Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/2860d199-0250-3813-a4a8-a450018b6327.roa
File:                     2860d199-0250-3813-a4a8-a450018b6327.roa (raw, json)
Hash identifier:          IsjscDChpWwFXaa+S9Nuke27EPsHK1Rgp/XcHTHT64Y=
Subject key identifier:   89:52:53:55:DD:56:F4:B6:DA:B9:50:61:F0:5C:23:B5:62:25:42:02
Certificate issuer:       /CN=12380a37-68ce-4e9c-9585-53cd09071ada
Certificate serial:       010D0C9F4328584B742755ACCED263A357CC6EC0
Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/2860d199-0250-3813-a4a8-a450018b6327.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     397703
IP address blocks:        69.80.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:55:ac:ce:d2:63:a3:57:cc:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=310077f1-d87e-42bd-8ecd-919a611f432a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:05:60:19:fb:8b:50:77:17:04:aa:82:ad:
                    03:e4:c5:11:de:3f:d1:b7:e5:5d:36:92:db:cf:54:
                    74:56:82:9c:93:cd:6e:83:aa:62:3c:fe:64:dd:33:
                    3b:a8:0d:33:94:a5:78:84:33:35:b7:41:16:4e:1d:
                    af:91:3e:78:31:ea:d9:a9:b8:1e:f9:7a:4a:db:00:
                    8e:7e:fe:b1:02:c1:b3:c4:42:8b:17:16:15:fe:a4:
                    4b:e6:55:4a:4a:6d:02:8a:e4:98:65:b1:45:20:4a:
                    67:62:16:45:a2:f0:8d:1f:b3:6b:b4:0c:c6:a5:f5:
                    f0:33:d3:5a:36:0f:9e:61:76:b8:bc:6c:ae:80:65:
                    33:bb:0d:50:1a:3e:41:0f:c9:14:d2:6b:3f:6d:8f:
                    96:8f:9e:f4:f7:31:55:24:9b:99:f6:1c:04:e3:93:
                    a5:9e:92:55:e0:09:c9:30:af:5f:bd:80:82:65:04:
                    f2:7c:76:9b:f4:53:16:1e:08:ff:de:4d:6b:5f:d3:
                    c4:f8:07:c9:97:80:c0:25:b1:59:78:9e:1a:ed:45:
                    e3:72:e7:d1:79:9d:03:51:79:8f:af:2d:e0:58:7c:
                    e4:04:67:60:ba:51:f5:e8:c5:bd:ed:38:6f:3b:91:
                    42:4b:36:dd:ef:bf:66:1e:cf:d8:9f:57:6d:a3:f2:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:52:53:55:DD:56:F4:B6:DA:B9:50:61:F0:5C:23:B5:62:25:42:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/2860d199-0250-3813-a4a8-a450018b6327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl

            X509v3 Authority Key Identifier:
                keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:45:a1:56:b3:d0:93:4f:88:a1:30:3b:a0:ce:85:31:fd:8c:
         a1:de:8e:44:02:49:4d:33:32:fd:08:ce:4b:27:ed:c5:20:d3:
         ea:15:fb:d5:4f:2b:3b:0e:ae:00:58:6d:c6:f2:52:6d:2f:db:
         37:65:0f:5c:74:4b:82:24:b6:ba:3e:42:03:b4:56:9a:59:2d:
         c2:90:93:d4:5e:2a:65:09:9d:23:26:93:03:01:00:77:f1:f0:
         84:0d:6b:8a:7a:af:28:b9:d3:c4:41:03:6a:2a:a8:41:3d:7e:
         10:5f:af:0b:11:80:4a:cb:0b:7d:ba:60:89:cb:35:96:f9:ba:
         0d:e4:e6:bb:c2:33:2d:fa:85:c1:78:9d:dc:07:34:4d:0b:74:
         8d:f5:d8:a6:b6:f3:d0:a0:3a:10:b3:d3:a3:7f:6a:91:99:3b:
         ed:74:22:fb:f5:f3:19:91:8e:d7:34:e0:38:06:59:88:8f:24:
         d8:ca:61:45:53:ae:d1:eb:2d:b5:20:87:bb:85:b4:5d:80:84:
         3d:b3:e7:4f:4d:8f:74:30:0c:d7:27:fc:9e:4d:30:3b:3c:5f:
         35:05:34:4e:c7:b9:d6:00:c0:ac:6d:d3:b2:9d:8a:b5:92:77:
         05:8f:1f:20:02:20:df:7d:54:f0:f7:83:48:b8:d0:a8:18:e2:
         a7:f3:fb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:09:41 2025 by rpki-client