Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/8949f20e-2961-3a20-b148-4ded15bb50a3.roa
File:                     8949f20e-2961-3a20-b148-4ded15bb50a3.roa (raw, json)
Hash identifier:          it6jhHiddbVWXsYGRJaDmztLEAccnHAnW1z6pl6GgOY=
Subject key identifier:   6D:3D:C3:AD:F1:17:E4:BF:33:76:32:7A:24:94:82:37:06:C0:7F:C3
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F43285849C20A07C3E609289A4B69CF80
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/8949f20e-2961-3a20-b148-4ded15bb50a3.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        69.52.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:07:c3:e6:09:28:9a:4b:69:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=d7cb0079-65a2-4c6a-b3eb-b1d80cf55ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:4f:8d:35:cc:de:a4:4e:a5:99:5c:f8:08:
                    4e:91:ab:ae:ba:63:6b:a2:94:ca:24:eb:a5:a6:4f:
                    25:35:ad:40:6a:8e:5f:97:fc:3f:d8:e3:28:ab:7e:
                    b3:4b:c2:4b:fc:f7:a3:41:17:70:0f:c5:f4:ef:1b:
                    fd:91:b1:03:f2:d0:2f:6f:40:79:e9:d7:d8:16:87:
                    ab:95:36:7e:45:4e:ca:14:bd:8e:53:d0:65:3f:08:
                    e1:c2:da:5d:f4:eb:f1:9c:07:a8:a1:d6:64:a4:db:
                    e6:3e:bb:26:f8:44:13:2c:08:39:45:4a:8e:0f:ed:
                    2e:07:4f:82:ce:b6:e7:b9:66:ca:a5:e3:b5:c7:c5:
                    81:9d:2a:fc:0a:b4:1c:ad:34:84:c5:96:f8:a5:fe:
                    73:0d:e6:13:2c:76:f9:b0:e2:34:04:ba:8a:46:8d:
                    9c:05:4e:0d:03:4f:16:42:84:fe:ea:c5:7b:ce:18:
                    a4:34:40:a9:c3:4e:5a:ed:27:3a:9f:ae:e0:83:72:
                    d1:44:e5:9a:f4:88:2c:18:68:43:f4:2e:84:bb:1d:
                    5a:3b:4e:a8:6d:c9:52:cb:96:84:17:01:0d:9f:b0:
                    4b:9c:ca:44:d8:6d:db:66:4c:7d:1e:cb:53:31:2e:
                    58:03:49:a6:ec:47:81:36:d9:e2:df:81:cc:69:71:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3D:C3:AD:F1:17:E4:BF:33:76:32:7A:24:94:82:37:06:C0:7F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/8949f20e-2961-3a20-b148-4ded15bb50a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:39:11:00:ae:c8:11:7f:ee:e7:20:57:4f:46:75:3f:5c:12:
         38:6b:58:38:7d:76:bb:50:ab:59:38:63:98:48:dc:86:d5:25:
         87:f6:df:b7:2d:63:07:7c:1e:85:74:3c:39:48:56:b5:cc:76:
         2d:a1:34:60:14:98:f9:bb:ed:f6:eb:3d:1b:68:bd:45:f2:a9:
         28:17:78:ed:01:51:c0:f7:96:88:85:4e:f2:94:bf:dd:5b:da:
         8f:b0:18:7a:25:70:33:5a:02:39:31:de:96:71:04:1f:5f:52:
         a0:c2:07:78:50:ce:be:1a:3c:c4:03:20:df:d6:12:f2:b4:c5:
         7e:7a:73:bb:b9:ec:e2:a6:ad:f3:43:fd:d2:25:1d:b6:d5:87:
         2f:f5:db:20:dc:65:25:74:30:71:18:12:11:98:65:06:c6:63:
         dd:80:45:26:47:0f:a5:e5:d2:7b:b2:ea:4e:73:60:5d:74:59:
         68:41:00:b5:78:8c:ed:9f:f0:ed:d7:28:96:4a:7a:24:be:84:
         fd:23:46:0b:03:cf:3b:84:71:1f:4b:d6:93:bd:5d:a6:f5:82:
         97:b7:27:d8:ac:28:30:b9:05:24:fd:1e:0c:4d:33:fd:40:8d:
         fa:78:98:97:5d:95:f1:2f:b0:ee:d4:25:97:ce:cb:19:c0:4e:
         d3:04:ae:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:16:18 2025 by rpki-client