Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/4a545238-0a7c-3d7b-93f1-aa42b65faae7.roa
File:                     4a545238-0a7c-3d7b-93f1-aa42b65faae7.roa (raw, json)
Hash identifier:          Zh5NNWFV3+5XSdYHCdSB3wUaQRops6dwn77XeaukVGc=
Subject key identifier:   AF:3D:DE:C2:3D:93:93:F6:92:49:A1:80:EA:C2:70:84:C4:9E:D9:F8
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584AADF0FFF84E8A923669F03280
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/4a545238-0a7c-3d7b-93f1-aa42b65faae7.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     19197
IP address blocks:        69.41.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:ff:f8:4e:8a:92:36:69:f0:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=34501c8a-3121-4506-92ba-bbe0ef763e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:bc:50:85:69:5b:d7:a6:63:99:ab:ca:9a:
                    39:52:74:8d:d6:c8:ea:3d:b1:d6:79:57:76:2b:d8:
                    90:5b:5a:1a:a3:c1:91:bf:49:f7:40:2c:0c:5e:23:
                    02:9e:ba:3e:a8:bb:16:d2:c1:bb:e4:a2:c6:26:3a:
                    fb:3a:29:e1:1d:47:b9:7f:ff:a5:78:af:dd:2a:02:
                    7c:0a:db:04:ac:19:e9:4c:18:e2:cd:71:50:d5:74:
                    0f:e2:fd:10:96:fd:5b:7d:7f:a5:c9:10:07:98:ff:
                    a9:d0:1a:2c:3f:d0:42:6b:6c:01:fd:52:22:e0:f7:
                    06:31:3d:2f:25:d6:db:1b:1d:f2:00:1b:cd:74:9d:
                    56:78:da:49:2a:a9:a4:4b:a5:c7:99:53:8e:95:0c:
                    5c:5a:55:ca:f6:f2:92:59:33:38:4f:2b:ef:84:5c:
                    29:8b:43:51:80:46:5a:d9:1c:96:69:dd:30:80:3f:
                    4e:af:3c:71:dd:06:3d:7b:a9:48:f4:70:eb:8b:13:
                    21:ba:ab:a5:f1:d7:3d:7d:1c:45:d8:37:40:53:4d:
                    73:4d:ac:c6:53:ec:47:3d:82:93:69:05:31:e4:5f:
                    6f:02:92:af:8d:e1:af:09:73:e5:29:a4:7c:dd:31:
                    be:64:9e:4b:11:d0:84:b5:8e:cc:a4:c7:74:22:2d:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3D:DE:C2:3D:93:93:F6:92:49:A1:80:EA:C2:70:84:C4:9E:D9:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/4a545238-0a7c-3d7b-93f1-aa42b65faae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:97:40:6d:26:18:3a:4b:a4:f3:3e:78:1a:3a:88:37:5e:e8:
         40:29:da:44:18:44:11:1f:c0:ae:d8:74:ec:e5:5c:1c:f8:8d:
         d2:c8:05:2f:f6:7d:17:2e:40:63:cd:86:d8:9c:4b:ec:bb:25:
         a4:2a:dd:87:86:0b:a2:95:1b:fb:fd:cd:9a:55:62:9e:01:ca:
         0d:2a:2e:ea:dc:3a:d4:99:ed:c7:2a:85:93:1f:d2:83:7e:9e:
         60:a6:54:9b:72:c8:16:d4:8e:cd:10:e0:b0:d9:90:cd:21:22:
         8f:e0:70:eb:ff:0e:8f:71:d8:e0:35:3d:a4:51:b6:5d:e8:f2:
         8a:f1:19:fd:67:0e:18:65:89:89:f5:72:f8:07:ab:fe:66:79:
         79:7b:db:45:6a:2e:32:3e:ad:7c:50:a7:d5:e9:cb:b2:f1:7c:
         11:6e:9d:a0:54:5d:90:af:0a:1f:d1:b4:8b:3c:d7:f8:64:cc:
         4e:41:38:09:ff:ac:46:6b:a8:cf:ff:ce:38:8a:7f:ec:75:dd:
         b4:04:28:30:aa:bf:a1:57:d3:b5:e6:e0:22:0b:92:c2:46:04:
         b3:6a:14:c4:e1:29:ec:fd:66:92:87:24:2e:65:51:75:49:16:
         bc:12:13:ac:79:e5:1e:bd:38:c0:72:64:6f:d6:98:49:2b:c8:
         43:9d:5f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:30:33 2025 by rpki-client