Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/9198844d-d006-3e70-be28-eb806d092492.roa
File:                     9198844d-d006-3e70-be28-eb806d092492.roa (raw, json)
Hash identifier:          u8LPGbfPP9mTP05etgwVQT2PZa/DOV2biD9/1xuGvI0=
Subject key identifier:   14:81:BA:B1:B4:AF:E3:C6:56:35:18:79:FF:91:F1:E9:3F:09:F7:98
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584AC2E0DC9A838511D0E91EF680
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/9198844d-d006-3e70-be28-eb806d092492.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     11260
IP address blocks:        24.224.128.0/17 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:dc:9a:83:85:11:d0:e9:1e:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=f046603b-f854-4cfa-828f-a1ac9a67b421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:93:c6:91:60:a9:4f:b1:5a:47:ff:bd:c6:
                    b3:95:06:11:25:aa:0f:d9:f9:4c:ca:cc:f4:76:76:
                    a5:87:6e:ff:cf:70:6f:5d:1e:e6:2d:77:6c:60:28:
                    e9:3a:a0:e4:64:d4:2c:94:43:27:f0:ec:de:24:52:
                    9e:41:66:88:f1:58:17:15:ca:06:a0:b5:b3:97:1c:
                    30:64:ee:15:51:82:58:f6:b9:2e:cb:4d:c6:df:cf:
                    c2:8b:e8:68:66:8f:ae:fb:de:2e:8e:0e:ac:fc:bf:
                    45:34:4d:c2:dd:4a:88:85:9c:e2:a1:d4:4f:aa:a0:
                    2b:1b:72:fb:1b:c0:de:a1:8a:24:1e:2c:f3:ca:ea:
                    de:e9:01:92:f6:fd:4e:68:cd:c3:aa:96:86:03:1a:
                    db:a7:1d:c8:bf:4f:3a:1c:04:6d:07:de:4d:c6:88:
                    33:3d:f3:08:6c:31:b2:29:18:29:87:06:1b:8c:a4:
                    f6:ea:41:4b:6e:92:5e:a1:8a:b4:b7:47:da:17:a2:
                    97:f8:da:f7:0b:52:1b:39:e6:02:1a:ec:2b:77:39:
                    e7:dc:5f:bd:c4:e5:7d:32:6a:c1:b7:0b:2b:5d:32:
                    bb:84:84:da:4f:73:95:fa:50:d0:30:f5:3b:51:ce:
                    52:7f:85:d9:03:e3:27:57:3c:8c:7a:90:60:45:a9:
                    07:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:81:BA:B1:B4:AF:E3:C6:56:35:18:79:FF:91:F1:E9:3F:09:F7:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/9198844d-d006-3e70-be28-eb806d092492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.224.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:c0:f4:24:5e:9d:6b:c8:22:5e:08:a4:7a:e3:5a:d2:e2:12:
         26:3a:c8:5a:00:d2:75:91:bf:25:24:0e:41:ef:12:14:07:1d:
         74:37:89:4e:d0:cb:38:31:81:fd:dd:d8:b6:ca:00:d7:11:2c:
         ee:78:6a:bd:99:d4:b8:a0:b3:97:0a:b1:d1:74:bb:46:29:1c:
         88:8c:f5:f7:0f:e4:8b:89:e4:bd:32:27:0c:a7:17:60:02:33:
         27:28:c7:a1:11:87:cd:54:10:3a:14:08:98:c7:43:e2:1f:0f:
         a0:31:77:86:d4:54:7e:d2:e7:6d:e6:c6:86:05:d0:de:a1:52:
         79:8b:33:57:fb:b3:7d:08:81:5a:ef:f3:f3:ad:41:ca:d6:9b:
         3e:65:a7:f8:2a:b8:3e:24:c1:99:0f:6a:3a:36:a0:8d:ab:1a:
         1d:ce:92:fd:a1:71:81:af:73:e3:87:69:9c:6b:fa:fc:71:d7:
         0d:90:ff:45:69:18:8d:cc:88:5a:3b:82:83:06:e9:07:9d:66:
         e6:29:f6:ef:98:a0:da:99:ae:d5:83:55:bb:b4:97:01:42:dc:
         c3:e7:eb:7e:a6:5f:0d:7c:91:ee:fc:06:2c:3b:85:3d:b0:13:
         0e:89:e2:ed:dd:f3:90:1d:2f:c5:c8:ea:95:bf:3a:33:5f:b9:
         82:13:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:12:35 2025 by rpki-client