Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8926c92a-ff4e-3dc9-bf28-7a90d78f2953.roa
File:                     8926c92a-ff4e-3dc9-bf28-7a90d78f2953.roa (raw, json)
Hash identifier:          zhQh3epph7talhgIoYillkqCttuOg0dQGHNRArDlkMg=
Subject key identifier:   43:24:59:6A:E8:49:C6:82:B8:AF:76:53:EB:B9:7D:5D:55:97:20:60
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AA6F621C5CFF187BDCAAC29D6
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8926c92a-ff4e-3dc9-bf28-7a90d78f2953.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     40934
IP address blocks:        69.167.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:21:c5:cf:f1:87:bd:ca:ac:29:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=bd20c4a8-a201-4415-a124-4a7e6225cfab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5e:70:bf:f2:94:cb:95:37:c2:7b:4a:ac:81:
                    33:a4:78:60:ef:98:3a:fc:ee:4e:01:b0:d6:96:7d:
                    03:f9:49:33:7d:14:91:be:da:58:ec:66:d9:91:cf:
                    b1:55:e3:46:e3:0c:e2:ad:06:83:1f:54:a0:2c:c2:
                    92:de:66:67:da:1e:24:dd:4f:b0:de:8a:d5:5f:7e:
                    a3:71:41:82:ae:5e:43:29:02:11:3a:f8:bd:d0:57:
                    c9:23:72:e6:02:5d:61:ab:b4:a2:46:7b:3f:d8:ad:
                    9b:c3:49:a1:44:8b:5c:21:02:96:ff:f9:d2:60:36:
                    c9:ee:a7:15:44:fd:2a:ee:cf:3b:69:37:05:39:62:
                    6e:97:d7:74:2d:72:c7:cf:ae:9f:4f:79:71:10:b8:
                    93:c3:d6:b0:00:9a:83:16:f7:39:13:3c:bd:58:72:
                    49:d5:a6:b7:9d:9b:fc:d6:f9:c8:e2:92:bc:ea:d4:
                    72:cf:de:c3:dd:ed:d6:20:71:fa:42:c3:72:9a:86:
                    f7:ed:e0:d5:e9:02:99:47:77:00:88:d9:39:39:d2:
                    70:b0:7b:e0:1d:ff:70:f5:a1:27:1c:88:76:62:c1:
                    a2:e7:1b:a0:64:f2:13:67:6d:80:c9:d1:fd:bf:d6:
                    8e:f2:84:14:5b:77:cc:88:18:15:29:6d:40:b5:17:
                    cc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:24:59:6A:E8:49:C6:82:B8:AF:76:53:EB:B9:7D:5D:55:97:20:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8926c92a-ff4e-3dc9-bf28-7a90d78f2953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.167.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:de:8d:c9:ed:7e:27:0e:25:8a:df:45:3a:9b:73:41:28:e6:
         01:ad:2a:dd:e0:70:7b:b3:3a:c5:6b:a0:19:69:39:16:b3:71:
         a8:73:3a:e0:c9:ae:37:6e:98:89:b8:ab:bf:9a:c1:07:eb:1c:
         b3:19:bb:37:38:16:07:a1:26:b0:4c:ce:9f:d9:46:85:a4:e9:
         1e:07:89:22:06:d8:3e:f7:9d:21:8a:cc:fc:b9:20:ae:15:9f:
         58:b3:3e:0d:e3:94:dc:31:a6:01:0c:db:16:5d:53:95:7b:09:
         33:21:94:41:89:fe:50:9a:7f:3f:7c:36:2b:dc:90:c6:0e:ef:
         af:74:a3:a2:95:ad:b9:b2:66:3a:45:e4:b8:1f:bd:f1:3b:cf:
         69:d9:17:76:51:e3:b0:d4:9e:c1:89:46:36:db:98:60:41:ca:
         99:d7:29:b2:28:b5:6a:5a:ab:bf:bb:10:ec:a6:de:5a:9f:fd:
         f1:92:ea:1b:e7:d7:a9:a2:c4:5b:65:31:db:cc:e9:f6:a7:09:
         f1:41:f4:cb:38:f8:40:b4:f6:a4:d8:f3:85:66:09:71:d7:df:
         b0:b6:38:3f:71:6c:70:bc:30:ae:00:38:ab:0d:b6:24:fb:20:
         af:ce:6d:ec:be:ff:6c:14:0f:f9:10:dd:c8:43:ef:0b:27:ea:
         e4:12:5d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:49:38 2025 by rpki-client