Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/b0dd3e66-26a4-3768-8ae9-9f4611f0ed64.roa
File:                     b0dd3e66-26a4-3768-8ae9-9f4611f0ed64.roa (raw, json)
Hash identifier:          7WLMCJ/bjTfzqR5u3vBtTKEJhqXX7Jh3MKATvdI3piM=
Subject key identifier:   08:56:AD:0F:E4:39:E1:56:B2:47:CC:0F:28:A3:06:A7:F9:F7:09:02
Certificate issuer:       /CN=69ae5b34-c59f-40db-9452-6e21ecb81731
Certificate serial:       010D0C9F4328584B94421D5B94B3FD0AD315E000
Authority key identifier: 08:DA:6D:A9:1C:44:80:F0:1C:84:A7:EB:5D:A4:C3:F0:D8:75:1A:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/b0dd3e66-26a4-3768-8ae9-9f4611f0ed64.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     210250
IP address blocks:        67.202.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:1d:5b:94:b3:fd:0a:d3:15:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ae5b34-c59f-40db-9452-6e21ecb81731
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=b7514226-9ecb-45d3-9d3e-79b247a9e09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e0:99:77:3f:4a:ac:4a:a7:8b:7c:67:33:1c:
                    6e:1e:27:9f:9e:1d:6a:a3:eb:92:9b:3e:7e:ee:f8:
                    04:62:f8:30:6f:5f:28:91:5d:39:93:80:48:25:b2:
                    84:df:32:1d:4e:ff:2d:c0:cf:82:66:02:66:48:48:
                    eb:43:9e:99:b2:15:23:32:dd:01:40:89:8e:2b:30:
                    0e:96:3c:92:c9:51:be:b0:11:fd:4a:f7:47:84:35:
                    53:3e:f8:f2:19:7d:17:02:41:02:ad:42:a3:7a:0e:
                    48:0c:49:2d:2f:79:38:da:08:97:ec:2b:78:39:1b:
                    5c:ba:db:8f:88:3b:f8:23:d1:b6:08:cc:d8:f8:5f:
                    ff:c4:2b:79:cd:06:53:7b:ef:9a:39:2e:43:9a:ef:
                    a1:26:ee:44:8d:92:52:29:c4:48:66:2f:b6:fb:6f:
                    d9:84:38:3e:51:89:e9:ff:d8:f5:4c:fe:d7:da:7f:
                    26:4d:96:62:e9:6b:29:79:2e:4b:d5:fb:27:b6:9e:
                    72:42:2b:9b:ae:95:99:5b:04:79:50:48:bc:64:fa:
                    36:01:56:19:a4:a2:83:44:d3:cf:02:a4:c7:58:91:
                    0b:3b:5d:7b:6c:bc:5d:47:c0:a7:77:6d:89:91:23:
                    45:16:d1:9f:90:b2:1f:09:36:14:bb:fb:a6:f6:ae:
                    8b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:56:AD:0F:E4:39:E1:56:B2:47:CC:0F:28:A3:06:A7:F9:F7:09:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/b0dd3e66-26a4-3768-8ae9-9f4611f0ed64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.crl

            X509v3 Authority Key Identifier:
                keyid:08:DA:6D:A9:1C:44:80:F0:1C:84:A7:EB:5D:A4:C3:F0:D8:75:1A:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.202.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:a5:66:f7:ea:ba:36:00:8a:40:67:fc:41:09:b8:4d:c1:eb:
         e3:87:87:c0:0d:4e:55:5b:08:19:23:b2:ac:14:29:2c:9a:53:
         d3:0a:89:47:1a:c5:1b:3a:50:65:55:ff:39:03:9f:2b:36:12:
         e7:d3:6f:4d:40:8c:e4:ba:f2:d8:f1:6f:df:d2:d6:09:af:49:
         03:d9:b4:4f:f1:9f:c2:ae:3b:cb:ba:cb:e8:d0:e3:3b:2d:b5:
         a1:dd:7f:79:6b:4b:42:a2:99:be:a0:d9:06:a1:12:7d:51:d5:
         97:56:c2:87:63:cc:cb:8e:34:06:0c:6c:0f:a1:c9:68:0e:5c:
         6e:97:29:7e:c0:7c:80:ce:13:c5:54:48:78:e4:16:f8:ff:ae:
         7f:1c:64:db:36:8c:e7:6c:f6:a9:42:c4:59:27:e1:a5:c1:22:
         5f:17:c2:7c:e1:1f:7f:e0:0f:aa:04:74:62:81:44:f3:7b:3a:
         c6:4d:70:09:6e:67:07:c1:5d:70:05:1e:2d:ef:c9:2a:5c:57:
         42:4e:78:aa:dd:59:a9:5f:42:51:79:63:6a:e3:6a:2b:a8:63:
         ba:45:64:a7:b4:1d:ef:a0:fb:db:b9:11:79:27:89:b0:b6:49:
         48:4f:c7:62:39:1c:bf:9b:83:a8:93:fd:e0:5a:43:68:20:7b:
         1e:41:1f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:54:15 2025 by rpki-client