Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6b861018-57de-3bb2-be0f-3bc492801069.roa
File:                     6b861018-57de-3bb2-be0f-3bc492801069.roa (raw, json)
Hash identifier:          4S4ORVV0tuekYqglPn74ApP1Di1G/pfmWpXLey/Oxzg=
Subject key identifier:   D1:AA:50:04:C4:4A:CF:1B:EA:47:39:87:30:6A:9E:C2:84:F3:F2:06
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411FBA32AE995A6D1DBB700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6b861018-57de-3bb2-be0f-3bc492801069.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.242.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:fb:a3:2a:e9:95:a6:d1:db:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=132041c3-b44d-4028-b5e7-db819223b110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:d8:e5:22:84:ba:de:50:a5:86:71:69:c0:
                    c6:fa:78:c9:48:23:a8:2c:15:c4:70:50:62:b5:54:
                    8f:67:ba:a9:91:1f:6c:d4:3b:f8:04:74:95:25:ab:
                    71:5c:24:c6:f3:92:8f:50:22:21:c7:90:92:94:47:
                    77:08:8d:58:7e:87:bd:4c:6d:5d:b8:1b:93:e8:2b:
                    c6:e5:1c:05:af:35:4e:89:77:89:1e:71:f8:ff:99:
                    24:4e:b0:8f:6b:42:65:0a:00:58:0e:3b:81:bf:42:
                    e5:e1:98:3d:eb:79:31:85:b5:d0:31:69:ce:8d:6a:
                    14:7f:60:65:a4:8d:a8:d9:6a:cc:93:6c:c7:28:67:
                    77:b9:43:83:ad:81:61:dc:7d:a0:2a:06:41:7f:67:
                    01:38:92:33:02:cd:e4:94:46:4f:5d:90:2c:ab:b6:
                    f9:41:44:58:42:50:ed:75:21:d0:d8:1e:9c:9b:a5:
                    72:24:6a:07:85:8f:f6:0d:99:92:8c:fc:9f:76:4e:
                    b4:15:ec:67:e0:e8:8e:18:d0:f5:ad:74:f9:de:18:
                    74:56:f7:9b:5a:19:cb:d1:ed:b8:dc:c0:46:76:f0:
                    51:f7:52:f5:ec:43:15:d3:e6:d4:66:da:f5:c3:87:
                    e0:85:07:27:0c:45:9e:4e:4e:1b:24:e1:0e:46:71:
                    29:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AA:50:04:C4:4A:CF:1B:EA:47:39:87:30:6A:9E:C2:84:F3:F2:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6b861018-57de-3bb2-be0f-3bc492801069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:7c:c7:ed:07:40:af:e8:8e:c0:a1:4c:cd:dd:68:e1:4c:22:
         7c:08:b9:52:aa:a4:09:c0:df:74:e2:49:8a:ba:50:15:1a:28:
         cd:7d:d6:62:8d:a3:06:4a:d4:3e:be:91:dd:94:b5:93:69:d7:
         bf:a6:c5:d2:f5:42:ce:ac:ff:79:7f:85:fd:45:7f:65:85:db:
         a8:8a:49:c4:f6:cf:7c:c9:ec:17:f6:f5:94:14:81:9c:16:44:
         7e:de:fd:be:58:c4:a8:f0:db:57:eb:93:5f:2c:a2:3c:e0:f6:
         aa:9e:76:c2:5c:7d:c5:20:e8:16:64:26:15:18:21:b8:4c:9e:
         ad:ce:fb:ad:a2:28:8d:fb:d8:45:d9:df:f7:f5:7a:ee:b9:55:
         95:f6:8c:d1:02:25:98:f4:ff:d2:f6:35:7f:ae:54:c4:8c:be:
         81:ce:f6:39:26:52:ac:e8:27:87:70:03:68:bb:02:46:82:3d:
         10:50:9f:db:96:de:71:d7:66:7a:28:b0:b0:4e:59:2d:98:1b:
         5f:95:57:ac:72:18:46:f5:80:d2:ac:ed:82:9f:4b:d2:05:04:
         e1:0a:bc:46:16:69:9b:fe:5d:51:f5:c2:69:24:23:3e:7a:1a:
         e6:bb:49:cb:5f:c8:9d:cd:cd:3d:6f:31:75:d6:b3:8b:5b:92:
         fa:54:43:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:55 2025 by rpki-client