Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6c542306-ebe8-3a22-b1ca-5b0d459c13fd.roa
File:                     6c542306-ebe8-3a22-b1ca-5b0d459c13fd.roa (raw, json)
Hash identifier:          UdGEc2JgZtNTjo/poXWQhkDnwMiLJsBM9YR04gHQz8I=
Subject key identifier:   DA:11:77:05:53:27:2A:5D:FE:40:A8:8E:6E:67:CB:57:E5:C4:04:29
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0CB30982FDA481D83E5A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6c542306-ebe8-3a22-b1ca-5b0d459c13fd.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397242
IP address blocks:        199.7.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:cb:30:98:2f:da:48:1d:83:e5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=53fb3be7-92ad-4237-b40c-10b2f7b3dd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:87:f1:2c:8d:e3:4b:38:d1:8b:5f:c5:6a:22:
                    d8:71:64:c6:99:39:a2:14:2c:84:9b:12:94:39:20:
                    ee:65:32:1c:f1:9c:22:55:fe:8a:66:09:90:c9:55:
                    af:f7:13:00:bd:6e:ba:48:07:6b:0f:92:76:bc:94:
                    a2:28:3d:3f:4e:13:98:cb:50:c7:27:1a:86:e9:90:
                    d6:8c:ec:dc:a2:25:1f:ae:b7:48:09:bc:35:6d:83:
                    d2:ee:5b:37:21:01:3f:27:2e:1e:41:cc:b2:6f:20:
                    2f:36:cf:9e:76:d5:a7:7d:53:70:57:38:d0:5a:ea:
                    a0:c8:d3:b5:9d:df:57:2a:ff:a6:26:64:d0:21:92:
                    bc:9a:70:73:94:8b:dc:ee:e3:f2:1b:8d:51:40:bf:
                    37:e3:94:3e:44:16:ea:17:1d:b6:dd:28:70:2c:83:
                    13:de:6d:8f:69:76:f9:40:b7:f1:4c:25:c9:e8:d6:
                    22:0b:09:db:cd:3a:16:0f:43:3a:15:97:3e:61:a5:
                    cc:2d:a5:64:1d:81:7b:65:b3:45:e3:cd:5f:a2:28:
                    4f:6f:d4:41:bd:98:c6:aa:25:f1:36:7b:ac:9d:73:
                    9c:8f:2a:4e:a0:46:94:ab:7f:b4:6e:f9:b8:a3:30:
                    fb:28:0f:0a:59:36:bf:35:8d:79:60:9b:08:8c:60:
                    f2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:11:77:05:53:27:2A:5D:FE:40:A8:8E:6E:67:CB:57:E5:C4:04:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6c542306-ebe8-3a22-b1ca-5b0d459c13fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:58:62:75:f5:eb:a4:10:cf:ef:15:64:dd:be:2f:f2:8c:92:
         dd:2e:50:7b:28:44:46:d2:9e:a4:df:ca:a1:c2:6f:6d:a0:16:
         b9:1c:c8:8d:f3:33:9b:e8:91:f9:fa:59:14:bf:74:4d:f3:1f:
         96:19:36:a6:d0:de:3a:07:f6:b2:e7:45:c1:cd:8f:2b:47:c5:
         5c:d3:8a:46:97:8d:64:59:d7:06:dd:4e:9e:fd:60:50:25:12:
         c0:3a:24:b1:9b:c4:f3:85:25:ce:72:bc:97:da:93:00:73:62:
         6f:03:16:4b:dd:72:fe:d0:83:53:3f:5b:ee:3a:3c:f2:22:f9:
         08:44:58:98:c7:42:5e:a0:eb:8d:66:03:03:74:d4:13:3d:1f:
         fb:65:e6:ce:f4:d6:e8:dc:c2:58:19:12:69:80:5d:9b:dc:e5:
         04:e9:ad:de:0e:76:0d:22:3f:6e:b5:40:48:7e:58:39:f4:1a:
         91:f7:3b:ef:fc:5d:f6:20:82:8e:d4:6e:66:10:43:f6:59:db:
         a5:ea:95:e9:20:da:6e:1b:84:86:ce:61:df:e9:a0:6d:88:95:
         e8:e6:33:09:03:4d:ed:56:cd:43:77:6e:10:20:4c:1c:36:f1:
         24:e8:22:08:eb:76:7b:6f:66:01:42:53:44:8d:01:c5:0b:2d:
         2d:c8:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:09:07 2025 by rpki-client