Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bcb19b6-c2f5-33df-8af5-dcbedea8b679.roa
File:                     2bcb19b6-c2f5-33df-8af5-dcbedea8b679.roa (raw, json)
Hash identifier:          SYreCGA50D3jT2+JjFifs96oo/4MBMDP3sCwiqqd9uU=
Subject key identifier:   9D:BD:84:88:97:57:03:EF:67:87:1D:F1:BB:27:5A:BE:63:B0:D9:09
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC44ED560FEA34C43375700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bcb19b6-c2f5-33df-8af5-dcbedea8b679.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        69.246.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:4e:d5:60:fe:a3:4c:43:37:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=0bc15c3d-8746-4927-9e8f-5b07eab29cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:26:4c:78:58:8f:70:09:6e:00:66:a9:f9:
                    d9:62:9b:5f:44:fc:87:dd:e8:2e:ae:15:fb:58:e1:
                    8b:c6:97:77:f5:54:1d:80:3a:77:6a:f7:0c:0d:63:
                    6c:0c:b6:12:0c:3c:a1:01:01:1e:ec:ae:89:e7:93:
                    22:2c:b2:b7:a1:a7:d0:77:80:31:3c:82:b8:06:32:
                    d0:a0:16:40:c9:cb:30:16:6d:0f:df:0c:c6:34:ca:
                    f8:83:bb:0e:13:27:48:99:79:ee:6c:ca:22:5d:13:
                    79:b4:b0:85:9c:0b:67:3e:2a:97:b2:b6:46:72:22:
                    65:6a:1c:bb:12:bb:14:77:d9:8d:67:c7:77:2c:21:
                    a0:96:a7:b7:21:ce:d8:d5:ae:07:79:e6:d7:16:63:
                    00:86:f9:df:36:97:57:e6:b4:92:5d:d3:87:d7:67:
                    77:4b:aa:1b:b0:a6:2e:e7:ea:41:e7:4e:38:c8:cd:
                    eb:54:9b:98:db:07:84:ae:3e:f0:4f:9a:0f:ec:cc:
                    cb:58:1f:71:61:57:71:bc:83:93:ca:df:d0:a9:38:
                    93:1e:9a:de:14:1a:44:c1:c6:a8:a2:25:d9:1a:e4:
                    7c:4e:35:69:d4:6c:ab:cf:d7:79:9c:ed:e5:35:fe:
                    29:61:3f:ae:92:2a:75:1e:ee:ba:89:f8:d3:ed:be:
                    6c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BD:84:88:97:57:03:EF:67:87:1D:F1:BB:27:5A:BE:63:B0:D9:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bcb19b6-c2f5-33df-8af5-dcbedea8b679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.246.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:83:0b:cc:b1:5a:ae:64:6f:9c:03:39:3b:c6:c8:9f:f0:5e:
         60:94:69:f7:48:5e:67:96:75:4a:d5:4b:c5:26:60:a3:12:d1:
         cf:c2:51:44:d7:09:32:36:de:22:9b:7b:d7:73:84:69:c3:68:
         22:4e:70:35:03:d9:3a:0a:d0:6a:30:80:90:8c:3d:24:83:69:
         72:53:f7:54:be:02:a8:1f:ea:ed:67:77:95:20:51:42:6c:4d:
         84:86:e2:32:9e:65:98:62:c3:f1:f7:5d:a6:b6:e2:c8:d3:0f:
         e9:46:67:7d:86:9b:9c:5c:de:1b:8d:6a:bb:ed:30:fe:4e:60:
         1f:ad:87:c2:46:04:ca:3f:12:bb:2a:7e:a3:36:2c:b6:75:b5:
         1d:4d:9c:a9:c6:fa:6f:b4:9c:80:16:4a:9b:c1:45:14:fd:fb:
         c7:87:19:e6:fd:9e:10:f3:f1:51:e6:36:00:df:b4:5a:3b:9c:
         0f:e3:81:8d:43:b9:e6:b6:a3:17:b1:37:99:8e:de:2d:4b:39:
         f0:b1:f2:51:5c:d5:b5:6f:35:a4:c0:12:ea:f5:3d:c8:86:40:
         59:df:7a:14:1a:b4:50:07:ee:bf:ca:d4:72:dd:27:d5:76:54:
         98:98:12:d8:26:ab:eb:83:4f:b1:02:3d:a2:5b:c7:b0:80:ce:
         de:04:fb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:30:17 2025 by rpki-client