Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df5be5d8-dcd3-3dbc-98f5-0d43eab408a7.roa
File:                     df5be5d8-dcd3-3dbc-98f5-0d43eab408a7.roa (raw, json)
Hash identifier:          aSzlqezAW2CmuBih4XEQbvIYNfCfs2EzZjw7/dmm5W4=
Subject key identifier:   8A:21:11:C4:F5:3B:C0:F9:EF:CD:45:DE:C9:2F:0E:4C:5B:23:A9:F3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161A5FD5E5E3A4305256700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df5be5d8-dcd3-3dbc-98f5-0d43eab408a7.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     12271
IP address blocks:        69.206.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:a5:fd:5e:5e:3a:43:05:25:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=9f9c1c12-b234-4b5a-9526-55dc63425de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:e3:bf:b6:30:4c:52:2f:1a:d8:e2:68:96:
                    db:fa:0a:9d:4b:80:d6:b2:21:75:30:fa:18:07:64:
                    f6:ff:77:3f:72:ab:89:85:f0:cf:69:db:e9:62:07:
                    c6:4c:61:bf:1a:9f:ca:f2:34:72:30:c9:c3:c7:6e:
                    c5:6d:ca:5a:b3:67:4a:c8:db:79:f4:b5:cb:0d:a2:
                    38:2e:3c:bf:87:34:23:a7:d3:ae:36:76:34:fb:3a:
                    b4:b4:1b:6e:06:33:1c:89:c3:38:c3:c8:4b:73:eb:
                    13:c9:95:a6:a5:52:19:a1:7d:e3:16:b1:f5:f1:17:
                    b3:36:1b:a4:c8:b8:f8:6c:ff:67:7d:07:50:28:31:
                    05:4f:9c:c6:8d:9f:a1:41:08:f7:f4:52:b7:3a:21:
                    fb:50:cf:ec:55:fe:5d:27:9f:53:9e:81:f4:90:27:
                    97:8c:bc:8f:41:76:57:8d:36:01:28:cc:c4:8b:a5:
                    3f:65:3c:70:09:57:5b:24:f5:21:85:5e:f0:b6:6b:
                    bb:69:37:fe:dd:82:5e:c8:f4:54:5e:22:83:13:f8:
                    f6:43:56:da:c5:1d:ae:e3:b0:2c:df:0e:be:77:19:
                    cd:48:f7:c2:38:62:28:1d:7d:92:24:a8:f7:72:df:
                    07:1e:e3:95:be:90:d8:7e:c6:38:bc:f6:da:7d:53:
                    e5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:21:11:C4:F5:3B:C0:F9:EF:CD:45:DE:C9:2F:0E:4C:5B:23:A9:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df5be5d8-dcd3-3dbc-98f5-0d43eab408a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.206.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4e:23:50:07:71:53:b0:b4:2b:80:75:19:5a:c7:39:e7:4e:
         8e:27:1f:9a:19:aa:27:eb:43:a0:72:54:c6:77:72:15:0b:5e:
         96:6a:d6:ce:ec:37:bb:2c:c0:73:11:d2:af:3b:58:14:bf:93:
         f6:ca:d0:5b:75:ef:33:9a:db:c5:f8:cb:12:2f:0d:5b:1d:81:
         b7:bc:71:5a:52:31:b8:16:bb:e8:b3:2b:b7:5f:42:f2:4c:87:
         4b:2a:c2:1f:e4:34:25:ab:51:26:8f:e3:ef:2b:43:1b:74:95:
         06:3c:19:1c:b1:19:cf:61:f2:ce:be:44:15:bc:43:e2:96:a8:
         0c:69:43:31:43:c1:f9:14:f1:f7:01:2c:71:92:54:92:e7:df:
         b1:e1:16:c8:82:23:a4:4f:49:0d:64:3d:22:71:20:a9:84:c2:
         93:da:c6:e7:0f:e6:8b:4d:ec:5c:e1:51:20:70:f1:c8:7f:25:
         5f:c6:fd:7c:e2:28:82:b0:96:50:80:67:a6:6f:72:4b:ee:5d:
         4f:ed:57:78:5f:b7:5b:b3:09:15:96:a8:48:38:40:6d:52:0a:
         a0:96:e3:07:1f:12:3d:cb:ed:e9:ea:c9:dc:36:94:4f:08:93:
         0e:35:5f:3c:e7:0d:71:90:ac:61:30:79:1e:1f:f4:d8:ce:9c:
         c6:da:7d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:34:25 2025 by rpki-client