Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/5d5485ac-f685-3d18-a80f-264a0c5d64e1.roa
File:                     5d5485ac-f685-3d18-a80f-264a0c5d64e1.roa (raw, json)
Hash identifier:          01QbxzUibbN0LqQtF0hEuLBE/oWS/fdiUOlIebinpfc=
Subject key identifier:   CF:62:44:82:01:63:B9:6A:B6:CC:5B:EF:CE:8E:1A:51:28:B5:22:92
Certificate issuer:       /CN=3f915079-cb02-4279-8f5b-48fa6683491f
Certificate serial:       010D0C9F4328584A9BCB73A7B094F6B5CF3AD290
Authority key identifier: 07:DF:56:61:C8:1B:79:E2:8C:D8:39:70:66:A3:FD:C2:3D:27:13:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/5d5485ac-f685-3d18-a80f-264a0c5d64e1.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     16509
IP address blocks:        69.67.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/3f915079-cb02-4279-8f5b-48fa6683491f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/3f915079-cb02-4279-8f5b-48fa6683491f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:73:a7:b0:94:f6:b5:cf:3a:d2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f915079-cb02-4279-8f5b-48fa6683491f
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=e0759486-4774-4feb-866a-dca18db7a201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b7:9b:03:6f:64:49:73:36:f4:79:bd:eb:1f:
                    4b:df:14:98:7b:df:e6:b4:c0:36:e9:1a:1b:e1:df:
                    45:9e:af:5f:4a:1b:c6:eb:73:f2:cf:1d:06:f8:2b:
                    37:0b:95:b5:d5:1c:02:96:b2:2a:f9:2d:ac:b3:a4:
                    1b:db:16:c8:c5:42:e1:c6:f8:2d:3e:76:c5:41:be:
                    b1:be:4a:d9:ef:54:51:f4:93:4d:50:18:32:b0:40:
                    61:66:ef:19:bb:2d:34:47:52:46:81:ea:37:de:56:
                    0d:8b:09:c5:30:d2:ca:7b:ca:61:ac:0b:d1:63:74:
                    24:d8:71:16:47:7e:a5:68:31:30:77:9f:83:86:f3:
                    d2:9a:39:d6:9c:52:b0:dc:0c:62:3c:89:79:c7:5b:
                    59:5f:fc:62:03:c1:1a:d2:7a:94:53:88:ca:fb:17:
                    5e:63:b1:f8:01:d0:01:b0:12:5d:3d:47:a4:a6:3a:
                    0f:81:f5:01:8d:06:19:0f:a3:9e:dc:33:91:d5:d9:
                    0e:4e:ba:96:ef:f3:b7:ed:36:ce:1c:2d:23:cf:a7:
                    f4:19:45:7b:03:72:24:d6:67:2e:29:e8:69:2b:ab:
                    ea:62:11:03:a6:36:22:b5:9e:8b:30:f6:97:66:ce:
                    5c:82:90:31:49:2e:40:79:c3:1e:32:fa:b6:1b:52:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:62:44:82:01:63:B9:6A:B6:CC:5B:EF:CE:8E:1A:51:28:B5:22:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/5d5485ac-f685-3d18-a80f-264a0c5d64e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f/3f915079-cb02-4279-8f5b-48fa6683491f.crl

            X509v3 Authority Key Identifier:
                keyid:07:DF:56:61:C8:1B:79:E2:8C:D8:39:70:66:A3:FD:C2:3D:27:13:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f915079-cb02-4279-8f5b-48fa6683491f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:92:3c:cf:02:64:57:f5:3b:02:80:1f:4e:c4:f1:5c:d7:fd:
         9e:00:68:c4:58:05:9d:b5:8c:07:1d:68:ca:80:a4:24:a5:e0:
         c9:4a:e1:55:08:b2:d9:d6:e6:75:ef:31:92:36:b6:d0:d6:a5:
         e1:85:5c:24:b1:1a:9b:08:b6:83:40:31:0b:89:b2:02:6b:aa:
         c3:5b:46:0b:42:7f:6b:99:36:49:bc:bc:d1:01:ad:7f:10:52:
         be:b2:71:45:4a:f7:bd:c1:34:d3:6c:bc:2b:11:fc:6e:3b:ff:
         31:ba:6f:d9:c6:52:29:0b:4a:4e:0f:5c:2e:58:46:eb:b4:2e:
         16:a9:04:b0:18:88:49:76:bf:db:69:3d:4f:14:87:cc:13:fe:
         ff:71:8c:31:16:22:ba:3e:12:46:e4:a9:d7:b5:ca:4a:7a:28:
         34:35:b3:32:4c:6b:a0:92:5a:8f:5c:64:20:40:5f:29:a6:45:
         0d:bc:fb:af:26:ec:03:3f:e7:75:9c:64:4b:a1:8a:10:13:61:
         0d:1f:06:94:9c:1b:71:e8:f8:50:a8:20:34:85:b3:e5:23:46:
         9d:5b:b8:da:87:07:c6:13:d3:c1:5b:79:43:61:cf:87:90:7d:
         58:b5:51:fb:fc:39:c8:be:b2:e4:8f:c8:bb:d6:fd:c6:95:0d:
         d1:6d:b5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:11 2025 by rpki-client