Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/1954188b-ec6e-3b13-a05c-c924c28e7b5b.roa
File:                     1954188b-ec6e-3b13-a05c-c924c28e7b5b.roa (raw, json)
Hash identifier:          bSmwqJuRdFa8uxGlnHa/rC9ltwszpAKtKhxJ69RjDB4=
Subject key identifier:   C4:5B:D9:4E:90:F3:EA:0F:05:AB:E5:60:CE:4C:3E:25:B3:4F:97:20
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A8410F231BDBF1A41F8FC2E00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/1954188b-ec6e-3b13-a05c-c924c28e7b5b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        69.73.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f2:31:bd:bf:1a:41:f8:fc:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4f0fd05e-8ebf-46e1-8db7-9698b5b89662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9e:02:7c:f9:8f:17:cd:d7:3d:1b:d1:98:a2:
                    a0:46:df:fb:e5:7b:d7:c9:1e:a2:b2:93:4c:96:cc:
                    2a:64:fe:05:b4:19:7e:73:5f:2b:50:f2:a7:80:71:
                    91:cc:f4:04:c2:25:fe:49:cd:a2:c2:46:33:1e:b8:
                    fe:1e:b9:97:56:3d:02:90:20:29:3a:6c:4f:67:9f:
                    30:60:e3:a8:dc:40:ae:33:d7:0b:af:af:be:98:c5:
                    d6:e4:6c:cc:c1:3c:d8:79:7a:c5:5c:28:61:c4:96:
                    45:07:ef:99:6b:12:32:fb:36:68:83:c0:31:12:1e:
                    24:0b:71:f9:01:be:18:8f:72:02:cd:29:a0:54:f6:
                    96:7d:0a:22:a1:ba:78:31:6d:db:b2:0a:2f:83:95:
                    22:6c:d8:2e:44:9a:02:a5:37:42:b8:a2:93:5f:03:
                    cc:80:b4:b6:1e:cc:38:53:13:58:f4:53:d1:50:c9:
                    29:b7:14:67:73:1e:99:74:97:5e:52:3b:94:28:2e:
                    6b:d6:57:4d:98:cb:e3:b9:c8:3b:0d:91:41:d0:34:
                    ce:31:88:89:f0:c0:5c:69:d7:e3:d6:a6:06:d5:e4:
                    ae:c9:0e:9a:72:c4:f5:77:ea:ee:84:e2:d3:cb:fa:
                    e1:79:51:05:65:67:17:e9:57:b9:31:7d:39:7f:6b:
                    e6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5B:D9:4E:90:F3:EA:0F:05:AB:E5:60:CE:4C:3E:25:B3:4F:97:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/1954188b-ec6e-3b13-a05c-c924c28e7b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f0:a8:95:1e:60:39:68:18:c4:d9:91:0f:e1:25:db:bd:90:
         ef:31:db:45:0b:10:40:ce:d3:bf:91:2f:64:d8:e1:c5:59:33:
         89:20:78:74:ca:76:99:8a:22:31:11:2a:05:54:c0:15:53:ba:
         5f:bc:c6:75:d2:da:c3:a3:b5:a2:db:85:4e:f7:be:af:ef:2d:
         70:5f:15:d1:ae:93:ce:a4:21:d3:0d:b7:61:db:3d:9f:43:16:
         37:ad:21:b3:df:1c:31:94:c3:a0:43:ae:4e:40:57:3b:a0:74:
         5b:2e:21:f2:7b:c1:b9:18:e4:6a:76:55:d7:7c:68:1a:7f:6d:
         41:b3:34:b2:2e:6d:e8:10:b5:d3:b0:a4:84:a3:92:09:44:2d:
         8e:e5:3f:29:88:17:87:82:39:8e:e8:cd:9b:6c:c3:8c:9f:59:
         0e:5f:a4:38:1a:18:27:b5:02:45:4e:26:68:a9:78:bf:07:f3:
         98:4f:1f:1a:e8:aa:03:15:3b:ab:1d:c0:69:7f:71:4f:a7:5b:
         ea:f7:41:b9:9a:9b:47:c9:d2:9d:9e:e0:d6:08:c6:4b:94:9d:
         a6:1f:bb:d5:fa:82:f0:c1:a1:d6:89:21:69:b6:b2:c4:9e:fa:
         7e:52:4a:4d:76:7f:96:cf:79:11:c6:1f:94:78:83:c8:b1:0c:
         ec:0f:a5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:41:23 2025 by rpki-client