Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/fdbac8fe-8e12-396e-85a0-fb48f3f751e5.roa
File:                     fdbac8fe-8e12-396e-85a0-fb48f3f751e5.roa (raw, json)
Hash identifier:          kXGTY1M1VeyVmqzYcoSv61EEcp6ZDaWWWy8ytdyOXsw=
Subject key identifier:   70:2B:01:CA:2F:90:43:53:33:FA:D8:94:EC:42:38:69:49:6B:DC:A4
Certificate issuer:       /CN=6e10601c-e280-4510-9d84-b6d2b02b8446
Certificate serial:       010D0C9F4328584A6C55E022E6B25D5B45E8DE80
Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/fdbac8fe-8e12-396e-85a0-fb48f3f751e5.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     393397
IP address blocks:        69.72.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:e0:22:e6:b2:5d:5b:45:e8:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=2cbc9edb-eb49-4c25-ba02-2408a5940201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7c:d4:1b:b7:d6:3b:01:f7:16:51:8d:eb:d0:
                    54:08:ee:c3:9e:a4:12:a3:b2:2c:db:a6:81:07:45:
                    0b:23:c6:20:e0:b4:26:86:92:de:49:7f:ed:24:23:
                    65:4c:d8:52:31:23:65:a3:47:95:62:a4:1f:3c:c3:
                    11:19:1b:04:73:60:7d:ff:88:65:66:e8:5a:25:82:
                    64:93:af:72:94:96:5f:2c:da:1b:94:13:fb:b2:c9:
                    c4:4d:a1:93:8d:81:e6:6a:a2:35:fa:b4:29:9c:ac:
                    41:34:22:6e:5c:14:9a:0b:9d:41:44:80:12:52:80:
                    5a:7a:b6:39:5c:66:66:65:6f:e7:50:dd:32:18:0b:
                    22:a9:2c:66:ae:17:37:65:39:7c:eb:05:2d:ab:a6:
                    5f:4d:00:9d:bb:3b:06:23:7c:71:01:e7:79:03:cb:
                    30:0f:d1:ac:79:99:1e:dd:9f:83:40:84:43:90:f7:
                    64:9a:97:fb:9f:71:61:41:c3:77:b6:f1:ca:fc:d0:
                    af:5a:46:cf:88:46:4f:53:93:8e:0a:d0:a3:9e:e2:
                    96:55:2c:7a:23:53:5d:e3:e2:d9:28:54:d2:08:e1:
                    7c:f2:49:55:17:45:20:0b:1c:07:e4:f9:46:e4:52:
                    2a:27:3e:47:a8:32:da:90:da:4e:0a:8a:66:2c:bd:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2B:01:CA:2F:90:43:53:33:FA:D8:94:EC:42:38:69:49:6B:DC:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/fdbac8fe-8e12-396e-85a0-fb48f3f751e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl

            X509v3 Authority Key Identifier:
                keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:1f:c4:69:9f:31:6f:e0:97:b3:8e:85:58:63:28:78:51:b6:
         e5:50:68:d0:d4:5b:86:83:0e:c4:ca:a3:f6:8c:5a:5d:f5:eb:
         d8:07:eb:23:e3:53:69:49:f7:af:70:e7:be:a1:fb:3d:c8:9c:
         1e:bf:48:87:13:2b:82:8f:25:16:37:23:f3:bc:9c:43:4c:25:
         9b:89:26:53:75:7e:89:6b:8c:f2:89:d4:14:df:4f:ba:d0:80:
         14:70:bf:44:8c:8c:65:80:9a:aa:cd:5e:0a:f4:08:4e:ae:b9:
         81:08:62:85:1c:a2:ab:b7:8d:01:6e:75:34:4b:c4:21:dc:c4:
         9f:53:b2:61:b5:a0:ea:08:0c:ee:40:d5:5b:2a:b3:90:06:2f:
         6d:87:0f:03:94:48:1a:63:d1:25:dc:9a:ba:66:25:4d:c4:4c:
         2a:e5:e1:99:5e:33:26:a5:8f:6d:40:91:38:86:54:19:e9:56:
         5d:b8:13:60:c2:51:36:e5:f7:bf:70:77:9a:65:1c:b5:d7:4a:
         4d:7c:dd:ca:3e:43:ec:9b:1f:18:37:cb:64:da:10:d2:f3:0d:
         b8:37:81:be:3e:0a:a3:63:6f:0b:3a:1b:64:e4:88:0f:ee:8f:
         28:09:4b:06:e7:61:6c:72:d6:d1:84:ff:3c:24:72:a0:3b:15:
         03:69:92:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:42:12 2025 by rpki-client