Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6ab9d5ef-8ed3-329e-923b-57e49ad5c8d2.roa
File:                     6ab9d5ef-8ed3-329e-923b-57e49ad5c8d2.roa (raw, json)
Hash identifier:          4+gI6eNtxpE+y2qQ2KLkWoAWj6MXJVGJK6NcKHwRfN8=
Subject key identifier:   61:33:74:A6:12:B0:78:13:E1:83:AC:53:EB:37:BC:ED:D2:14:0E:EA
Certificate issuer:       /CN=6a5786d8-68bf-4c69-b086-11587b550447
Certificate serial:       010D0C9F43285849C0A4D5B1CB0B64B78A1C56C0
Authority key identifier: 0C:CA:4A:6B:90:74:B8:91:F7:8D:75:32:2F:72:EF:48:B7:81:A9:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6ab9d5ef-8ed3-329e-923b-57e49ad5c8d2.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     23474
IP address blocks:        216.197.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:d5:b1:cb:0b:64:b7:8a:1c:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5786d8-68bf-4c69-b086-11587b550447
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=9a76f3f9-b604-43f2-b548-bd7ac93110d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:89:5f:d1:b7:0c:f2:c2:12:b0:27:80:36:
                    8c:91:76:21:2b:bf:95:2c:64:a8:a7:e6:cf:12:06:
                    7f:2d:8c:52:be:96:ab:0b:6f:a9:f4:e9:9b:9b:3e:
                    73:b8:b6:0f:85:87:3b:ad:0c:07:47:cf:54:34:9e:
                    82:7f:8e:cf:51:f6:7b:0b:8d:c3:d9:1a:97:3c:ac:
                    13:2b:eb:08:52:93:a6:10:3c:a5:a2:a1:4c:0d:9c:
                    71:c8:2b:01:bf:34:8f:77:4b:5c:bd:92:2e:32:3c:
                    8e:31:dc:88:d4:97:f3:77:1c:39:11:b6:ea:9f:9b:
                    ca:13:9f:68:30:3e:ea:5b:cb:e0:bf:64:d1:28:6e:
                    0b:6a:ad:e8:ac:6f:85:5c:32:74:ba:f2:0f:c7:4e:
                    31:c2:47:33:5e:f6:ce:41:95:68:f7:1b:60:db:b9:
                    74:c4:d1:ac:1b:74:79:00:e3:21:c2:4d:e8:8b:1f:
                    7f:b6:ca:e3:18:8a:fd:53:55:af:8a:5c:5e:d7:15:
                    5c:3f:10:54:2b:f0:0c:62:8c:cb:f9:5c:ec:49:c6:
                    92:21:59:e2:b1:43:0e:05:fd:34:be:ba:dd:0b:c9:
                    0e:3b:59:23:19:3b:6c:b3:cd:64:39:f7:73:a3:af:
                    b6:47:f0:db:ce:39:64:a6:0c:59:0d:6a:3e:7b:3c:
                    93:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:33:74:A6:12:B0:78:13:E1:83:AC:53:EB:37:BC:ED:D2:14:0E:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6ab9d5ef-8ed3-329e-923b-57e49ad5c8d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.crl

            X509v3 Authority Key Identifier:
                keyid:0C:CA:4A:6B:90:74:B8:91:F7:8D:75:32:2F:72:EF:48:B7:81:A9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.197.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:a6:ef:94:9a:28:ba:e9:78:5f:d4:47:a7:1c:41:89:7b:6d:
         20:5a:fe:c1:3f:4a:2e:21:d2:62:0e:a8:e2:e3:9b:6f:fc:77:
         00:57:1d:4f:ec:0b:fc:bc:c6:d8:d6:fe:7b:dc:70:44:96:98:
         4c:b4:2b:11:35:da:40:b3:8b:04:d1:ae:90:c8:ef:5d:f7:51:
         aa:ef:c0:f1:71:12:20:e3:da:78:67:94:88:65:26:01:0f:3a:
         1a:01:1e:84:cf:6a:0a:c0:75:fc:76:d1:3a:7d:b8:ae:8f:a5:
         5b:7e:99:ce:cb:4e:cd:74:73:e4:68:81:e1:67:d9:ef:a3:65:
         a1:1b:23:e6:90:cd:fd:ab:6b:78:14:41:01:79:76:1a:29:4a:
         4e:2d:5a:81:9b:de:93:19:e3:8c:cb:bb:bc:50:f5:d9:56:11:
         ac:cf:0e:08:96:42:1c:16:1e:1d:63:21:cc:61:86:15:8b:ae:
         81:48:67:fe:d5:57:7d:dd:71:8d:85:ef:f6:c4:c7:2f:4a:30:
         8f:5c:b8:a8:51:63:ac:74:66:80:57:e3:fa:1c:a7:aa:ec:5b:
         74:6f:31:6b:19:7e:ee:80:5c:fd:0d:5f:a7:93:c9:dd:5a:8e:
         ee:b1:b5:fb:d9:79:96:b3:cf:49:6e:c1:af:c5:29:4b:33:dd:
         60:49:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:14:07 2025 by rpki-client