Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/3e3d04cd-48bb-3957-8098-be0ff39aebe2.roa
File:                     3e3d04cd-48bb-3957-8098-be0ff39aebe2.roa (raw, json)
Hash identifier:          nN3m25REhSfA/s2QTNNAE0lhstK55/64HEGgUXpTqtk=
Subject key identifier:   4F:3E:13:B4:08:76:05:C8:7C:68:2C:24:2E:0F:70:BD:C0:6C:09:2C
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584AC2E0EFB91C2A99C20BB17240
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/3e3d04cd-48bb-3957-8098-be0ff39aebe2.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     11269
IP address blocks:        69.17.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:ef:b9:1c:2a:99:c2:0b:b1:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=52f19bcf-6579-4c70-a18f-9fd90065493f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9e:25:0c:bf:fb:7c:70:57:4b:f0:00:07:3d:
                    b8:4b:6d:32:a5:f1:79:87:46:16:31:c4:65:8b:26:
                    21:70:b0:9e:f7:ee:4f:88:24:73:18:c5:7d:c2:be:
                    bd:6d:d0:9f:e9:f8:91:04:c7:70:4d:46:b9:46:d3:
                    dc:54:c1:3e:86:1a:70:68:21:72:f2:5a:8a:2d:cb:
                    d2:06:6c:fc:7a:5f:53:1d:d7:8f:4d:97:37:ad:f2:
                    6b:11:a2:a9:36:c4:23:84:15:15:2e:79:ed:e8:37:
                    4e:af:ab:00:d1:cf:91:c9:5e:8e:3e:5b:13:b6:90:
                    69:4e:c3:59:86:4c:29:7f:35:80:32:9e:49:1a:1d:
                    9c:92:5d:04:cb:bc:ad:ee:97:ae:5a:8f:ce:0e:9b:
                    44:87:95:c9:12:72:64:8a:4d:46:62:e4:96:f9:e4:
                    bf:85:22:55:1b:d3:31:d5:6d:ca:c0:ad:8f:df:c3:
                    94:04:c8:04:98:06:12:61:4f:1d:39:d8:ca:c6:46:
                    e4:ef:80:50:26:f5:04:61:79:f4:05:a2:30:b1:e7:
                    58:44:ba:bb:6f:82:04:5f:07:a5:90:76:29:1a:62:
                    0c:d2:16:0b:c3:4d:ff:44:ae:24:4b:8d:ec:fd:4d:
                    68:2d:c5:13:9b:1a:ce:7f:49:17:93:d3:00:5d:63:
                    50:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3E:13:B4:08:76:05:C8:7C:68:2C:24:2E:0F:70:BD:C0:6C:09:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/3e3d04cd-48bb-3957-8098-be0ff39aebe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:40:32:02:47:2d:28:a8:90:18:40:28:87:80:b9:c1:e0:31:
         e1:1e:6f:0d:06:29:de:2d:a4:6f:6d:ae:21:ba:b8:0e:85:ad:
         aa:f5:d6:f1:f0:4b:fb:30:f3:ad:bb:b0:95:03:bd:41:94:14:
         45:b0:7c:c6:de:ec:a9:82:fd:df:dd:7a:ae:84:fc:23:14:95:
         c2:1c:d2:96:4f:c7:7d:83:b4:44:ed:19:b7:1f:dc:e5:5f:97:
         3e:e1:7f:8a:6c:4a:49:58:ef:28:2e:c1:3e:82:ec:ab:81:94:
         07:85:a8:af:a3:86:9c:cb:49:7a:b9:a5:a5:f7:ac:9e:94:c1:
         46:9e:5e:e5:b9:cc:9d:7a:85:ab:e0:76:0b:7a:4d:d2:29:b6:
         83:cb:c2:bf:d5:42:e8:ed:e8:bb:3a:da:9a:96:e5:d4:de:50:
         5d:14:43:39:70:1f:e8:68:c7:c0:f3:9d:59:44:47:df:4e:b8:
         57:d4:5a:d2:d3:92:9d:ee:fc:64:04:30:c1:d3:be:91:25:b0:
         b1:ab:7c:57:14:1e:93:3f:8a:aa:e4:98:c1:08:2e:01:f1:9f:
         cc:f6:a0:f7:50:1e:cb:9d:e4:69:5a:40:a5:b0:d4:6e:69:4f:
         f7:8f:32:fe:1f:f8:98:e5:a1:ab:67:c2:0e:ed:01:6c:2e:2e:
         2a:78:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:10:53 2025 by rpki-client