed:2a:cb:
                    b1:87:d3:b2:ae:c9:af:42:59:9c:ae:ed:45:39:de:
                    a9:2e:cf:ad:45:35:5c:c4:fd:51:05:1c:2c:1b:53:
                    89:12:1f:d2:d4:09:e0:e4:d7:29:47:5c:1a:ea:92:
                    13:b4:ff:df:d9:1e:63:f1:c3:80:97:29:75:82:ab:
                    ba:4c:df:03:db:59:38:ff:de:ac:3c:f2:ef:ae:0a:
                    89:f9:73:e5:d1:a5:b8:be:72:9c:57:8f:36:d0:13:
                    7e:11:57:07:ab:c6:fb:25:9d:38:be:08:b1:45:22:
                    43:6d:57:8f:82:e3:c4:39:16:f3:97:04:0b:5b:20:
                    ae:28:fa:8b:0b:67:2d:27:14:86:9a:32:20:2d:91:
                    af:2f:99:b0:7d:00:0b:df:11:39:d6:9a:f0:ef:cf:
                    8f:e7:3b:fb:b3:d1:df:aa:1d:36:2a:1c:67:87:40:
                    8d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:80:3D:FC:23:95:04:9C:13:A2:B3:27:3B:FF:D0:BB:4D:78:84:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:6a:25:b3:5a:98:1d:3b:67:04:97:8e:3c:ca:f7:d3:81:25:
         f8:f4:dc:f7:eb:20:f6:c6:89:a9:c5:4e:99:78:ba:ea:b1:e4:
         15:40:b1:00:50:1b:e5:e4:45:4b:86:1a:39:7b:32:82:ad:e9:
         24:15:00:16:d9:c0:d0:58:00:5a:1b:4e:3d:f8:b0:01:dd:05:
         01:d8:af:5d:ee:c1:c6:95:b3:ca:de:56:f8:08:f6:ea:c8:86:
         5c:98:d7:17:86:b3:dd:77:e6:27:85:4c:1a:5e:b7:69:2d:a0:
         fb:24:71:49:ac:85:91:45:42:bb:70:e0:07:fc:46:0d:4b:01:
         89:56:d7:ed:e7:20:4e:23:21:82:56:be:34:53:53:a8:ba:95:
         91:df:dd:34:d6:a8:76:60:9d:93:5c:7a:9d:d3:b4:1e:b1:ff:
         fe:88:1e:86:61:df:2f:2c:90:b4:02:73:0d:f6:8e:54:50:4c:
         94:f4:22:1c:5b:ae:7a:c3:ac:91:8d:b7:e1:eb:d3:39:07:d4:
         7b:60:f5:f3:ef:ca:d9:f2:c9:87:82:f1:87:7f:b6:d0:90:89:
         d8:67:5b:9e:2d:e5:20:a5:48:ab:13:e2:55:93:43:c6:9a:a1:
         31:22:1c:d5:b5:aa:68:4f:c2:e5:6c:0b:95:a0:51:80:d0:7c:
         d9:80:d0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:21:39 2025 by rpki-client