Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7bf9a2e4-45e1-3787-9356-ddac5d6f57fd.roa
File:                     7bf9a2e4-45e1-3787-9356-ddac5d6f57fd.roa (raw, json)
Hash identifier:          WYNkNYhvnpoDvAZnY3wM8lm7rRjQPUuiYaAVe015pT4=
Subject key identifier:   71:C7:B8:01:BF:7C:63:5C:C9:73:3E:DB:79:4C:C7:11:C5:E5:E0:B3
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584ADECBB9019EAB545DF9E3ED40
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7bf9a2e4-45e1-3787-9356-ddac5d6f57fd.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     14350
IP address blocks:        69.74.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:b9:01:9e:ab:54:5d:f9:e3:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=27c72026-b81c-4d40-9b88-70e9537a9dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:89:5b:73:d9:23:d7:c2:a7:46:9f:44:36:ab:
                    df:f6:f8:25:98:44:cc:42:cf:c0:25:92:f5:59:d1:
                    33:c9:23:70:5a:93:a0:ae:87:f5:62:a1:49:6d:93:
                    38:c9:40:af:85:6d:8b:03:23:05:b7:2a:4f:32:5e:
                    1a:bd:e1:8f:f5:bb:21:cb:96:a9:07:07:ce:51:47:
                    a2:0a:d9:5d:6a:da:ac:61:d3:4c:29:ae:d4:31:f8:
                    00:12:c7:4a:2e:3e:fa:9b:dc:a8:e3:8e:ae:14:20:
                    22:96:9e:32:f4:94:05:d1:28:4b:fd:fe:bc:41:95:
                    c4:a4:8b:cb:02:87:9e:d2:ff:60:c3:c8:d0:68:17:
                    41:8a:0e:41:87:e2:0f:f8:59:ef:1a:cd:df:1e:57:
                    1e:f3:55:db:ac:f2:bf:06:92:5a:63:f6:70:c1:95:
                    e9:ea:5a:bf:5d:18:31:5b:42:95:b4:a6:b4:fa:f0:
                    bc:87:79:2a:a9:e5:f9:4a:3e:b1:05:5b:29:b9:8e:
                    e0:0d:18:a8:87:a8:4f:54:d3:84:f3:15:26:26:b2:
                    0a:25:5a:16:b2:a6:97:b2:f5:75:4c:29:76:dd:36:
                    a7:0c:dd:2b:b7:ea:91:e7:83:8f:b1:e0:7a:25:ae:
                    ca:3e:eb:be:cf:84:f4:f2:ef:30:1f:9a:00:0f:25:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C7:B8:01:BF:7C:63:5C:C9:73:3E:DB:79:4C:C7:11:C5:E5:E0:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7bf9a2e4-45e1-3787-9356-ddac5d6f57fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:59:ac:ce:31:d5:b6:7d:bd:10:25:7c:7c:e1:35:4b:95:d9:
         0f:e0:48:60:d4:f7:e7:6e:58:d9:26:c1:11:1a:4c:9b:31:e5:
         d3:58:dc:3a:2e:dd:22:98:70:2b:f4:40:cb:48:cd:81:31:12:
         18:d6:bf:f1:54:1d:40:05:69:3e:b6:33:f6:81:8b:37:99:4a:
         79:8c:b6:c4:5f:0e:62:65:f2:c1:67:20:f5:ff:52:0a:12:f4:
         41:54:6a:31:53:e6:b9:12:8e:cb:f5:33:ef:74:0b:40:e4:6a:
         1e:59:a3:99:29:f5:ae:31:30:7a:d2:92:87:02:62:32:ea:36:
         71:67:7a:57:3d:72:a6:ed:ad:e2:9a:db:d9:81:5d:7e:26:53:
         e5:6f:f7:4d:4b:9b:eb:87:0a:c2:2f:f5:7f:3f:02:ba:50:df:
         9e:6c:7c:39:45:55:09:23:93:02:2e:46:aa:08:2a:63:64:d7:
         93:87:4c:72:34:78:18:74:f8:17:c7:15:e8:bf:3f:59:90:fa:
         ee:95:7a:51:26:23:9b:52:ae:b4:f5:cd:6e:a1:9c:68:a5:80:
         19:0f:11:36:56:0c:a3:8e:e4:ff:9c:1f:41:91:aa:f0:d5:9b:
         d7:7e:79:ce:7f:2f:4f:d1:b8:37:63:c6:15:23:92:15:53:1f:
         f5:e9:d8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:51:29 2025 by rpki-client