Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/1d3a9341-cfbb-3583-868c-ffe8e31a8e6b.roa
File:                     1d3a9341-cfbb-3583-868c-ffe8e31a8e6b.roa (raw, json)
Hash identifier:          2hmEMU7KMIWjz1GvsB3HKFjmwauJ7kl1I7KUeDS9NMQ=
Subject key identifier:   95:E7:5B:BD:56:41:58:B3:D8:9D:04:88:40:4A:89:14:05:0D:6D:57
Certificate issuer:       /CN=3f915079-cb02-4279-8f5b-48fa6683491f
Certificate serial:       010D0C9F4328584A9BCB73CC0B0165B978177100
Authority key identifier: 07:DF:56:61:C8:1B:79:E2:8C:D8:39:70:66:A3:FD:C2:3D:27:13:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/1d3a9341-cfbb-3583-868c-ffe8e31a8e6b.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     14618
IP address blocks:        69.67.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/3f915079-cb02-4279-8f5b-48fa6683491f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/3f915079-cb02-4279-8f5b-48fa6683491f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:73:cc:0b:01:65:b9:78:17:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f915079-cb02-4279-8f5b-48fa6683491f
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=ea5a5129-9e37-4ade-8968-12a68bd79c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:81:58:61:a1:a8:fb:97:13:c3:a1:a9:b9:
                    4a:24:2c:63:41:7c:97:b0:31:14:df:39:87:04:a0:
                    9f:43:2a:fc:27:d8:4b:88:43:bc:6c:9a:a3:7d:d3:
                    95:c8:25:91:1d:d5:eb:8b:c3:54:52:33:81:22:e6:
                    c5:d1:06:1c:a4:82:16:c3:63:9e:13:29:bd:12:4c:
                    63:17:c7:78:77:02:17:45:3d:60:2a:b9:c8:0d:72:
                    42:65:69:b3:71:f4:d2:01:f6:ef:19:81:65:9f:2b:
                    f5:77:f1:e8:69:07:75:2a:5f:f2:dd:6b:36:f1:0c:
                    ca:ad:5b:45:80:8c:b4:2a:de:0e:d7:c7:f5:cc:d6:
                    9a:8c:2e:cd:cd:c8:01:b2:62:36:76:aa:38:d7:d7:
                    73:b9:9a:d4:9c:f8:97:8b:a7:47:bf:dc:cb:3d:94:
                    cb:83:b1:2e:9c:2a:7d:29:2b:97:02:13:cf:98:16:
                    4f:72:ab:ba:d1:4d:73:a0:ce:87:7c:93:f2:50:10:
                    e7:8d:34:af:a0:a8:fa:2b:d1:4e:89:52:04:cb:68:
                    35:cc:ac:0e:11:bc:28:9f:7b:c9:24:f7:49:22:f0:
                    51:de:09:bc:23:32:d0:d9:67:b7:05:ec:bc:e0:9b:
                    fe:31:f5:98:02:01:c7:2a:6c:d6:fa:cf:e4:21:99:
                    9a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E7:5B:BD:56:41:58:B3:D8:9D:04:88:40:4A:89:14:05:0D:6D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/1d3a9341-cfbb-3583-868c-ffe8e31a8e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/3f915079-cb02-4279-8f5b-48fa6683491f.crl

            X509v3 Authority Key Identifier:
                keyid:07:DF:56:61:C8:1B:79:E2:8C:D8:39:70:66:A3:FD:C2:3D:27:13:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:8c:b7:45:1f:89:54:75:38:e3:da:34:06:cd:bc:07:c3:3e:
         74:90:26:2f:6a:aa:3c:c6:24:4c:73:dd:6b:d6:da:1e:ee:e3:
         83:55:93:b2:9f:fa:3f:6f:83:99:aa:ef:f8:4f:2c:42:05:f5:
         eb:91:9c:71:1b:d7:5f:89:5f:f0:42:64:0c:78:6b:b5:dd:cf:
         9b:c2:35:a6:dd:16:ed:4f:cc:a2:7e:8b:10:7a:5d:ff:c5:40:
         c4:3e:5c:05:4b:48:34:3f:51:f8:cf:2b:5b:39:15:6e:b9:09:
         9e:5a:32:70:93:07:df:37:94:22:82:4c:44:08:43:c6:92:5a:
         67:d5:13:f0:f6:c7:89:c4:e3:1c:d5:0c:eb:81:ba:3e:b4:64:
         bd:b3:ab:6b:1f:a6:05:d9:e3:27:db:9c:79:a0:0f:23:04:cc:
         b2:ce:dd:65:8f:38:a7:9c:b1:f9:4f:e8:e7:a4:d8:e8:b6:76:
         da:dd:13:90:e1:b9:cb:7b:0b:9a:ac:87:e4:19:4d:13:6c:6f:
         65:ac:09:88:19:06:97:bc:c4:bc:5f:d8:c0:2e:52:f6:65:67:
         7c:33:e1:77:c1:2b:35:15:87:37:c0:3d:85:4c:68:30:96:21:
         b6:68:d0:e6:91:c0:21:d5:99:d5:1f:ca:b5:de:ed:11:da:f5:
         f2:ba:76:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:49 2025 by rpki-client