Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/957aeb75-38a1-3b97-8c3e-48de81f6bf6a.roa
File:                     957aeb75-38a1-3b97-8c3e-48de81f6bf6a.roa (raw, json)
Hash identifier:          jRIrKs8q4ekSzDxaTBd//QSMnpQOsSFb6ktyqQDdoFw=
Subject key identifier:   5D:1B:C6:92:03:40:59:CE:05:02:84:C5:44:92:0E:3A:8D:7D:7C:9D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0C978FF0EFA7430998000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/957aeb75-38a1-3b97-8c3e-48de81f6bf6a.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397213
IP address blocks:        199.7.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:c9:78:ff:0e:fa:74:30:99:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=94332bcc-7897-40af-88d8-d2518198249c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1c:c5:a1:3d:16:93:ea:19:e2:24:3f:9e:d3:
                    57:79:a1:ef:80:de:de:5e:4b:ff:fe:cb:82:7e:15:
                    49:ac:89:fe:fd:a0:c3:0d:98:14:cc:1c:48:32:d9:
                    9c:98:c5:fa:a2:59:a3:35:b1:c9:2b:42:17:02:ef:
                    73:5b:77:ce:ca:9c:71:f7:7d:df:ee:71:9e:87:91:
                    8e:59:38:55:40:0d:20:d6:56:df:12:31:fc:c7:9d:
                    cf:41:e9:29:58:85:dc:65:6a:1b:52:e8:6a:cd:b8:
                    df:d2:0b:b3:fb:15:36:6a:24:13:47:00:45:69:bd:
                    ca:1c:9c:aa:38:78:f5:96:a1:c6:89:8a:25:67:eb:
                    9c:c0:01:c7:ea:18:84:8a:39:3d:97:93:88:82:c7:
                    c3:ff:fb:ee:b7:e7:b7:b2:45:bb:ae:39:30:a1:2f:
                    13:df:67:71:59:61:ee:92:78:0c:33:a9:43:98:b3:
                    b4:8b:75:26:a2:74:f7:86:f3:6b:c6:e0:6f:40:31:
                    e5:8d:ee:98:39:b2:cd:08:15:46:2c:5f:b3:1e:74:
                    9d:cb:1a:6e:ae:10:32:76:83:53:34:01:8f:64:e6:
                    80:b2:24:c5:76:71:03:5f:ee:b2:02:9f:ab:44:db:
                    00:d0:e4:e2:bf:87:a3:56:40:93:92:c5:14:cb:49:
                    36:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1B:C6:92:03:40:59:CE:05:02:84:C5:44:92:0E:3A:8D:7D:7C:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/957aeb75-38a1-3b97-8c3e-48de81f6bf6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:1d:ad:65:0b:ca:84:15:e7:d9:8a:53:6c:74:3d:ef:f1:9f:
         8c:83:72:3d:5d:93:86:b0:d6:35:1e:22:39:3c:13:1d:8d:ec:
         c0:89:18:07:15:06:6f:25:7c:74:fc:d3:34:8f:76:63:4c:e2:
         4a:5d:4e:23:ab:5c:5d:7e:77:da:fb:f2:b7:29:a3:10:d5:4e:
         c6:5e:e8:22:06:94:c3:6f:3c:fa:a4:b9:ab:92:8e:ea:22:6d:
         bb:10:7b:65:6f:a8:50:92:6f:29:56:6c:69:f1:42:b8:fc:e5:
         8d:b1:90:04:19:90:09:91:c5:05:a1:c3:71:25:2e:af:8a:3b:
         e1:82:84:cd:c0:87:fa:94:f8:11:4d:43:31:ba:85:e7:23:af:
         07:dd:ca:af:f7:69:0a:2b:12:f1:2e:66:ab:52:47:d7:29:f4:
         3c:ff:59:9a:46:36:a9:3f:81:43:52:c3:d6:b2:52:c8:79:5c:
         e8:f9:d3:19:66:ad:5b:16:bc:32:14:7d:34:4d:06:6b:42:4f:
         72:69:92:17:ed:e7:d9:b6:88:08:fd:b0:f9:d0:ca:30:e9:d0:
         4e:64:b4:b5:41:f5:2a:d5:71:63:e4:30:ec:dd:f0:f1:6d:4e:
         e3:00:c5:c6:47:f4:e0:1f:91:de:9a:d0:11:c7:08:39:36:60:
         6f:3f:f6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:09:38 2025 by rpki-client