Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/708d4650-7568-32d1-982e-33a33edcf9b1.roa
File:                     708d4650-7568-32d1-982e-33a33edcf9b1.roa (raw, json)
Hash identifier:          TiYmkrndHJK0LIncaMzJXL6ljdSNt0Zvw4g1pnq5lb8=
Subject key identifier:   CC:C8:5A:DF:48:EA:25:04:80:1B:E0:EF:5D:1E:0F:30:92:01:44:71
Certificate issuer:       /CN=5d16a14a-cb8c-4b20-bb04-79d6ecc3016e
Certificate serial:       010D0C9F4328584AE0A9EEC717011624DA4F3800
Authority key identifier: D1:03:18:46:50:82:A4:F3:EF:8F:28:AB:7B:B3:12:DA:23:84:E6:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/708d4650-7568-32d1-982e-33a33edcf9b1.roa
Signing time:             Sat 16 Aug 2025 17:04:14 +0000
ROA not before:           Sat 16 Aug 2025 17:04:14 +0000
ROA not after:            Fri 14 Nov 2025 18:04:14 +0000
asID:                     27552
IP address blocks:        69.72.24.0/22 maxlen: 22
                          198.203.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:a9:ee:c7:17:01:16:24:da:4f:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d16a14a-cb8c-4b20-bb04-79d6ecc3016e
        Validity
            Not Before: Aug 16 17:04:14 2025 GMT
            Not After : Nov 14 18:04:14 2025 GMT
        Subject: CN=69c5191d-fd22-483b-91e7-7e80f84ac432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:86:c3:0d:e5:e0:ce:3d:1f:4a:b8:a9:8b:c9:
                    7f:58:f4:03:c0:e6:9d:42:e9:16:c9:88:32:1f:4c:
                    91:60:5d:d8:1c:35:67:80:87:da:11:a4:2e:c1:60:
                    c7:f7:5d:aa:dd:35:ee:41:5b:ba:07:61:62:67:6b:
                    ba:06:9b:b6:15:82:21:19:6b:48:a8:ae:94:3d:80:
                    cc:0b:41:3d:e1:cc:73:30:e8:07:3e:f6:06:05:1c:
                    ce:96:3c:e3:88:f8:32:be:79:01:f4:d5:40:cb:59:
                    b9:4d:58:21:dd:99:0a:72:95:08:24:ad:88:ff:47:
                    91:21:4e:f9:66:e4:f0:e5:5e:7c:0c:96:36:a5:9a:
                    4e:5e:c4:7e:d0:4b:c2:0e:27:d3:0a:e6:16:f8:50:
                    85:91:f3:bc:c6:ee:c3:e2:b7:f0:57:98:67:8b:63:
                    41:d3:29:a7:ad:e6:e1:09:11:80:53:d9:66:61:e8:
                    17:c7:79:f7:33:be:50:eb:16:ee:fd:f1:51:c0:d6:
                    02:be:c0:73:59:41:d6:34:2d:07:90:c1:9b:a7:a4:
                    05:b2:a3:d1:5f:8d:7b:55:cf:0f:96:91:96:fd:2c:
                    33:85:65:5b:2b:bc:f4:84:0d:ea:59:e7:30:c2:e1:
                    06:34:6d:9e:ad:89:68:7a:71:11:37:cf:65:51:cd:
                    d7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C8:5A:DF:48:EA:25:04:80:1B:E0:EF:5D:1E:0F:30:92:01:44:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/708d4650-7568-32d1-982e-33a33edcf9b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.crl

            X509v3 Authority Key Identifier:
                keyid:D1:03:18:46:50:82:A4:F3:EF:8F:28:AB:7B:B3:12:DA:23:84:E6:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d16a14a-cb8c-4b20-bb04-79d6ecc3016e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.24.0/22
                  198.203.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:fa:c6:62:64:3e:5a:16:22:ec:2d:bb:6c:81:8b:91:27:b6:
         35:24:ab:6e:eb:61:f5:8e:e6:bb:23:c3:c8:0e:39:e2:df:3f:
         0f:86:3a:f4:8a:9c:dd:ed:c1:74:52:da:20:3d:6a:40:91:35:
         2a:4b:42:3a:55:4c:4a:70:40:50:ab:1e:f7:8d:fc:c3:8a:59:
         d2:9a:23:79:a7:cc:44:b9:07:ef:37:12:8f:56:ab:0b:cb:b4:
         d8:91:0c:b3:01:e9:4e:d8:ff:b8:4f:7f:53:ae:5a:54:c7:53:
         36:c2:eb:6c:f9:90:95:63:31:b9:75:74:87:39:65:ac:21:2d:
         7e:2a:ec:9a:1d:71:8e:ad:11:5b:c6:ab:73:f0:bb:cb:2b:93:
         ef:55:22:68:25:33:50:97:a2:fe:c8:e5:3c:d6:74:49:f2:3c:
         0a:44:4e:50:6b:bf:23:19:44:89:66:fb:8a:d1:72:d7:d7:9b:
         09:b6:c5:10:9c:75:41:26:83:10:28:7e:61:19:e8:6b:13:49:
         33:4d:94:c5:be:d5:ac:52:68:19:0a:0e:0a:f6:b6:c3:33:cb:
         90:17:f8:f2:d7:28:03:1c:e3:33:dd:8f:82:6c:87:d0:92:fe:
         e6:e9:8e:de:df:33:e4:3f:e1:07:a7:d7:bf:7b:af:16:2a:2d:
         73:5e:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:32:46 2025 by rpki-client