Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4506f60-34c5-4873-963b-800e7808562b/e5602bb8-87c2-3779-85f9-0eb684584266.roa
File:                     e5602bb8-87c2-3779-85f9-0eb684584266.roa (raw, json)
Hash identifier:          zPgzP0cC2co32qg8vwhSOMx7zGaTy7kOoebRJXWaac8=
Subject key identifier:   0E:D3:90:13:98:5C:F3:2D:74:A5:29:67:09:BB:F6:3B:F9:5C:05:34
Certificate issuer:       /CN=d4506f60-34c5-4873-963b-800e7808562b
Certificate serial:       010D0C9F4328584A96368EC5A14578AC272821B0
Authority key identifier: 2E:B7:97:EC:EC:11:83:3E:61:A7:AB:07:9B:83:A3:AB:46:3D:7B:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4506f60-34c5-4873-963b-800e7808562b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4506f60-34c5-4873-963b-800e7808562b/e5602bb8-87c2-3779-85f9-0eb684584266.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     8075
IP address blocks:        69.59.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4506f60-34c5-4873-963b-800e7808562b/d4506f60-34c5-4873-963b-800e7808562b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4506f60-34c5-4873-963b-800e7808562b/d4506f60-34c5-4873-963b-800e7808562b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4506f60-34c5-4873-963b-800e7808562b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:8e:c5:a1:45:78:ac:27:28:21:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4506f60-34c5-4873-963b-800e7808562b
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=764a9129-391d-40e3-86d1-7dbef47a1394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5c:a6:74:08:df:09:2c:ae:b0:97:40:e6:01:
                    b6:70:e9:fb:ee:74:04:b1:3d:27:24:0b:3d:9e:44:
                    8f:41:ac:89:ad:22:84:75:29:ce:89:32:4a:34:c8:
                    b3:35:57:9d:cc:8a:c1:2c:de:3b:7f:8c:00:6c:64:
                    fc:2c:bb:d7:9d:06:c3:9c:2e:07:52:b7:af:1a:18:
                    b8:2f:1a:52:cf:ed:35:c3:d8:0b:55:d0:6c:95:da:
                    f8:f8:79:95:2c:b5:ed:ff:e7:e0:4a:d6:6d:c1:e3:
                    6e:b0:74:fd:7a:01:de:69:fa:17:c9:d3:5c:74:0d:
                    88:65:0b:d3:ab:cb:d7:38:7d:0a:af:1d:bf:19:cd:
                    6a:4c:5a:ae:39:e5:f6:ae:46:6d:eb:c4:96:12:f5:
                    0c:08:54:bd:0f:f6:d3:4b:4a:03:91:6a:7d:a7:79:
                    b8:1a:07:3e:a9:44:f5:32:04:1a:fd:e5:79:c3:2b:
                    b7:96:2c:d3:fd:06:20:a6:d5:2b:c3:02:d6:2b:c6:
                    38:50:6c:23:fd:0c:af:7b:f2:5b:31:1a:c9:21:8f:
                    bf:c2:7e:d1:fc:33:08:e6:5f:cc:72:05:08:2d:43:
                    90:4c:bd:70:f3:c2:b9:2a:72:f6:33:a3:f8:26:5f:
                    23:04:ac:b1:47:3d:92:0b:11:8d:04:85:b1:b3:87:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D3:90:13:98:5C:F3:2D:74:A5:29:67:09:BB:F6:3B:F9:5C:05:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4506f60-34c5-4873-963b-800e7808562b/e5602bb8-87c2-3779-85f9-0eb684584266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4506f60-34c5-4873-963b-800e7808562b/d4506f60-34c5-4873-963b-800e7808562b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:B7:97:EC:EC:11:83:3E:61:A7:AB:07:9B:83:A3:AB:46:3D:7B:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4506f60-34c5-4873-963b-800e7808562b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.59.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:63:54:12:38:22:27:a0:be:d3:1f:a7:49:a5:6d:1f:90:4c:
         f9:2b:84:25:5a:48:f6:84:43:9a:10:fc:41:92:fb:9b:dc:76:
         76:66:a2:d1:3e:a8:8d:54:17:be:d5:30:8f:47:4a:6d:42:39:
         3c:35:f8:72:86:d9:74:e7:1e:27:77:dd:f4:f8:5f:58:ce:1a:
         4e:aa:b0:8d:2d:96:77:de:35:ec:91:1b:ed:f6:4b:be:5d:8b:
         c3:1c:87:93:44:99:8b:b2:c0:56:eb:ff:e2:41:a3:f2:94:0c:
         36:4b:30:91:38:1e:d9:f5:50:db:35:b7:c9:fe:b9:12:13:61:
         b2:90:4d:aa:cf:f0:a7:64:30:47:e7:1f:c5:6e:ad:c7:b9:2d:
         5b:01:c5:a1:70:26:27:7f:e0:84:c3:0a:b1:de:56:2b:e2:f7:
         82:9f:10:00:2e:00:88:13:b0:fc:ca:cb:e5:ca:51:55:72:f8:
         79:83:41:87:d8:e8:06:7a:c5:cc:09:6f:63:f2:73:d9:17:50:
         8b:ee:60:a9:77:a3:7e:67:f7:c3:3a:2d:88:b3:15:41:55:54:
         33:9b:78:b2:5f:75:83:cd:7e:4e:d7:2b:da:be:38:c7:4d:b7:
         6c:cc:d1:fc:d9:59:2f:a0:29:87:d9:cf:64:42:81:ab:04:9e:
         e0:fa:bc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:15:40 2025 by rpki-client