Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/068f564c-72d1-3af1-870f-02a675ebf3a6.roa
File:                     068f564c-72d1-3af1-870f-02a675ebf3a6.roa (raw, json)
Hash identifier:          8OMeop+ou+AVJPqpAogP3NweLq/iUu8/XrhxHhvhWok=
Subject key identifier:   1B:8C:96:2D:DC:D6:D8:C0:8E:25:A1:5B:F1:86:BA:92:52:1E:2E:A3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC9DB9B6DB755DBDF413CB080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/068f564c-72d1-3af1-870f-02a675ebf3a6.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     12222
IP address blocks:        72.247.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9b:6d:b7:55:db:df:41:3c:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=ee44b2a9-de05-45a2-85a8-9ff2e3adadf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d6:2d:dd:9c:b6:cc:a6:7c:8d:a5:dd:63:63:
                    f2:ac:68:df:ae:58:9a:03:37:72:69:8c:98:a8:18:
                    8b:c9:e3:9d:07:59:e8:16:75:f6:81:7c:f4:a9:43:
                    ea:e2:dd:e9:df:0e:48:94:88:af:af:9a:59:da:88:
                    66:74:db:cc:e6:49:56:8d:92:22:34:48:6d:d4:a2:
                    3c:f0:4b:cd:79:ad:3b:d8:28:6f:07:09:ad:51:cb:
                    89:c5:a1:d7:b3:cd:6d:4e:86:c5:91:6b:ae:18:40:
                    d9:de:8e:0f:db:db:69:61:ae:f6:52:ee:5e:dc:b9:
                    a6:79:b5:1a:dd:bf:28:58:9e:8a:f9:bc:61:4e:1e:
                    f8:24:6e:1a:34:58:18:24:61:00:b4:2c:85:db:46:
                    e4:b5:75:96:c2:d3:29:af:92:5d:69:98:cc:f5:78:
                    3b:19:dc:17:3d:21:e0:3c:11:a9:74:c8:1c:cb:be:
                    3f:a0:87:d9:51:f2:9d:c3:03:ee:96:7f:f6:22:63:
                    b7:f5:96:1a:bd:db:7d:5d:d3:96:0d:01:13:2d:7a:
                    5c:5e:ef:13:9b:54:73:9a:11:e3:c4:75:a3:5d:f9:
                    17:46:82:9f:e8:11:b5:a7:2a:a9:ec:b1:45:5c:a6:
                    d0:c6:98:c7:02:67:b6:d5:43:45:cb:64:68:f3:6b:
                    b3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8C:96:2D:DC:D6:D8:C0:8E:25:A1:5B:F1:86:BA:92:52:1E:2E:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/068f564c-72d1-3af1-870f-02a675ebf3a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.247.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:dd:af:6c:b1:59:64:13:dc:dc:54:c5:2c:2b:7c:35:6c:b4:
         94:09:92:b1:44:2a:6a:8c:b2:db:04:c9:4c:3f:a8:e1:b8:9d:
         9f:c6:36:1e:39:98:0e:aa:60:d3:38:52:68:de:25:80:ea:9b:
         19:db:a2:20:37:44:08:aa:ca:fe:51:62:e5:45:3d:18:f3:c4:
         53:54:14:71:51:61:97:d8:d2:9e:8a:35:8b:30:7b:da:0e:a8:
         03:17:a8:80:d3:90:11:f4:18:93:e5:2c:55:8e:9d:a5:3b:19:
         6b:b2:f8:7c:00:b8:d4:a5:50:b4:22:6c:75:88:53:fd:96:a4:
         09:f0:9c:19:04:50:a9:08:52:2b:6c:17:f5:bb:db:65:29:1e:
         3d:5a:38:05:af:d3:7c:5a:e1:aa:ee:85:fa:96:ea:73:0b:9d:
         31:4e:8f:03:7a:9b:5d:8f:64:76:2a:fa:fd:a9:22:dd:f2:bb:
         b4:15:d3:e8:2e:4e:f6:e1:c7:13:49:b8:8b:7c:63:2a:7a:00:
         b1:d8:18:59:d7:09:d8:90:a2:b2:65:46:1a:af:2b:42:78:33:
         fb:9e:a2:60:5b:61:e4:dd:23:d9:ed:6e:7d:88:97:ff:1b:a1:
         fe:71:97:20:87:41:bf:18:47:ed:57:3e:24:12:df:be:e7:f7:
         f4:d7:c6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:56:19 2025 by rpki-client