Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/b531105f-a4af-323c-9208-5b8904f199fd.roa
File:                     b531105f-a4af-323c-9208-5b8904f199fd.roa (raw, json)
Hash identifier:          qUyMDkAe9rneIyf5DXsT4f3JzFtHfePFsTmIGRToVq0=
Subject key identifier:   6A:DD:41:02:DF:DD:88:18:46:10:63:CA:61:3B:05:45:3F:5B:F0:C9
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584AC710EF500DC15753BF8F5D80
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/b531105f-a4af-323c-9208-5b8904f199fd.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     18914
IP address blocks:        206.168.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:ef:50:0d:c1:57:53:bf:8f:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=3e9187a3-2ba6-4ebe-b140-af06a7ca7daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:7f:9c:0a:93:82:7b:49:52:95:dd:55:45:
                    4c:cf:dd:b8:29:78:ec:f3:1c:0d:ec:11:40:51:b2:
                    c9:8e:31:38:99:f9:05:2b:ef:39:cf:5d:db:c5:85:
                    ea:ff:a8:62:13:0c:93:00:c6:eb:cf:e3:98:04:0c:
                    cd:a5:68:74:22:70:a6:5c:b8:c0:1d:cb:e6:ca:ec:
                    ba:1a:74:1e:05:af:6e:17:83:80:e7:a7:26:0d:17:
                    23:3b:7a:27:36:fd:48:5b:30:0a:c9:fb:3c:17:23:
                    cc:b0:dc:fa:db:07:47:99:40:75:c2:78:76:91:60:
                    5f:66:b8:81:01:a4:98:eb:1d:9d:12:ca:b3:41:7f:
                    a4:f8:e2:3a:4b:fd:5f:a3:dc:4d:a0:a1:d4:60:e8:
                    1f:41:52:e3:cc:03:6b:4a:b9:a4:f1:35:f1:e2:2a:
                    db:92:7a:d0:b6:ec:02:6b:0e:37:a0:8b:55:db:b2:
                    88:bc:ff:0b:be:22:2b:a3:d3:6f:a7:1e:c3:c8:30:
                    3f:d2:06:84:5e:18:1d:65:45:bd:a4:0f:31:b6:0c:
                    86:45:69:8a:30:b1:32:24:de:d2:7d:52:ec:d8:97:
                    82:0d:8f:3e:84:a9:0a:48:27:45:2f:5a:db:b4:83:
                    79:06:2f:9c:e0:87:35:8b:a3:5d:6b:cf:62:c9:c6:
                    ae:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DD:41:02:DF:DD:88:18:46:10:63:CA:61:3B:05:45:3F:5B:F0:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/b531105f-a4af-323c-9208-5b8904f199fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c4:6b:85:d6:ce:1a:d6:83:ba:c3:54:a9:49:ed:df:91:5b:
         2b:c7:56:05:c8:27:48:45:36:3b:68:35:6f:c9:65:28:56:62:
         48:91:cd:9e:55:c1:55:aa:aa:37:7a:df:56:2c:7b:21:39:e8:
         f8:d2:da:69:21:f3:b8:ec:7e:b8:7c:e7:48:10:62:84:df:3b:
         b7:82:c9:f2:c4:4e:6e:56:a9:8c:b5:8b:8c:89:5e:0c:dd:2d:
         57:32:d7:03:34:46:0d:9e:ea:cf:b7:d5:50:40:ab:2a:64:a0:
         c4:ab:23:2c:e3:d4:39:8a:6b:49:6c:c5:b0:78:cf:5f:07:9a:
         dc:58:43:83:55:37:3b:f5:3c:c6:59:33:01:77:0a:8c:6f:f1:
         e6:fc:6e:00:bb:2e:6f:91:eb:af:b5:c3:83:be:ab:12:94:1c:
         2b:62:ce:0a:f3:72:4a:ff:05:d0:7a:cf:75:59:50:2b:c4:11:
         d0:e7:a3:f6:b6:c9:66:dc:1c:85:01:a7:a8:ab:0f:65:b2:84:
         1f:89:a5:3e:29:84:56:fd:7f:ac:3e:f5:24:f4:70:2e:d1:d6:
         e1:34:7a:21:f7:62:ab:23:3d:9c:31:9a:fb:47:f3:9f:13:aa:
         79:41:bf:5c:9f:15:44:bd:36:fc:20:44:1e:f1:48:1e:ce:18:
         74:d6:eb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:09:27 2025 by rpki-client