Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/56bf9ff4-f332-37ae-afb5-7034e7864664.roa
File:                     56bf9ff4-f332-37ae-afb5-7034e7864664.roa (raw, json)
Hash identifier:          hmfhOWDu4gHwa3I4kCcjdP4Dr4G5zTj3ZNKbGSIGcMc=
Subject key identifier:   F8:FA:A0:4F:BE:55:52:85:87:FB:7F:4B:4D:C7:23:1E:B7:82:03:6E
Certificate issuer:       /CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Certificate serial:       010D0C9F4328584A4C3B162BCCFEFB634F86F700
Authority key identifier: 3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/56bf9ff4-f332-37ae-afb5-7034e7864664.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     945
IP address blocks:        69.197.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:16:2b:cc:fe:fb:63:4f:86:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=34bd7d27-a1f9-4a11-b819-a19d23493b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4b:3f:ae:c3:ce:ba:ab:c5:f9:e2:52:fe:7f:
                    ba:5e:9d:35:f2:4f:0c:6c:36:d4:e7:2b:f4:76:68:
                    f6:70:6c:4a:04:14:1d:b4:a8:c5:41:f6:ab:12:7a:
                    d9:3b:cc:1e:fe:d4:77:4f:6e:83:42:83:72:c3:c9:
                    03:b2:93:b1:52:a4:54:ee:0d:e2:6a:b7:1a:50:6d:
                    9e:ed:7c:4d:78:ff:32:5a:00:42:2e:38:66:a6:99:
                    88:29:c4:3b:3e:69:6a:c6:65:61:fd:dd:a5:90:2b:
                    1c:e6:84:25:08:9a:d7:49:5b:18:26:4c:3f:ab:02:
                    2b:30:5f:94:6d:d9:5d:9d:78:df:69:bb:4e:96:d2:
                    33:a2:60:6d:d0:c8:7c:ee:ec:77:4b:6b:d0:db:f8:
                    b5:e6:df:e0:2e:1e:b4:9d:ee:bd:1c:81:40:04:9c:
                    4f:f3:b5:ac:ec:d7:a7:db:ca:e5:be:70:0a:8c:6b:
                    cf:7b:75:91:03:8a:be:f5:f4:85:ec:65:25:e5:af:
                    ae:9f:b5:89:1a:93:2b:af:21:bf:eb:04:1c:e5:fd:
                    31:de:00:3a:a3:3f:f4:98:77:59:75:65:69:cd:6a:
                    9b:a0:24:f8:e9:52:f4:b0:18:22:d6:eb:7d:59:dd:
                    13:7e:7f:8e:b4:08:c3:b3:45:6e:8a:e9:b6:8d:59:
                    51:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FA:A0:4F:BE:55:52:85:87:FB:7F:4B:4D:C7:23:1E:B7:82:03:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/56bf9ff4-f332-37ae-afb5-7034e7864664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.197.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c2:05:bb:d5:e8:31:7f:44:bf:75:ee:74:c1:a5:c2:08:62:
         e4:9c:b7:0e:64:c8:58:aa:47:c8:15:d2:02:60:d2:eb:60:44:
         d3:16:50:e1:db:32:e0:75:57:9d:92:bf:d9:35:1a:3a:67:ac:
         8d:53:db:d2:ce:0d:4b:d8:96:b7:f5:6b:53:89:d3:84:88:e1:
         ae:1d:74:01:6b:b9:3d:b4:44:88:74:d2:93:4a:e8:05:61:63:
         77:5a:c7:82:97:28:e4:a5:1c:5d:bf:2d:9d:09:15:5c:cd:34:
         26:b5:38:bc:bf:32:f0:df:ef:81:16:ab:29:fc:87:52:cd:da:
         45:c1:a7:e4:f5:95:d2:17:ee:ad:9f:6c:c2:c9:fa:49:8a:15:
         9e:d7:2d:5a:d7:ff:d7:45:2b:31:af:7b:8e:03:82:4f:c1:90:
         04:62:ba:71:a9:10:33:95:05:01:e9:25:1f:d4:64:fd:c1:aa:
         4c:bf:64:b2:0d:0c:07:c2:47:40:60:f6:88:5d:44:9f:46:17:
         49:69:8d:ee:cd:5e:2b:b5:4b:2c:ba:90:3e:7b:ad:2f:96:db:
         67:f4:8f:81:35:a2:65:8f:a8:e1:0b:8d:18:a1:26:a7:40:7e:
         81:a2:73:29:37:ef:9a:f5:38:19:1f:eb:c4:16:dc:0e:19:5d:
         b0:76:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:45:05 2025 by rpki-client