Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/cf95393a-e1bd-30c6-a79d-4619c61ec4ff.roa
File:                     cf95393a-e1bd-30c6-a79d-4619c61ec4ff.roa (raw, json)
Hash identifier:          EE75TZVwWiEQ57gpmH49/9w8vM+IrFn9HwquvOuFEAY=
Subject key identifier:   9A:4B:1F:34:5A:84:09:00:AB:17:37:1B:7F:EC:85:00:FC:CA:6D:8F
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584ACE0BA558FADAC243CFDC9004
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/cf95393a-e1bd-30c6-a79d-4619c61ec4ff.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     6181
IP address blocks:        69.61.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a5:58:fa:da:c2:43:cf:dc:90:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=8f62f544-e3b8-4ab4-a5cb-beb8e0328c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:41:63:9c:d7:01:1d:bf:2b:01:5d:dc:85:a0:
                    c2:d4:46:c3:f0:33:3f:0e:c9:77:50:09:db:cb:50:
                    f3:07:6c:cf:6c:e6:b1:5f:5f:9a:fe:c2:c4:60:4c:
                    14:db:5c:4b:f2:4a:94:f9:a2:7c:4c:58:ef:ed:15:
                    8c:52:f1:7a:c6:4b:00:c0:1d:32:67:c9:44:f4:ff:
                    e3:3c:3f:0f:1e:f3:b2:4c:d0:1d:25:36:f8:45:5f:
                    1f:51:1e:75:23:00:23:4a:05:9a:9c:3b:71:5d:d1:
                    d6:a8:09:78:1b:73:42:de:ec:af:58:54:55:cc:e8:
                    8c:12:a0:06:eb:1e:0f:84:b5:85:80:43:e4:39:d5:
                    0a:38:93:1b:c5:fb:35:4f:c4:68:3f:42:55:b1:c2:
                    07:81:d9:c5:7f:ed:f6:b8:ec:e9:21:1a:a5:ab:db:
                    6b:a9:03:7d:3f:3b:0c:ce:3d:bb:f6:f2:7a:a0:33:
                    b0:f3:f2:33:41:a9:c7:f2:c3:e7:9e:18:13:c8:aa:
                    cc:9f:24:55:93:0b:67:4d:43:fc:df:91:63:10:cd:
                    03:54:84:b2:e5:70:a9:62:61:d8:20:11:74:86:e4:
                    79:e1:7e:5d:f7:36:d3:35:f8:19:51:71:22:e6:78:
                    6e:18:e3:0d:f7:92:2f:f5:07:82:3e:ef:95:ae:ae:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4B:1F:34:5A:84:09:00:AB:17:37:1B:7F:EC:85:00:FC:CA:6D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/cf95393a-e1bd-30c6-a79d-4619c61ec4ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.61.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b0:1b:1f:ca:2b:08:c0:b5:56:63:bb:f5:a2:6a:b0:e4:9e:
         6d:e2:bd:d2:33:cf:8c:ea:9a:b0:15:c6:fb:f5:58:5c:8d:0d:
         bb:6f:fe:77:0c:97:22:15:4b:85:2d:48:fe:43:51:12:5e:c0:
         d4:ca:b9:d9:37:68:74:d9:a0:c9:23:25:a3:47:b9:ec:1a:f3:
         1c:ea:67:7a:2c:a6:f3:78:3f:a5:f4:54:5b:bd:b1:3a:2a:f3:
         df:a5:b8:a3:f6:de:5a:d2:03:cc:9d:4c:3c:db:ad:dd:2a:de:
         38:58:99:c6:b0:fb:50:20:f8:3a:3f:6a:be:e0:6a:fc:a9:21:
         54:01:9d:5b:fb:37:fe:fe:d6:4f:f7:6d:ef:b2:58:c2:af:d7:
         be:0f:3c:c1:9c:45:4b:c6:d7:16:1b:97:ba:b4:10:36:c6:8b:
         3c:17:0f:ae:57:e3:f1:b9:db:d3:f2:d9:88:08:b2:ac:d3:9a:
         0d:3f:b0:17:f1:08:b2:2e:74:69:a4:08:ad:a4:62:e2:80:2b:
         41:57:a3:a5:80:d7:3b:25:53:49:5c:8c:01:b9:33:48:76:ad:
         19:b6:6f:d7:d1:4c:6c:27:b8:43:4d:a4:d6:ca:a9:36:06:1d:
         93:c4:ea:0c:34:dc:94:12:a2:b1:f4:55:bb:27:ca:97:87:6c:
         c4:a0:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:07:08 2025 by rpki-client