Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0158997d-71e4-3d97-acda-5a5cc55cfb1c.roa
File:                     0158997d-71e4-3d97-acda-5a5cc55cfb1c.roa (raw, json)
Hash identifier:          UhSD8tdjCRWmYZmpDj7F5FK+SQBt+wXQryvQfm2pcq4=
Subject key identifier:   FF:F3:76:D8:5F:68:69:CD:60:A3:B1:D0:BE:E3:4F:27:A9:9A:6F:9B
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A8410F03F8EEE09216FC0A400
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0158997d-71e4-3d97-acda-5a5cc55cfb1c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        69.73.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f0:3f:8e:ee:09:21:6f:c0:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3d37952f-6019-4602-819d-61c2d2aa57b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:47:ec:7c:b5:97:1e:12:f0:cc:e9:da:28:a3:
                    1a:19:45:0e:1a:7a:34:65:cb:41:d8:c9:81:fc:64:
                    dd:c1:10:d5:ff:67:cf:75:8d:2e:52:ae:66:0c:fa:
                    dd:f5:a2:1f:cf:36:95:f9:d2:56:e3:e9:55:fb:5d:
                    ca:86:ae:8d:1a:d6:3d:53:5c:5c:09:ad:1f:0a:2c:
                    4b:4b:6d:8c:89:64:fb:27:52:e0:6e:a4:77:e0:72:
                    c8:e2:bc:03:f9:8a:3f:9a:ec:09:01:5c:49:75:2a:
                    7d:25:a3:03:f4:96:6b:35:6e:81:1b:8e:b0:cd:7d:
                    47:6d:51:06:fc:90:f2:31:d4:2e:9b:f6:fc:f5:09:
                    45:db:fc:53:84:29:52:a5:88:da:c9:79:29:58:ea:
                    07:9d:81:56:f3:b1:dc:3c:13:a3:f9:d3:c8:52:cc:
                    57:46:d7:4c:35:74:ee:0a:91:38:14:11:03:56:59:
                    ab:c2:c5:94:7d:63:3d:c8:f3:a6:31:21:72:e1:99:
                    8b:4e:4b:bd:db:31:1f:ed:40:cd:01:da:b6:59:a5:
                    c0:f7:f8:f3:69:50:07:c0:1d:c0:e2:b3:b6:16:c3:
                    6e:2c:73:2d:3d:5d:87:ee:cc:85:ad:80:b2:59:df:
                    fa:74:b7:eb:2b:6c:bd:4c:74:4c:79:d1:2a:83:9c:
                    bc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F3:76:D8:5F:68:69:CD:60:A3:B1:D0:BE:E3:4F:27:A9:9A:6F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0158997d-71e4-3d97-acda-5a5cc55cfb1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d4:7e:f2:c9:f5:b0:9e:e9:25:77:72:7b:c2:6d:ef:6f:4f:
         7a:3e:01:08:93:e4:e2:84:54:36:66:7a:a5:75:0f:3f:f4:cb:
         8f:b3:8e:47:36:6c:87:a8:64:c0:a9:46:0a:75:df:03:36:7f:
         26:84:8e:f7:d3:51:c9:ed:c6:6e:12:99:80:a8:9f:07:08:b1:
         1e:c9:02:e4:97:05:bf:33:d4:fa:f7:fa:51:e7:10:bc:6e:86:
         7d:c4:95:95:bb:fc:5a:ab:75:ed:a4:5a:8c:60:16:56:57:f1:
         01:97:a1:0c:65:1b:46:0f:e7:c6:7e:d2:3b:12:71:0e:ed:ff:
         11:1a:eb:a8:2f:ab:a6:91:d4:86:a7:82:7f:4e:e2:57:6f:da:
         90:77:ee:72:45:59:35:53:23:f9:28:fa:99:61:d9:b2:d6:dc:
         c6:11:11:35:d7:a1:52:db:42:b9:bd:fa:37:b4:5b:61:d7:c2:
         af:e7:6c:20:b9:40:2e:0b:fb:69:2f:01:d7:87:ea:48:54:7d:
         91:93:bf:34:7d:13:3f:6d:ae:6f:e4:f4:99:cd:9a:da:68:ac:
         41:e8:cf:58:a2:d6:e9:ea:87:34:47:6e:87:49:f3:68:17:bd:
         d0:f1:55:1b:1f:07:d9:35:59:15:16:63:33:de:37:02:14:c8:
         e8:ad:8d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:45:29 2025 by rpki-client