Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/11a6e6ab-e62e-360c-b2f4-2d6e3991d4da.roa
File:                     11a6e6ab-e62e-360c-b2f4-2d6e3991d4da.roa (raw, json)
Hash identifier:          ocddcgvqQXl2ZwGuwwDor1LNEmuVGPEsitL+W/6wHuM=
Subject key identifier:   BE:AA:FC:67:F1:9F:5E:A5:C1:7D:F5:33:C4:C1:B7:29:DA:E9:AA:A6
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584A4540411AD70ECD748D6F4856
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/11a6e6ab-e62e-360c-b2f4-2d6e3991d4da.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     46450
IP address blocks:        69.12.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:41:1a:d7:0e:cd:74:8d:6f:48:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=be3c5e2d-df02-47f0-8136-fdf03dbd1e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:42:04:9e:1e:a0:8e:60:29:b3:57:aa:96:
                    ec:04:4c:e0:a7:b6:31:f0:b4:32:af:77:bc:e1:44:
                    d1:4c:7c:ad:3e:63:a5:07:1c:4f:3c:e4:5c:71:30:
                    2f:52:7f:ae:bd:93:62:c8:26:7d:8e:8d:ea:10:2f:
                    39:b7:0e:c0:b5:e0:19:be:c3:88:74:19:a7:39:17:
                    72:cd:bf:d3:ec:0e:e5:13:f6:61:37:07:cf:58:ad:
                    80:d6:c1:c5:8d:af:7a:e1:f2:71:be:79:17:21:3c:
                    0c:06:fe:43:9c:d2:69:9b:85:60:29:96:ce:ab:51:
                    4b:1b:98:8f:67:9f:e8:47:74:2f:aa:e6:19:fe:cb:
                    54:13:e7:2f:c6:ac:b4:3d:55:50:8e:b7:3e:7a:0a:
                    b4:75:08:c1:64:f1:29:69:d1:08:1c:ba:4d:3d:14:
                    c2:b9:3b:bd:58:25:cd:1e:8c:74:10:34:04:02:47:
                    ba:3b:61:b4:4c:99:df:95:93:ae:bb:39:8d:27:7e:
                    53:d4:fc:01:54:7a:d2:c8:ec:1d:70:5a:2e:57:ed:
                    79:47:81:b9:ae:36:dc:ee:67:38:59:29:38:a8:a2:
                    c8:4a:5f:f9:75:99:c4:63:e6:35:68:0b:70:0f:1f:
                    85:41:a6:3d:cd:0f:f5:b1:eb:80:b3:f7:e9:55:99:
                    ad:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AA:FC:67:F1:9F:5E:A5:C1:7D:F5:33:C4:C1:B7:29:DA:E9:AA:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/11a6e6ab-e62e-360c-b2f4-2d6e3991d4da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:99:27:60:aa:3e:4d:11:f3:f8:63:1e:50:88:4c:4e:4d:bc:
         cc:73:54:cf:52:da:97:57:e9:3c:4a:f8:84:30:63:da:33:4c:
         9e:26:7f:0b:26:6b:ef:0a:87:d7:ed:a9:73:5e:b5:f6:74:13:
         cc:e9:55:2f:e5:72:2d:11:06:1c:c6:5f:03:1d:6f:7d:68:83:
         5c:65:bb:6b:4d:bf:48:85:1b:29:87:81:6a:3f:96:35:b5:d1:
         d9:7e:1e:59:58:44:0c:dd:39:3a:dc:a9:b8:ae:0f:4e:7f:b9:
         f2:e3:ac:93:19:58:79:03:e9:ca:9a:fe:16:b2:a0:25:17:9d:
         52:c7:ac:3a:7a:7c:c1:7b:70:67:5f:4e:38:c0:72:bd:0f:01:
         24:cd:37:fb:07:a0:97:e8:81:d0:4b:23:19:e2:6b:e7:d0:3f:
         0d:05:59:e2:cc:d8:8e:e4:11:5f:95:72:c2:03:87:2b:bb:f9:
         43:2d:99:3c:46:9a:6f:2f:1d:0e:04:e5:7b:e5:35:31:88:22:
         3f:c8:7c:39:42:48:a2:0c:8d:ed:75:41:5d:b4:fb:9a:b8:99:
         ad:0e:34:88:3e:81:28:93:19:6b:36:d5:32:75:bc:2c:7c:76:
         ac:8f:88:00:2d:42:05:25:65:77:ce:fd:27:76:e9:30:74:bf:
         15:6f:73:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:45:43 2025 by rpki-client