Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/84273be5-301a-3d96-8539-4750e24fcce2.roa
File:                     84273be5-301a-3d96-8539-4750e24fcce2.roa (raw, json)
Hash identifier:          HEGy2bEiznKbcm2w129o/ndJ+K/6wucMi576KK6CT8Q=
Subject key identifier:   A8:03:F2:54:DD:0C:E0:C1:22:17:95:68:C0:59:15:E4:E8:09:DF:6E
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F43285849C20A080C03DD690D181D4B00
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/84273be5-301a-3d96-8539-4750e24fcce2.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        69.52.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:08:0c:03:dd:69:0d:18:1d:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=3a38c275-d7b7-42ff-81e7-726660f46706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:56:fd:ac:43:21:06:b3:78:a1:bc:8e:1f:
                    cc:31:f0:68:73:24:4e:01:5b:45:f3:0d:ef:e5:e7:
                    7f:53:8d:15:6d:65:c4:49:37:9d:47:29:27:a9:3e:
                    22:05:d5:2b:71:e3:7d:23:66:18:7a:fb:20:a6:b2:
                    8d:d6:e8:f8:b1:c1:a2:bd:97:93:96:99:7a:94:d2:
                    fd:bd:6c:cc:c0:ea:65:28:b6:10:35:e8:c2:14:b1:
                    b6:01:3f:0d:dc:48:47:5f:96:f7:1b:b3:a0:6f:53:
                    56:d6:f3:df:b4:ef:97:bc:e8:c3:63:ef:c6:17:12:
                    ca:72:6d:6e:bc:a8:09:09:df:6d:20:42:c0:4d:3e:
                    ad:dd:01:98:1e:d0:55:f8:46:5f:be:46:89:43:aa:
                    15:56:d0:6d:8e:61:13:1a:bc:eb:92:6f:52:8a:fa:
                    48:dd:f1:d6:06:d9:1d:a2:c5:56:76:f0:88:cf:eb:
                    10:7f:e6:7d:3a:9f:5c:17:64:99:db:a0:e1:d1:15:
                    6e:52:6b:4f:1c:df:c3:78:5b:6b:9f:75:87:59:25:
                    14:dc:ce:e2:3f:5b:a3:9a:c6:b6:a5:e9:43:ef:e7:
                    00:eb:31:16:a7:be:2c:28:25:d7:db:0f:7f:5f:49:
                    31:43:17:44:9a:e3:d7:14:19:4e:15:60:99:a1:e6:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:03:F2:54:DD:0C:E0:C1:22:17:95:68:C0:59:15:E4:E8:09:DF:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/84273be5-301a-3d96-8539-4750e24fcce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b8:98:47:54:90:76:4d:5d:42:7a:d5:83:b2:b8:22:16:50:
         f7:24:a5:34:20:44:e7:7b:fc:60:cd:3c:b0:2e:cc:fe:26:8b:
         5e:92:fa:d7:2b:78:85:dc:a3:d5:a0:7a:27:ad:8d:8e:45:fe:
         4b:dd:cb:13:3c:49:4b:4e:4c:55:e9:6a:8e:e0:93:df:1b:29:
         03:2a:57:db:90:75:ec:47:3b:52:08:e6:3b:62:45:a0:09:2f:
         05:2e:00:41:16:c4:df:e3:11:5c:d4:10:63:df:5a:65:d0:3e:
         b0:af:0a:7b:81:d5:87:a3:6f:bd:85:39:e3:a2:a1:e0:21:13:
         6e:28:7a:76:1e:53:eb:b1:24:17:65:44:15:09:da:6d:85:5e:
         62:8d:70:2e:ee:e5:37:b8:37:4c:c2:09:af:27:ca:2c:c9:d2:
         d2:47:9b:8a:4c:85:33:f4:98:90:50:d5:64:41:00:33:cc:35:
         3f:98:f0:d9:a7:56:9c:3c:6f:da:35:b5:5f:17:ed:f8:b7:95:
         ac:5b:57:5b:07:e1:55:54:9f:7e:50:2e:6a:45:2a:4a:f9:68:
         c9:b9:fa:56:d5:38:b4:de:bf:aa:74:14:f8:a3:b0:bb:8a:39:
         98:0c:4a:45:4c:e3:ec:ff:4d:45:27:36:5e:8d:ea:e9:7f:f6:
         25:89:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:26:29 2025 by rpki-client