Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/bf4a33e9-4250-32b5-92c8-5105e867adeb.roa
File:                     bf4a33e9-4250-32b5-92c8-5105e867adeb.roa (raw, json)
Hash identifier:          KGgG/XtLGdZzyVh61UGMUx6XrOnfjNn1qmZ9Ezepwxc=
Subject key identifier:   C8:83:00:F8:B7:39:C4:88:72:61:FF:B4:49:53:6A:78:21:9F:9F:60
Certificate issuer:       /CN=6b72a822-0e8f-45f9-a612-463da7164bf3
Certificate serial:       010D0C9F4328584B1F0226E90F36923DB3616040
Authority key identifier: 58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/bf4a33e9-4250-32b5-92c8-5105e867adeb.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     6079
IP address blocks:        69.54.228.0/22 maxlen: 22
                          69.54.232.0/21 maxlen: 21
                          69.54.240.0/22 maxlen: 22
                          69.54.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:26:e9:0f:36:92:3d:b3:61:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b72a822-0e8f-45f9-a612-463da7164bf3
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=7c5efcfd-f774-492a-b333-01c50c5226b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:f5:d1:5d:05:3a:2c:5c:5c:39:ab:51:32:
                    b7:38:83:50:bc:82:77:dd:3b:16:ea:30:1f:f6:98:
                    b0:22:82:2e:57:98:10:80:8d:37:73:02:fc:c0:2f:
                    20:4f:4a:a8:a0:00:a2:07:da:75:8f:d9:4e:42:1d:
                    85:8a:bc:d3:68:53:b8:37:6f:75:c5:5e:94:ea:65:
                    7f:71:e2:97:db:bb:0e:f3:3b:96:7e:2d:e9:2e:df:
                    b3:2e:ae:cd:92:8b:07:e3:01:43:d8:1d:2b:b1:c1:
                    f7:e4:f9:13:4e:21:f8:6d:5b:76:66:6b:04:29:90:
                    a1:1d:0b:59:46:37:3a:56:10:31:ee:d6:95:db:84:
                    d8:0b:7a:6b:21:ea:ac:61:39:f5:bc:99:79:54:9b:
                    94:8b:fc:7c:7b:59:27:f6:52:7d:66:52:9a:8c:c2:
                    71:b9:f7:5e:0e:78:64:f1:9d:34:46:1c:e6:d5:30:
                    b6:08:57:15:dd:d6:88:83:88:97:2c:61:97:3e:fd:
                    ac:66:2b:45:ee:ed:70:5a:8b:a5:a6:b8:52:4c:9d:
                    1e:b6:9c:9e:7a:72:43:4e:55:19:93:17:8a:ec:e9:
                    8f:59:8e:7e:52:16:29:9c:24:c9:98:64:26:94:51:
                    ac:d5:4a:7f:09:ad:c2:5a:eb:ad:ee:c3:6a:27:e3:
                    98:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:83:00:F8:B7:39:C4:88:72:61:FF:B4:49:53:6A:78:21:9F:9F:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/bf4a33e9-4250-32b5-92c8-5105e867adeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl

            X509v3 Authority Key Identifier:
                keyid:58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.54.228.0-69.54.243.255
                  69.54.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:88:05:79:4c:ed:98:26:fc:be:63:76:2c:ec:f2:de:b5:00:
         ef:54:5c:d9:90:e3:37:89:dd:0f:c9:74:c0:09:fc:41:99:46:
         aa:34:b3:2c:b8:61:af:a7:04:23:9e:d9:2e:2b:68:6d:30:69:
         4a:98:a1:c6:fb:69:6a:7f:75:9b:a3:80:f5:45:5b:d7:bd:44:
         f9:02:a5:e3:a1:3a:c8:0d:32:01:c0:1c:fc:4b:c9:1b:86:96:
         33:c2:2c:c6:e5:10:c9:5c:88:fc:99:2c:05:ce:a6:14:65:f0:
         7d:6a:10:6d:78:3f:6f:09:df:fb:d1:b5:1f:36:1d:49:f2:e1:
         69:fd:fb:99:92:82:47:37:21:ed:29:d6:f6:39:21:32:19:09:
         05:e0:a3:f2:d9:c3:ba:25:bd:d8:c3:2a:7e:42:5e:0a:46:07:
         29:cf:69:e2:ea:4a:65:1d:0f:91:6d:4c:71:da:e9:0b:6e:b9:
         76:5a:74:5b:ee:41:2f:6a:08:b6:44:5c:76:69:b8:5c:ea:49:
         f0:a0:33:3e:62:81:01:d4:c4:cc:5b:a5:ef:15:d9:10:c8:34:
         30:56:17:1e:a9:b8:c7:7b:4b:55:d3:76:2e:7d:5c:2c:eb:8b:
         7c:21:6c:76:b1:07:44:b2:a2:89:2f:f4:3e:a3:c1:93:2d:cb:
         b3:94:5c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:56:05 2025 by rpki-client