Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a55bdea0-1749-3dc4-a919-27e67de8a78f.roa
File:                     a55bdea0-1749-3dc4-a919-27e67de8a78f.roa (raw, json)
Hash identifier:          Xz7iQ4XaA0SMYRQWlLPxqV38QWJrjYi3tO+ZiaObmkM=
Subject key identifier:   4A:AF:EA:B0:99:8E:50:18:32:6A:87:66:14:D4:35:23:CB:1A:DC:E6
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F43285849F2E549E455F74F4BBB96EF80
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a55bdea0-1749-3dc4-a919-27e67de8a78f.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     18977
IP address blocks:        69.89.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:49:e4:55:f7:4f:4b:bb:96:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=b644f79e-28d1-42c0-a889-4e2233026c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:a9:33:76:5d:ed:5f:8d:36:8c:29:6c:92:
                    d1:12:fe:66:d0:c9:98:6c:81:ce:d1:7d:5f:a0:c2:
                    08:c1:c6:ff:8e:1d:4a:7a:6c:f9:c7:6d:b6:ba:0d:
                    6b:99:36:2d:8c:52:4f:90:fe:35:d0:77:38:1d:74:
                    51:5d:01:ba:d7:4f:d0:3f:02:a8:bf:f9:98:e5:f3:
                    f8:db:f9:7d:78:56:93:2e:96:15:b4:79:c3:0f:9c:
                    44:07:9d:42:8e:2e:d8:33:e1:2c:68:2f:55:42:73:
                    98:a1:8e:f7:d6:c6:81:c7:66:db:21:28:d3:77:cc:
                    be:87:6f:a0:47:36:89:d6:ed:19:9b:3a:a4:23:f0:
                    57:48:55:f9:0d:61:24:03:69:ca:ac:ad:d4:bc:39:
                    aa:64:1b:e6:a3:fa:cf:df:1c:ef:35:c5:a4:3a:d2:
                    6a:34:78:f5:90:81:6f:51:2a:83:d2:cb:23:66:de:
                    fc:4b:b5:77:68:1f:17:29:42:c3:ae:9c:32:d3:92:
                    bc:20:23:a5:8a:d0:29:2e:1b:10:91:7c:6b:7c:06:
                    ef:7e:89:c6:49:80:b7:db:fd:4d:9d:a5:2a:cb:56:
                    b9:a1:64:44:af:fe:36:f9:c0:4a:1d:31:ce:63:bf:
                    e0:ca:c6:24:1d:8b:23:ba:e1:92:97:d6:9e:f9:d6:
                    99:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AF:EA:B0:99:8E:50:18:32:6A:87:66:14:D4:35:23:CB:1A:DC:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a55bdea0-1749-3dc4-a919-27e67de8a78f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:aa:a1:ee:5e:f3:f6:b1:da:b2:a3:2d:c7:48:7b:13:9d:11:
         0e:66:16:a0:04:40:e8:d8:44:b2:8b:3c:79:0e:bb:d2:b8:ca:
         ca:0b:34:31:3e:5d:0e:df:a3:ad:ff:66:dd:e9:7c:77:bf:53:
         30:cd:25:5d:0d:ef:1d:48:0d:25:f8:3c:26:9c:f1:ad:51:08:
         48:95:da:59:07:75:23:d5:15:ff:95:34:a2:31:b3:4f:87:43:
         29:8b:86:80:63:86:78:f0:43:e1:ea:fe:74:df:db:1d:0c:23:
         f0:b7:d5:f9:3a:0e:5e:6c:b2:be:91:05:b0:22:47:79:86:e9:
         92:39:5f:bf:84:1f:8d:c4:78:bc:7c:17:4d:1e:ce:31:a4:17:
         69:28:8e:7b:80:90:b2:9b:ab:9c:27:34:ca:fc:b7:5e:a0:61:
         c4:6e:b9:a1:ad:d9:c0:c9:e0:c4:c8:f1:87:1f:73:7d:1c:19:
         58:31:97:1e:55:16:29:ee:ea:1a:38:15:0e:00:f8:0b:ef:ce:
         c2:87:22:9c:06:46:f9:00:69:65:c5:00:e3:05:af:a9:c2:75:
         8b:9d:b3:94:0b:e0:c5:23:ec:b4:e7:30:2b:4c:7a:41:85:81:
         e0:db:78:f4:46:16:90:80:d9:18:8b:52:69:24:ee:c5:7f:f5:
         6d:43:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:28:06 2025 by rpki-client