Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7cee06e8-d080-300e-a759-0594b0114554.roa
File:                     7cee06e8-d080-300e-a759-0594b0114554.roa (raw, json)
Hash identifier:          8pFEP55R+VbQfkUsPXxgIT7JsyPZ1fNGB7d0tAfZkpc=
Subject key identifier:   1B:53:02:B3:E2:B3:4E:4E:30:7F:DB:AD:50:CA:B2:94:1E:C1:B2:46
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584BBFA5974A5991B6503B9AD8C0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7cee06e8-d080-300e-a759-0594b0114554.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     30104
IP address blocks:        69.74.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:97:4a:59:91:b6:50:3b:9a:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=22182fb2-1feb-4eb9-a055-78248e32d62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3a:7c:7b:46:00:2e:69:85:3e:93:da:7d:c7:
                    d5:7f:ac:26:83:58:8d:36:d7:f4:4a:51:53:78:15:
                    d0:9d:31:dd:ba:81:70:4b:ee:37:14:5a:29:b2:d1:
                    8e:57:80:85:6f:20:bd:c1:6e:9d:a8:69:7f:cc:7c:
                    d4:07:3b:52:87:63:e1:96:b0:81:dc:28:b3:7d:5e:
                    43:64:cc:08:71:94:e6:04:06:98:be:dd:76:98:f2:
                    ca:5f:b3:0d:de:c8:1b:28:ce:af:ac:e8:0f:e5:ba:
                    70:07:f8:8f:42:1a:1a:69:eb:5c:19:a6:88:af:c4:
                    1c:7a:79:9e:d4:8b:33:15:05:0f:59:36:89:d9:48:
                    56:d3:8f:4b:bf:8c:28:d8:b1:40:c4:03:61:a3:55:
                    77:2a:38:c7:5a:03:a3:bd:bf:63:7e:e0:ee:e7:01:
                    fc:17:25:25:60:e8:e1:5d:ab:7b:3c:54:67:2d:3a:
                    6c:fa:c7:9c:3d:f1:0a:e2:9a:6c:e1:1a:bc:5f:2c:
                    d3:e6:1a:27:15:53:59:3b:85:54:29:a4:50:5d:94:
                    19:ad:4d:84:fa:47:76:09:72:44:fa:f0:34:91:bb:
                    12:a4:01:6d:27:cb:89:2e:1f:1b:e5:b9:24:be:e2:
                    16:de:ca:45:26:05:49:8f:93:6d:0b:9d:66:d7:a8:
                    4e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:53:02:B3:E2:B3:4E:4E:30:7F:DB:AD:50:CA:B2:94:1E:C1:B2:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7cee06e8-d080-300e-a759-0594b0114554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:62:bc:f2:da:dc:05:d7:95:a0:ee:86:37:b0:58:39:5a:c6:
         e0:50:63:4d:28:0f:5f:97:53:2d:4b:d6:a5:9a:76:25:c3:97:
         50:8f:ab:a6:9c:9d:f7:2c:bc:d0:4b:5a:5d:10:b7:2f:6c:10:
         c3:e9:7f:51:dc:61:9d:0e:d0:9c:ae:db:ea:12:45:cc:1d:85:
         28:01:f7:65:51:b9:fd:14:92:23:69:75:3f:96:14:bd:d0:8f:
         06:b4:ba:29:db:ed:21:ba:b8:e9:07:37:c8:63:27:b0:1e:b1:
         66:80:46:ca:82:87:3b:49:5a:d2:57:e4:6b:0f:c1:c3:24:d8:
         f0:73:f2:c2:d0:7f:3e:9f:61:96:52:e2:aa:6f:54:08:55:f4:
         6a:bf:eb:2f:bd:7c:94:1b:37:ea:8b:01:f8:90:ff:8d:f9:2c:
         be:21:05:37:c1:f7:07:b0:80:9f:64:b7:44:2f:44:f2:30:8f:
         d9:0a:9c:0e:d2:28:24:e4:75:e0:bc:e6:39:bf:c9:c0:be:1d:
         4a:a3:9d:39:80:71:47:cc:32:65:e7:c6:73:b9:95:ec:18:68:
         cd:b8:d1:bd:77:c5:a0:4d:55:5c:b5:a5:87:5a:2b:c0:ea:b0:
         e9:54:0c:6e:b1:f0:9d:f6:83:9a:3e:0a:f0:b6:76:2c:bf:66:
         d0:73:f7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:15:35 2025 by rpki-client