Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/808ce347-6837-3f09-95d7-f5eb760c1024.roa
File:                     808ce347-6837-3f09-95d7-f5eb760c1024.roa (raw, json)
Hash identifier:          PjX6zdvo3Pto+oWlF7xoFOQry8ihtc2AAFqpuEeRqCQ=
Subject key identifier:   B6:9A:09:CC:06:82:E9:E6:F6:3B:AB:86:0F:7C:5E:29:0F:E5:09:78
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584AD2A751D39572304D71A2EDE4
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/808ce347-6837-3f09-95d7-f5eb760c1024.roa
Signing time:             Mon 11 Aug 2025 16:37:39 +0000
ROA not before:           Mon 11 Aug 2025 16:37:39 +0000
ROA not after:            Sun 09 Nov 2025 17:37:39 +0000
asID:                     0
IP address blocks:        192.64.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:a7:51:d3:95:72:30:4d:71:a2:ed:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Aug 11 16:37:39 2025 GMT
            Not After : Nov  9 17:37:39 2025 GMT
        Subject: CN=cc4388ae-70ef-4806-be6f-a40e43fc9838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1e:92:45:9c:f2:70:5f:9f:6f:9e:9f:d2:bb:
                    b5:a8:2b:1f:c8:54:3d:9e:f0:48:68:f9:0f:ff:bb:
                    5b:ae:c2:80:65:05:f4:0a:0b:fc:56:5a:cc:a4:7b:
                    29:62:95:27:43:0e:62:43:d4:27:14:45:3f:4b:d6:
                    6a:44:9c:c0:92:2b:41:98:ec:d6:a4:bd:a9:27:2b:
                    4e:90:8f:0b:2f:51:cc:bb:a6:74:20:f6:14:14:71:
                    d0:3a:85:e1:60:dd:72:08:d6:79:26:b5:de:bd:34:
                    d8:af:5a:2a:a7:bf:99:4c:bf:50:dc:60:e1:81:ee:
                    02:20:9d:35:48:7e:d1:e3:68:95:b5:39:e6:8b:79:
                    3f:6f:07:1f:34:2a:59:27:cb:40:36:07:0f:be:30:
                    b0:14:00:67:cd:db:3b:58:1b:a9:1b:7b:97:99:86:
                    fa:ad:18:d0:03:cc:30:47:17:61:90:b8:a9:c5:ce:
                    5d:fc:0e:18:9f:12:c8:4c:90:40:48:5a:39:82:6b:
                    fa:d9:70:f8:c2:5f:61:2a:12:e9:e7:0b:f7:21:36:
                    10:34:b8:03:12:fa:b1:9b:a5:d7:29:60:0e:e4:ac:
                    e5:d7:e2:32:6d:d2:16:f2:a1:8c:5e:ad:d3:31:c5:
                    15:15:07:c7:0c:80:80:e1:e2:37:50:66:78:72:67:
                    70:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9A:09:CC:06:82:E9:E6:F6:3B:AB:86:0F:7C:5E:29:0F:E5:09:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/808ce347-6837-3f09-95d7-f5eb760c1024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:4f:ef:1c:9e:8e:0c:06:0f:b6:10:81:0c:0f:2f:4d:3b:d5:
         f6:c8:b6:47:c0:45:38:3a:5f:ab:a1:89:40:86:de:2c:a4:ef:
         b9:e3:fb:17:ce:b5:9c:77:4d:af:4d:df:74:70:54:eb:50:2a:
         56:f5:1b:49:1e:d0:a6:6d:29:dd:9f:99:20:4f:65:c7:5e:55:
         51:4f:79:07:f0:1b:0a:49:d9:b2:bf:66:9e:b2:0c:cc:02:c6:
         91:09:cc:9b:73:0a:59:07:1f:e3:cb:2c:d8:4a:00:1a:2c:f2:
         c2:b6:06:ed:fd:42:23:32:74:1e:ed:d8:ea:f6:79:09:b4:29:
         42:18:95:39:61:d4:74:9c:06:fb:d2:8f:33:c1:b0:49:13:40:
         a0:93:43:10:9c:4d:0b:ad:41:8e:cb:d1:64:11:6a:c5:5a:c9:
         07:1b:a1:ce:44:83:e4:85:f2:4b:bf:5b:6d:26:55:98:a8:20:
         8c:21:18:d4:55:26:0d:1e:a0:42:61:19:d6:2c:6a:33:25:c0:
         2a:ed:40:e9:7c:b6:e4:43:e8:78:6c:1d:a1:63:14:1c:b7:26:
         2a:25:71:4e:84:b1:dc:2d:ab:61:d2:1b:ee:a7:44:c2:1b:be:
         e2:1b:ce:9e:13:fb:ee:75:fd:35:f2:91:42:87:e1:cf:2c:c1:
         41:86:dd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:09:17 2025 by rpki-client