Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1f32733e-35c9-3462-9d15-83e8dcf865c5.roa
File:                     1f32733e-35c9-3462-9d15-83e8dcf865c5.roa (raw, json)
Hash identifier:          s9PJDx9J2OCm53KJg6FgB6A2jbNzeENNOWaYIM1CKw8=
Subject key identifier:   B5:F8:E5:44:77:BC:13:B4:DC:F3:5C:4E:49:06:C0:A3:DD:BA:8D:6B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AEF8BC7F7D7ED3DB291508E7C
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1f32733e-35c9-3462-9d15-83e8dcf865c5.roa
Signing time:             Fri 22 Aug 2025 01:00:33 +0000
ROA not before:           Fri 22 Aug 2025 01:00:33 +0000
ROA not after:            Thu 20 Nov 2025 02:00:33 +0000
asID:                     199527
IP address blocks:        69.17.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:8b:c7:f7:d7:ed:3d:b2:91:50:8e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 22 01:00:33 2025 GMT
            Not After : Nov 20 02:00:33 2025 GMT
        Subject: CN=5122f502-619f-4a65-9e6a-438384b165ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ee:05:78:ce:50:e3:c8:29:27:18:e3:08:09:
                    73:8e:e0:51:19:3d:cc:90:2a:f1:3d:6b:4d:0c:4b:
                    ae:cf:ef:88:e2:7e:a1:ff:61:08:a7:4f:fa:66:a6:
                    f4:2d:fb:ef:dd:46:34:0d:eb:fc:41:e4:f8:97:75:
                    8b:02:49:36:03:e0:7b:61:e4:1a:13:36:c2:19:66:
                    46:04:5b:17:50:99:f7:40:33:38:4a:98:6c:89:93:
                    27:86:18:89:0e:ea:9f:a6:51:94:ed:45:42:cb:a0:
                    fc:4f:73:9e:7d:b0:0a:60:d7:b9:d2:4f:9d:ba:96:
                    77:ba:3f:06:0f:b5:82:a3:00:c6:85:6f:b7:5a:0b:
                    f3:d1:fe:0f:2c:17:86:0b:9a:dd:f6:a5:6b:a4:f9:
                    92:7c:38:e5:2d:4c:9d:e5:4f:79:77:fd:64:62:e2:
                    bc:0c:4c:58:74:58:be:ee:61:6b:45:d5:17:58:8f:
                    17:29:44:2c:95:26:dd:2c:28:35:f9:6a:fe:b5:9d:
                    49:72:0c:6d:8a:86:c4:57:b1:d3:1d:4d:77:c7:23:
                    b9:7e:5c:d1:99:f9:85:1c:46:4d:5e:08:05:c6:fa:
                    14:32:f0:a3:d3:87:07:05:60:7d:fb:fa:ca:85:c1:
                    16:27:3e:76:79:b3:43:d9:45:4c:8a:45:b6:ad:3e:
                    a2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F8:E5:44:77:BC:13:B4:DC:F3:5C:4E:49:06:C0:A3:DD:BA:8D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1f32733e-35c9-3462-9d15-83e8dcf865c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f8:fe:cd:16:0b:ab:d8:68:14:d3:a7:dc:91:e4:62:56:39:
         05:f8:9f:5d:d7:82:30:1f:6d:4b:37:9d:d1:af:4e:c9:8e:43:
         b1:d2:aa:a1:f9:17:80:83:a5:ef:27:35:7d:4e:ca:94:0f:a3:
         03:a8:83:2c:22:dd:12:19:73:a6:05:03:35:a3:35:3a:c9:b9:
         17:2f:66:03:44:4b:c1:b9:19:3d:5d:0a:74:b6:cb:1f:21:a0:
         43:39:b5:c5:19:86:fa:1a:73:38:90:32:89:91:df:47:4a:6c:
         2b:7d:e8:50:dd:07:70:6d:77:9f:43:bf:1c:dd:86:86:89:49:
         78:a9:37:3f:bd:84:99:17:27:84:81:6b:bd:68:2f:70:d0:04:
         02:19:b7:88:04:ee:eb:12:cf:5e:c0:25:2f:55:a9:f4:87:3b:
         21:cb:6c:cb:6f:51:fa:0f:47:c5:13:d1:06:14:4f:b9:2b:c6:
         df:19:68:29:56:a4:8d:3d:cb:cb:c6:a0:47:15:a0:44:43:86:
         fe:11:fb:e9:a9:47:7d:be:31:e0:0e:6f:34:b9:d0:79:b1:4d:
         01:d9:09:00:8d:7f:95:cf:28:56:4d:e5:e1:ee:f8:61:84:19:
         4d:01:bd:04:99:cf:91:79:75:dd:ec:ec:50:59:19:f4:e3:31:
         08:70:b1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:51 2025 by rpki-client