Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/787bccb6-3826-3e00-8b03-f7cb54c0ee2e.roa
File:                     787bccb6-3826-3e00-8b03-f7cb54c0ee2e.roa (raw, json)
Hash identifier:          6PQGGqDyjBhRmumdW/x2wFg7YTmUgsjw5dT4EPKSPjw=
Subject key identifier:   59:F3:99:91:5D:48:F9:8F:29:5F:7E:EA:1E:51:DF:D8:45:D5:D2:10
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584A27F01D01B780DF9EE4DB4A00
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/787bccb6-3826-3e00-8b03-f7cb54c0ee2e.roa
Signing time:             Wed 11 Jun 2025 13:01:04 +0000
ROA not before:           Wed 11 Jun 2025 13:01:04 +0000
ROA not after:            Tue 09 Sep 2025 13:01:04 +0000
asID:                     63023
IP address blocks:        69.42.210.0/23 maxlen: 24
                          186.190.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:27:f0:1d:01:b7:80:df:9e:e4:db:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Jun 11 13:01:04 2025 GMT
            Not After : Sep  9 13:01:04 2025 GMT
        Subject: CN=e1a8fe04-f195-4330-878c-cd30804b38d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7d:64:a4:14:f5:a0:1f:10:82:4b:87:2d:31:
                    55:bb:90:47:a0:ad:db:0d:4b:8d:90:58:c7:7f:82:
                    a0:66:d3:cd:56:3e:77:4a:2a:a4:fa:f6:35:f0:c1:
                    b4:63:87:e3:dd:83:bb:d2:90:1b:7a:76:c3:6a:ea:
                    b1:e2:95:88:2b:4e:8c:3d:12:ff:91:21:e6:d2:28:
                    c8:26:ba:c0:5d:33:e2:ee:2c:3b:f9:b9:e0:71:3c:
                    5b:55:7f:a9:09:61:c9:7e:f0:ee:a2:6f:df:f6:13:
                    a3:88:61:66:13:fa:a6:ec:24:26:a1:90:7b:c9:64:
                    de:6a:ce:61:1b:59:cf:55:0e:aa:69:f2:ce:4f:e5:
                    c9:f7:11:64:03:2f:f5:20:d9:77:61:9b:c3:93:9a:
                    1d:16:79:24:7f:5e:c0:ec:52:66:52:01:2a:d8:67:
                    ab:80:65:4d:e7:97:81:26:85:53:e0:51:b0:a5:52:
                    78:f3:e3:f6:f0:f0:52:37:47:b6:fc:df:13:f3:02:
                    56:0b:a1:87:fa:6a:f2:1e:e3:03:10:8b:82:9f:3b:
                    0b:96:5a:42:7b:a6:00:23:4a:ff:44:06:f5:c1:2b:
                    77:6c:41:8f:f6:d4:01:6b:50:9a:bd:fb:be:09:f9:
                    6a:e3:2e:64:e3:5d:56:61:56:a2:3c:44:49:e7:fb:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F3:99:91:5D:48:F9:8F:29:5F:7E:EA:1E:51:DF:D8:45:D5:D2:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/787bccb6-3826-3e00-8b03-f7cb54c0ee2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.210.0/23
                  186.190.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4b:f1:d6:e8:6f:c2:95:d5:64:d5:16:48:0c:19:c2:e9:cd:
         99:39:69:61:72:e6:fd:a0:ce:26:55:4a:6a:e7:cf:ac:ef:64:
         bf:ee:0b:8b:23:0a:4e:d2:3d:7e:19:9c:19:d8:84:10:97:2e:
         c0:5a:ca:6b:b8:7d:f8:53:c3:c9:77:4d:e7:8a:54:f6:61:49:
         d1:d3:9f:3a:06:15:09:f2:c7:9d:07:f9:15:fd:b1:6e:97:03:
         77:44:18:a1:8a:fb:ad:ba:ab:2a:d1:cd:ce:30:c6:2d:f6:48:
         d0:5c:a7:c7:43:c4:10:41:79:c2:69:6a:cc:ad:ea:9d:e9:91:
         f8:1d:66:79:98:6d:d4:87:1d:b8:a3:27:44:7c:d7:ad:6b:87:
         39:8f:ac:a0:94:06:4f:fb:8a:ab:68:53:e2:87:b7:75:14:55:
         30:f6:6a:36:0c:c7:34:35:d5:a2:a0:33:0e:7f:b8:3d:35:d8:
         3b:04:6b:de:86:b2:67:87:b9:f5:0b:0e:44:8d:a3:98:cf:54:
         65:7a:7c:93:96:56:26:26:56:21:45:b9:dd:22:29:19:b0:e4:
         60:06:f8:f5:5a:0c:0a:15:7d:ea:98:0e:99:88:f9:c3:15:ee:
         88:75:65:f1:6c:6e:11:81:a8:30:7b:3c:c1:c8:78:6d:ab:4e:
         cc:93:89:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:52:40 2025 by rpki-client