Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/72285003-2342-35e0-8c5e-615711593847.roa
File:                     72285003-2342-35e0-8c5e-615711593847.roa (raw, json)
Hash identifier:          /4J97rbwJ11Ml1FDHuVK0rbEurbiMhqWae0YlQDtCQw=
Subject key identifier:   E6:89:9E:8E:EE:F5:AD:19:FB:74:8B:89:76:08:07:58:AC:88:0F:57
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B715CAE0CECDBE159F572EB00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/72285003-2342-35e0-8c5e-615711593847.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     13692
IP address blocks:        69.1.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:ae:0c:ec:db:e1:59:f5:72:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=f8f3d8be-7cd5-43aa-a2f7-32993bf900be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:8a:ce:2b:2f:cc:22:a0:fb:86:38:54:3d:
                    82:7e:90:3a:6c:bf:ca:3b:df:ae:07:36:d9:5f:51:
                    f6:45:ea:3a:e6:80:70:ef:f7:9e:32:a3:92:af:97:
                    37:78:8e:ac:1e:83:e6:bd:67:ac:7d:28:06:7b:2b:
                    20:7a:f1:d9:d2:5d:79:84:95:20:ce:c7:08:32:44:
                    16:81:1f:5d:d0:44:cd:c5:d2:b0:04:5c:b0:08:2d:
                    17:4a:7d:b8:43:c6:72:8c:8a:13:9f:d2:c6:7f:f4:
                    3e:d1:a7:b4:78:44:0e:35:8f:23:c2:6f:49:f5:4b:
                    aa:71:3c:67:4d:19:40:d5:ff:d3:e5:ac:95:79:d7:
                    0c:df:0f:ae:66:a8:17:83:58:84:85:a9:c1:fa:ee:
                    ff:b1:90:ed:e3:87:a7:1b:b4:86:61:1e:06:24:ba:
                    51:05:6e:5b:d0:52:27:05:14:a7:27:57:73:a6:1f:
                    1f:32:88:8b:03:4d:30:df:7e:81:0f:88:a6:71:9d:
                    ab:8d:58:25:89:28:55:1a:40:ec:32:ed:e8:d2:92:
                    64:f2:0d:6c:78:dc:ae:a2:2c:0f:da:48:91:5d:9a:
                    eb:49:9f:98:33:14:1f:19:10:74:27:50:14:0e:92:
                    fc:9c:7e:c9:1f:11:15:ac:55:8a:1b:f4:98:19:12:
                    c3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:89:9E:8E:EE:F5:AD:19:FB:74:8B:89:76:08:07:58:AC:88:0F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/72285003-2342-35e0-8c5e-615711593847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a1:fb:b6:81:53:f7:32:d9:ec:6d:f0:19:2f:62:93:54:52:
         3a:05:49:42:5f:a6:08:58:a5:bf:7f:94:69:5d:4e:17:f9:0d:
         bd:8b:0f:ba:90:21:c8:bb:51:e8:37:1c:af:31:ea:8f:52:01:
         ce:39:9b:fa:a1:61:5a:1b:25:0b:91:5e:21:70:6b:d1:54:5b:
         fc:86:f8:a1:24:ae:30:d4:0f:67:d4:25:29:36:b9:47:5d:05:
         90:59:3e:88:84:bd:a4:cf:11:9a:26:78:29:ff:f3:28:46:c0:
         8e:75:56:ec:c9:57:63:57:a6:f2:7b:57:5b:b0:0c:c9:0b:8c:
         29:4d:e8:67:e6:9d:09:b8:e3:b3:70:54:eb:72:da:b2:96:c7:
         83:5b:ab:ba:cf:c7:2f:3f:af:3f:ca:42:18:b9:cb:52:10:5f:
         c1:56:67:7f:d5:44:60:9f:f6:5e:80:42:70:03:3f:12:bf:d4:
         dd:93:d6:de:c6:ac:13:93:34:31:18:7b:18:3e:26:2a:13:bb:
         36:65:b1:55:f3:b7:e8:a3:1b:74:e4:b3:60:c0:7b:c8:28:e7:
         e5:d4:f8:f4:5f:6f:c7:5a:ae:c2:38:83:1f:ce:4e:43:a2:d5:
         75:6c:a3:c9:c8:91:99:9b:c5:0d:9e:5f:17:89:cc:3d:36:88:
         f8:87:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:21:20 2025 by rpki-client