Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa
File:                     ce268d52-bc78-36a5-a64e-f76a492c0e21.roa (raw, json)
Hash identifier:          Aut//x9NiEI77UuCPHmRagAtL/39t9qrp9yruYcpuiE=
Subject key identifier:   7C:88:2D:EC:4F:B3:BF:BF:53:80:70:65:D2:0F:94:33:F2:0A:87:5A
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F4328584A268AC3D15F8CA06752CD3300
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     6954
IP address blocks:        69.4.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c3:d1:5f:8c:a0:67:52:cd:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=62940569-e714-4e42-83de-09277456163f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:e3:06:b4:3e:bb:5e:fc:7a:6b:6f:9f:26:
                    19:2e:43:a5:e7:b7:63:c0:f3:9c:ca:49:83:4d:04:
                    7d:e3:48:64:8a:08:51:0e:fa:23:d6:d1:a2:54:fd:
                    b1:56:4e:78:d0:0a:28:e9:60:de:98:64:ca:76:93:
                    0f:1f:00:e5:ad:55:e7:1c:8d:4a:e4:06:27:c0:19:
                    e2:ca:24:04:12:bd:3c:e3:75:1a:95:ab:b4:7d:84:
                    19:7c:0d:aa:0e:4b:3f:03:c4:16:54:14:eb:99:62:
                    01:28:fe:2f:c2:67:79:75:81:91:61:79:4b:e9:d5:
                    e8:ee:09:4c:80:1f:3f:8b:bd:92:a6:af:3b:f3:c0:
                    1d:37:59:33:37:ba:1e:80:c2:84:e5:2e:d1:df:41:
                    13:78:a9:a1:9b:f8:0a:f1:0e:06:b8:88:4c:29:b8:
                    4c:0a:7b:6c:bd:ea:8a:66:a1:c2:5b:2b:67:5b:21:
                    94:50:94:ae:d0:8f:2a:21:55:34:5c:b6:c5:48:20:
                    98:fd:f1:14:2d:9a:4c:2d:5a:79:74:57:f7:77:bc:
                    3b:dd:87:ff:15:4e:50:49:4d:68:1c:83:99:c2:b6:
                    f5:7a:09:21:a2:21:bf:ef:d9:81:6e:44:1d:76:98:
                    a3:2e:f0:fc:36:e2:ee:97:75:f2:a0:64:36:8e:bd:
                    86:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:88:2D:EC:4F:B3:BF:BF:53:80:70:65:D2:0F:94:33:F2:0A:87:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:51:50:c8:56:15:91:9f:95:9a:3d:dd:b5:e3:b2:35:9c:92:
         b7:57:a7:95:61:54:75:a6:7b:f3:be:e5:b7:d2:8e:47:de:89:
         ac:74:8e:60:b1:73:0b:0e:63:de:22:d2:62:65:24:36:c3:4c:
         75:02:0a:a7:7d:9d:d9:15:f4:26:a5:85:74:13:c7:6c:15:53:
         c2:03:8f:8a:94:2a:d4:59:d6:bb:ff:7c:d0:fb:e6:24:01:50:
         38:0f:dd:30:12:5d:84:de:67:26:6d:b2:c9:b5:2b:00:ac:4e:
         06:91:5a:1d:60:d1:d8:14:d1:25:4c:98:63:c5:5c:08:d5:6e:
         a0:ff:b6:21:de:13:7f:de:3b:1b:39:57:db:e2:e2:c8:7e:24:
         af:2e:c7:02:f8:c4:ba:84:ed:a2:48:22:78:f6:89:0d:d5:55:
         2a:55:26:53:c9:19:93:16:8d:80:a0:e5:64:b1:2f:a7:f6:41:
         e4:e0:d5:40:a3:28:cd:2f:61:55:f2:e6:46:15:7d:e3:1c:3f:
         fa:9d:7c:2c:64:7f:0e:1b:18:74:3a:cb:13:c4:c4:b6:74:2f:
         2b:bf:ca:09:8e:e5:e5:17:c5:38:e1:74:56:b8:5f:83:83:ba:
         f3:55:ce:da:23:de:df:15:16:3d:f8:b5:50:5a:39:fc:5b:3c:
         7b:c8:06:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:25:17 2025 by rpki-client