Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/62166d15-0fd5-3fe3-bee9-4030743230f3.roa
File:                     62166d15-0fd5-3fe3-bee9-4030743230f3.roa (raw, json)
Hash identifier:          5JCyPzXbJ+ScYDYb/u2yG8uAAto8x7dsYIIhq+uvhkQ=
Subject key identifier:   33:29:51:6C:71:3A:C3:36:45:43:C2:4B:0E:EC:4B:6E:87:95:6B:C3
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584A7085F6A7ACACBF76D85DABE0
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/62166d15-0fd5-3fe3-bee9-4030743230f3.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     4213
IP address blocks:        69.194.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:f6:a7:ac:ac:bf:76:d8:5d:ab:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=374ebdef-4fb8-416d-80ca-526f5f79795e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:f5:73:18:5f:57:05:69:b3:24:98:2b:97:
                    9f:fc:18:46:ba:86:c5:1f:d3:46:39:f0:9f:83:56:
                    fa:00:c8:2c:15:16:3c:08:25:33:1f:88:32:07:cb:
                    8e:65:b8:90:03:28:55:b5:f5:fc:71:e0:d4:be:3f:
                    ad:cf:6d:e5:94:31:9b:ec:a5:03:d5:b2:cb:78:2c:
                    cd:bf:8f:bc:c0:48:da:00:53:fc:d1:2a:cc:39:7a:
                    bf:56:a6:fe:a0:23:dc:6b:eb:e7:ca:84:e2:fe:a0:
                    00:ea:1d:c3:aa:b4:2b:33:3d:36:6b:ea:85:71:be:
                    96:92:68:06:29:d2:4f:b3:ce:f0:bb:32:8d:cc:23:
                    c2:ba:6e:29:72:2e:99:87:45:b1:81:fe:4e:21:b1:
                    e1:86:f7:08:90:10:6d:85:8d:08:bc:26:14:1c:96:
                    07:41:8e:c8:0b:37:f1:2f:fa:ff:2e:89:b7:9a:b1:
                    11:f8:f5:01:0f:dd:d3:48:e6:93:e7:db:30:6d:f9:
                    b6:ac:26:91:db:9b:ed:24:f0:9d:ce:e2:33:36:3b:
                    fa:f4:cf:e6:5c:af:b0:3d:60:59:9b:7f:25:55:fd:
                    af:e6:9a:d1:0b:ef:3a:18:5f:c6:3f:ae:c8:c9:02:
                    95:b4:b0:e0:95:c1:ff:92:97:34:00:9c:c4:eb:88:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:29:51:6C:71:3A:C3:36:45:43:C2:4B:0E:EC:4B:6E:87:95:6B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/62166d15-0fd5-3fe3-bee9-4030743230f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.194.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ef:cb:a7:b8:bd:bd:d7:5e:b7:4f:4f:3d:10:67:ce:f8:d1:
         55:e6:40:09:6f:ec:0b:90:6b:d9:97:8b:d5:83:13:ca:dd:54:
         d8:c0:51:63:de:ba:bd:09:e8:6d:4f:b2:ed:03:d8:63:1d:e0:
         d8:d3:59:81:dc:1f:2e:df:03:af:72:df:b2:c1:b6:d5:bd:90:
         2a:a4:f5:0b:9f:f0:ab:10:b3:33:c3:ab:bc:f8:8e:c5:f5:40:
         dd:ea:3d:0e:0e:34:51:60:c4:5d:b0:56:d4:ee:c5:36:80:e1:
         9b:80:d9:40:a9:88:9d:bd:e0:7e:8c:7b:1d:ad:12:f0:dd:7a:
         2e:a7:15:76:5d:ac:d2:78:90:72:11:0d:56:1b:00:84:8b:1f:
         00:69:9b:34:62:cc:11:bc:ba:96:61:dd:20:eb:fd:99:5f:83:
         36:d8:33:11:c5:44:eb:6f:63:b7:88:43:df:2f:17:71:69:26:
         62:e1:fb:03:13:14:c3:35:4f:0f:6f:26:1e:83:04:80:be:6e:
         1e:15:b1:ca:e3:8a:07:fa:90:bb:39:85:88:72:5b:96:bd:69:
         5d:dc:71:e1:43:af:c2:d5:59:1d:aa:1d:f5:1a:53:d8:0f:ba:
         5b:73:26:21:5c:f0:cc:d3:55:4e:33:b3:c9:a5:b8:70:3b:26:
         d2:6d:6a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:33 2025 by rpki-client