Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/14e3b96f-0381-351d-8e9e-a6dbc2cf3f94.roa
File:                     14e3b96f-0381-351d-8e9e-a6dbc2cf3f94.roa (raw, json)
Hash identifier:          WtnD9CaRMqBCni7MIRUiSTxQ+xM9QV05uSwn8ZYef2E=
Subject key identifier:   A4:4F:DC:83:0D:B0:AF:0F:08:A3:58:D5:34:25:E2:69:94:9C:73:FC
Certificate issuer:       /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
Certificate serial:       010D0C9F4328584AECC129F96F9A71328ABD6A00
Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/14e3b96f-0381-351d-8e9e-a6dbc2cf3f94.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     397444
IP address blocks:        69.59.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:29:f9:6f:9a:71:32:8a:bd:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=7d9f4e71-4f8b-4d0b-b612-32aacedc1dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:dc:7e:76:71:03:77:e7:c9:37:9f:06:3f:39:
                    bd:a1:31:f9:7a:8f:d2:82:ff:55:38:46:89:f4:05:
                    46:2c:32:4d:e4:e8:53:71:d7:e6:da:68:7f:9a:89:
                    29:4b:ca:78:de:64:32:82:a4:46:50:98:01:78:3f:
                    1b:13:a7:22:97:8a:92:a3:3b:4a:62:ba:94:28:c6:
                    84:52:a4:69:04:14:41:e7:bd:23:61:ae:70:11:19:
                    af:d9:5b:15:af:68:17:51:49:7c:7d:93:92:c7:8a:
                    fa:74:b5:f4:0c:09:12:51:35:41:0d:fb:36:3c:72:
                    5e:7d:95:be:9c:75:c8:8d:9b:ff:3d:08:88:1d:5d:
                    23:29:8b:ff:dc:18:4a:1e:63:b5:54:ab:ea:ae:e8:
                    3c:47:96:f4:40:ea:9f:16:b8:77:e0:c9:9d:9c:36:
                    73:da:cd:fc:4f:0e:9d:e3:09:ef:c7:54:bd:58:22:
                    2d:95:7c:e6:26:f7:00:42:36:80:b8:e3:7c:11:0e:
                    87:97:43:a5:cb:8f:62:c9:85:6d:89:79:fb:d3:8c:
                    01:49:12:d3:2d:35:b5:f2:86:f9:27:38:99:71:8f:
                    84:82:01:c1:9f:66:d8:96:93:c7:58:9b:82:e0:f5:
                    f0:a1:1d:29:0b:bc:9c:11:43:1d:92:4a:c2:1c:4a:
                    a5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4F:DC:83:0D:B0:AF:0F:08:A3:58:D5:34:25:E2:69:94:9C:73:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/14e3b96f-0381-351d-8e9e-a6dbc2cf3f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl

            X509v3 Authority Key Identifier:
                keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.59.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e6:cc:33:f1:49:d3:1d:80:b3:03:9b:36:1e:6d:da:6f:fd:
         4d:07:3b:8d:f5:d6:a7:ea:b3:76:b6:63:1d:57:a3:cb:2d:a1:
         67:d8:33:33:07:20:2a:ba:08:c0:f3:42:b4:70:4d:cc:34:4d:
         3b:3a:94:82:c4:b7:9f:60:8e:88:37:3c:d9:59:b4:af:85:30:
         28:5c:e0:c3:a2:3f:fa:d1:ff:64:4c:93:ad:e4:62:5c:1c:ac:
         ac:5b:54:8f:1d:70:c4:07:24:dd:b1:4d:27:e9:52:46:54:e8:
         02:0c:83:c1:05:d6:f8:80:6c:fb:b9:36:a1:3d:11:aa:78:a1:
         8b:6c:8b:01:cc:dd:4b:db:0c:fa:a9:ad:a4:11:44:eb:ee:f3:
         e0:8c:8b:d6:0a:b9:b7:1d:6f:ed:35:56:fb:66:23:88:81:9b:
         a0:6b:95:dd:2f:b1:ad:39:92:06:94:f7:40:90:16:c6:dc:4f:
         14:32:35:f6:e9:d4:74:0c:df:75:32:f9:79:78:2c:96:88:0a:
         7f:a2:4e:27:a2:e2:ce:40:44:87:e6:6e:b4:8e:f7:47:9c:26:
         52:9d:f9:88:8c:b0:24:e3:2e:3c:43:e0:ab:a4:71:0e:4c:cd:
         67:fd:64:6b:30:5b:9e:14:d2:eb:a2:19:41:0e:09:c4:94:d4:
         f0:0f:a9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:21:33 2025 by rpki-client