Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/30a9cce7-f0cb-3222-9547-7e01552c1d32.roa
File:                     30a9cce7-f0cb-3222-9547-7e01552c1d32.roa (raw, json)
Hash identifier:          bSIBcj/YB81hQ0haCtQvRtvZVANImKOqaRPSbh709lQ=
Subject key identifier:   EA:0F:98:B5:01:17:81:F0:CE:17:5D:4C:2C:62:57:27:72:F3:64:73
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A8410F31F2E411AFB2B87C300
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/30a9cce7-f0cb-3222-9547-7e01552c1d32.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        69.73.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f3:1f:2e:41:1a:fb:2b:87:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=f43db783-bcce-438d-836e-0c6a49e686d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fe:15:7c:8c:e2:49:f6:22:a0:9e:0e:fb:82:
                    64:6d:72:01:97:0a:6c:53:c2:bf:cd:b7:43:92:7b:
                    f5:05:79:50:6f:6a:0f:69:5c:25:82:b5:68:b3:93:
                    9d:f3:9d:ed:bd:b6:8f:27:4d:41:06:56:ed:64:fb:
                    d6:70:b8:4d:d5:e1:cf:df:06:f1:21:04:b0:51:5a:
                    9b:28:46:c7:8e:e0:7d:11:cd:44:c0:d8:6c:26:66:
                    6e:23:a3:64:b9:60:fd:d9:53:a2:a9:ed:41:39:d4:
                    26:7e:d5:f0:12:ba:e6:df:58:63:30:51:3c:f1:56:
                    87:f3:d0:5b:8a:41:18:6d:46:99:bc:b9:72:93:fd:
                    f3:0a:c3:41:74:7f:09:1d:7c:84:e7:7d:04:7b:d9:
                    d7:f9:17:11:94:16:22:10:e6:89:f5:f9:de:e2:de:
                    6f:66:a0:24:68:b5:6f:36:46:13:ec:90:fb:64:4c:
                    fe:42:63:a3:1d:de:0b:55:3a:36:44:c4:a6:13:65:
                    23:c9:7e:a2:c8:76:20:ab:d4:a7:0b:ab:dc:80:b1:
                    94:c1:22:9b:ac:26:1a:36:fa:b5:f5:cb:06:0c:1c:
                    1f:fc:69:13:d3:cb:a4:aa:9f:a7:a8:2b:3c:93:67:
                    9e:8e:2c:c0:88:ae:70:4c:9e:80:d7:5a:c5:65:fd:
                    12:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0F:98:B5:01:17:81:F0:CE:17:5D:4C:2C:62:57:27:72:F3:64:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/30a9cce7-f0cb-3222-9547-7e01552c1d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:dd:1f:16:71:48:23:de:1b:32:ab:ad:62:6d:d2:ab:d9:0a:
         d2:b0:46:ce:55:7c:25:28:bc:4c:9a:fc:27:a0:b3:49:79:c9:
         d7:52:d3:1d:75:fb:6d:80:d2:89:44:ac:cd:12:f1:97:e5:21:
         c7:7a:b1:4a:87:4a:aa:0a:c5:fd:f0:e8:73:b6:25:7e:b0:e2:
         a4:d2:47:56:19:b9:3c:fe:8c:b5:dd:e6:d5:a8:c9:af:8d:26:
         86:af:83:86:a6:a3:ab:98:8f:c4:bb:df:c1:ff:db:f0:76:49:
         87:c9:e8:39:37:3b:f0:9f:9a:22:db:47:4e:21:b0:d2:86:72:
         98:25:c3:32:a6:96:02:91:ed:c3:33:dd:3a:16:75:f5:95:44:
         fc:5b:2a:d8:77:ea:fd:65:f1:5a:91:0c:66:b8:ab:e7:7f:ee:
         e6:27:7f:d1:94:07:9e:23:37:8e:83:60:09:91:22:0c:15:e0:
         4c:7d:2c:ca:62:6e:73:17:2c:2e:50:7f:30:53:b1:83:57:b3:
         d9:7d:2e:d7:bd:66:61:8c:42:85:bf:02:c6:0a:16:5d:12:de:
         98:38:6d:59:4b:15:d4:6f:3a:62:0b:18:70:68:aa:70:23:d9:
         f7:de:81:e0:dd:8e:b4:eb:61:0d:2d:39:38:14:3b:88:c0:50:
         a0:7d:26:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:51:38 2025 by rpki-client