Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/bf76ee77-0e56-32c1-9b7c-ed6aa31420ae.roa
File:                     bf76ee77-0e56-32c1-9b7c-ed6aa31420ae.roa (raw, json)
Hash identifier:          UcubAawBhe+tE6BUkpY7vrAfcA82Zo8YI96YmDBNcbw=
Subject key identifier:   F8:2F:32:7C:D0:6D:7B:65:6A:32:53:2F:F9:F3:FF:7C:63:5E:9C:54
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584A8D6D69FD430B3D3E51817F80
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/bf76ee77-0e56-32c1-9b7c-ed6aa31420ae.roa
Signing time:             Thu 17 Jul 2025 21:30:12 +0000
ROA not before:           Thu 17 Jul 2025 21:30:12 +0000
ROA not after:            Wed 15 Oct 2025 21:30:12 +0000
asID:                     31898
IP address blocks:        69.48.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:6d:69:fd:43:0b:3d:3e:51:81:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Jul 17 21:30:12 2025 GMT
            Not After : Oct 15 21:30:12 2025 GMT
        Subject: CN=976e38b1-a7a2-492e-a4f1-efb758741205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:77:2f:05:f0:1a:44:74:50:a8:1b:be:47:
                    03:04:a1:58:d8:f8:b9:c9:3e:ee:30:06:70:82:9a:
                    db:3f:68:66:61:8f:44:b5:67:2d:d6:47:83:f5:a0:
                    8e:6c:d6:02:7c:6c:d5:26:91:6c:bd:f2:84:da:de:
                    6b:4e:b8:cd:10:fc:b9:a5:98:ac:20:da:aa:fd:68:
                    94:8c:00:29:d9:a7:66:1c:e4:0d:33:41:b3:3e:9e:
                    82:27:3a:7b:d0:93:fe:bf:09:a7:45:3f:76:74:6a:
                    c5:93:1f:22:d4:20:ef:43:0b:f0:b5:d1:cd:c5:03:
                    be:b1:df:20:02:e3:af:ff:15:8d:bb:58:be:27:f4:
                    72:af:d4:33:d7:6e:32:dd:5f:c8:8b:58:44:dc:44:
                    6e:4e:ac:a2:ea:81:a2:0e:de:a2:83:b9:92:8a:c5:
                    3f:51:3b:e5:d1:08:73:6c:72:80:7c:76:f6:ec:e0:
                    f6:e7:8b:01:37:e8:08:d4:99:0b:74:6f:bd:09:3b:
                    5b:30:06:a8:96:10:1c:02:fd:d5:0a:98:1d:eb:2f:
                    63:f3:d2:ff:27:42:7e:59:30:7e:91:4c:0d:7d:8c:
                    11:d1:3c:25:ab:dc:b5:ad:51:18:48:e1:2e:6f:b3:
                    02:c1:7b:30:be:c7:6f:aa:20:45:10:00:bb:8e:ea:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2F:32:7C:D0:6D:7B:65:6A:32:53:2F:F9:F3:FF:7C:63:5E:9C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/bf76ee77-0e56-32c1-9b7c-ed6aa31420ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:4e:51:1f:8b:c4:bd:8e:b3:2a:5e:d1:cb:1f:6f:9a:bf:2e:
         77:6f:52:bf:80:2a:6d:48:3b:a7:c8:31:73:aa:89:d7:2c:9c:
         43:b7:ca:55:34:1d:f0:37:8c:1a:5b:91:a9:a8:7d:b2:d3:d4:
         d3:e8:30:ec:04:f7:02:90:a8:d3:a4:f0:61:ae:87:a4:48:d7:
         38:76:33:f3:14:30:46:8f:80:c3:b4:63:f7:5c:fc:89:bc:55:
         78:a3:4a:77:27:53:14:c0:58:36:a0:bc:93:28:50:6d:43:eb:
         99:3a:6a:7b:28:c2:9a:6d:54:56:7d:96:94:ad:c9:f7:bb:e7:
         d5:c6:46:e9:12:6e:4e:0c:da:84:67:85:b4:6f:43:0c:d0:86:
         16:09:cf:91:8e:fc:7a:16:2b:c6:4e:ce:54:00:5a:36:11:00:
         82:d3:e8:95:f7:c2:ab:26:5b:c6:4d:18:0a:c1:f8:ed:3a:92:
         55:1d:fc:fd:aa:2a:57:0b:af:a8:b5:c8:e9:be:4a:d8:6c:51:
         a5:21:84:fd:83:1e:fb:5b:ff:c1:d5:7b:42:5c:4a:f9:8d:c4:
         ff:ff:67:16:e0:93:2a:93:e4:05:91:58:99:af:4c:b3:ac:98:
         da:20:77:6e:19:3c:7c:d5:51:98:00:5d:b9:7c:20:d9:ef:44:
         ff:53:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:46:54 2025 by rpki-client