Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/67367253-76fa-3362-97d4-2489fbc45738.roa
File:                     67367253-76fa-3362-97d4-2489fbc45738.roa (raw, json)
Hash identifier:          lUikaaBoThKJFt7Uzy0tKBDUHkfSjnHUoyh40cb/+6Q=
Subject key identifier:   F4:FF:DF:90:90:22:A3:27:AB:AF:09:03:7D:6D:38:A7:AA:D5:40:75
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F4328584A9FFBA771EFB7E6AE80810080
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/67367253-76fa-3362-97d4-2489fbc45738.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     33139
IP address blocks:        69.57.214.0/24 maxlen: 24
                          69.57.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a7:71:ef:b7:e6:ae:80:81:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=2a67751c-42aa-474f-8499-a0d78b075a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:65:91:ab:70:8b:9d:62:a4:5a:7f:5a:bb:80:
                    dd:d9:c0:23:13:d8:4f:9e:18:46:d6:32:77:0a:77:
                    69:6e:3d:40:0b:f5:07:93:75:f1:58:1d:cc:4d:9c:
                    f5:4d:d8:df:5c:a8:b8:76:38:3b:28:7d:f9:c7:1f:
                    c2:97:37:a6:d2:6b:35:c1:0e:5e:c0:bc:53:ec:67:
                    97:0e:60:b9:b5:08:0b:85:b9:e9:3d:83:5f:e0:68:
                    f3:83:f3:b1:50:f6:45:c0:b3:89:e0:de:06:68:d0:
                    a6:06:eb:1e:65:9a:43:66:c7:87:67:32:04:0d:aa:
                    e4:13:3d:02:c5:e7:12:ed:41:87:cd:fe:11:ee:19:
                    e6:9e:20:71:c4:72:c3:3e:d0:c8:18:94:bd:88:be:
                    c7:36:b9:32:03:16:25:ac:52:8b:ab:2d:fb:71:c5:
                    e1:79:a9:77:b5:f7:49:5d:2e:07:4f:17:52:1c:9d:
                    18:b6:ce:04:75:c2:78:e8:68:19:bc:fa:ed:71:0e:
                    7e:7c:75:30:d3:14:ad:ad:31:34:fe:05:af:7e:d6:
                    d2:36:d4:c1:d4:ce:73:fc:ab:31:6b:aa:17:8c:21:
                    88:14:f3:b1:8d:92:e4:54:b0:40:03:bf:92:bd:b2:
                    21:1a:95:36:e5:1b:f3:63:cc:8f:1e:35:27:31:2f:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FF:DF:90:90:22:A3:27:AB:AF:09:03:7D:6D:38:A7:AA:D5:40:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/67367253-76fa-3362-97d4-2489fbc45738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.57.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:36:de:e1:ec:ce:97:8f:b3:98:95:e3:ee:1e:07:73:f4:31:
         8a:83:c8:70:db:96:47:11:ac:31:43:7f:17:06:2b:d2:09:d5:
         b3:e7:85:4f:f7:15:db:85:00:b6:65:02:de:3a:63:b0:9c:61:
         08:c8:37:99:57:0c:61:d6:a3:b6:28:ae:77:e8:32:d7:08:74:
         ce:a9:70:d2:04:ae:5f:4b:97:5c:60:b8:5a:3d:ac:38:7e:2d:
         4a:71:88:bb:7b:98:88:6e:43:cd:6a:a0:50:45:33:57:23:71:
         a4:84:d6:78:30:d8:94:d8:51:9f:63:8b:d4:35:fa:e3:e6:60:
         5f:a2:5d:2f:2b:75:73:4d:a2:00:5e:45:d2:4d:0d:ba:5a:73:
         1a:59:a1:fb:56:85:02:f1:7b:0b:27:97:1e:c4:e9:cf:6a:c1:
         24:9d:0d:0a:b3:51:45:f8:7b:e4:9e:75:47:e2:dd:44:a8:83:
         4a:75:2c:de:34:5b:bb:b2:9f:32:1b:8f:fa:ed:01:ad:41:77:
         5d:ba:29:ca:b1:ff:58:59:4a:dd:68:f7:32:05:5f:3f:0e:fb:
         68:ce:02:83:85:85:af:2e:78:75:69:5f:5c:80:7c:5b:a0:88:
         ae:56:df:5a:11:f4:16:07:3f:61:ea:f4:4c:b8:95:07:64:c4:
         b9:23:77:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:46:43 2025 by rpki-client