Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/10f6d14d-5d1a-3d51-bd65-13a9caae2268.roa
File:                     10f6d14d-5d1a-3d51-bd65-13a9caae2268.roa (raw, json)
Hash identifier:          BNUCkXB9PwsIRsCt9/w6xQKZCjL03lqImMF9zXA4zz4=
Subject key identifier:   22:54:91:CF:C8:2A:81:74:AF:8F:EE:60:44:C2:CB:C6:CD:4D:17:E3
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B25FC3612D125464DC5AA2908
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/10f6d14d-5d1a-3d51-bd65-13a9caae2268.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     10488
IP address blocks:        69.1.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:36:12:d1:25:46:4d:c5:aa:29:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=199f19ae-60ff-4e3d-8fa5-a450fb44751c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:bf:5b:b0:0d:df:80:56:2a:87:a1:6a:16:
                    d9:31:e2:e8:41:5b:18:73:8b:b9:dd:7f:53:ef:b0:
                    d6:cc:f8:2c:e5:cf:5a:0a:fd:4a:91:07:7e:59:de:
                    c6:76:ef:69:07:9d:10:0e:d1:92:05:5c:ba:25:0a:
                    d6:d7:4e:6d:d2:cd:95:c7:e4:5e:56:5b:d1:35:01:
                    e0:a8:dd:e8:b2:bf:5a:ed:79:ba:dc:09:22:92:4f:
                    2a:db:2c:8c:f0:76:3c:9b:61:91:91:83:d7:5d:2e:
                    32:d6:0b:ad:f7:b3:ae:85:55:9e:a3:7f:d3:c3:6b:
                    fb:1f:ee:d1:af:d0:06:7b:ca:77:5d:69:6d:df:35:
                    87:dd:4f:6d:b0:63:53:a0:44:91:8e:b3:94:0c:a4:
                    6c:ae:91:7e:67:b0:fc:c9:66:dc:f9:cf:1e:dd:1f:
                    00:c1:3b:86:8d:e3:f5:e2:6b:5b:c0:59:cd:ce:7b:
                    61:d9:6c:5b:16:b7:ee:94:3d:82:3d:da:df:83:7b:
                    1f:07:4c:70:4e:f0:32:ee:0f:86:16:d2:51:b1:67:
                    6f:5d:d0:02:95:07:5e:11:c8:f1:e2:3a:ef:ef:56:
                    37:a3:e8:b0:27:2f:c9:86:0d:52:82:2b:2d:95:1d:
                    32:24:8d:16:f3:a4:3b:df:bc:08:11:a1:93:51:ae:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:54:91:CF:C8:2A:81:74:AF:8F:EE:60:44:C2:CB:C6:CD:4D:17:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/10f6d14d-5d1a-3d51-bd65-13a9caae2268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:7f:9f:01:af:08:e5:b9:56:4f:db:77:af:8a:ed:9c:0d:e3:
         ad:8d:f2:a6:2c:a0:50:27:b1:1c:ec:97:f4:f9:d9:4c:02:91:
         7c:75:38:68:7b:42:a7:a3:3e:7f:b4:80:c0:60:22:14:56:1d:
         8f:90:9c:87:a2:fe:ed:a8:21:eb:ff:14:3e:b5:5d:ba:87:40:
         77:e1:e5:c2:b6:75:01:23:80:6b:92:45:90:86:17:37:86:4d:
         75:e5:7f:bd:40:aa:91:5d:1d:37:3f:01:6b:16:4d:4c:ba:27:
         68:b0:16:f1:65:51:09:75:95:41:0f:a1:4e:ae:8b:5d:68:5f:
         c4:35:48:4e:44:55:81:be:62:a4:33:48:15:02:9c:23:e9:5b:
         71:84:24:3e:e9:ec:99:b0:34:6f:f0:2b:f3:35:2a:14:05:fd:
         c9:8b:3f:65:1f:cb:fb:e2:3d:32:dc:73:26:ab:55:89:18:e7:
         5f:89:e8:43:84:c7:7d:56:af:c2:23:e5:67:ff:33:c3:00:bd:
         06:0d:30:38:5a:b8:48:cc:d7:c7:07:73:ef:d6:7f:72:5b:62:
         2d:63:99:9e:84:06:2c:c7:fd:0c:26:25:0e:19:6e:93:0e:22:
         73:84:92:50:a3:f7:1e:3c:02:5c:12:2b:01:ce:24:40:c4:3d:
         45:72:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:02 2025 by rpki-client