Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4b566042-c799-37d8-9213-53d93b852e3b.roa
File:                     4b566042-c799-37d8-9213-53d93b852e3b.roa (raw, json)
Hash identifier:          f2oij7RtxjtczjgdubIxL2KNaXsQPWT3wQiuKR6w5Hs=
Subject key identifier:   19:48:C5:26:6D:42:A6:01:6F:9A:CD:3F:05:13:49:7A:2E:1C:C5:06
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A8410E78951EB8863D4A73160
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4b566042-c799-37d8-9213-53d93b852e3b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        69.73.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:e7:89:51:eb:88:63:d4:a7:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ce750c99-6c49-4dc9-80e8-a3d5cabf4d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:51:d3:d2:e6:bc:33:de:c9:d8:0a:53:0d:
                    6c:12:e9:d1:88:3e:89:68:79:76:94:83:39:86:6d:
                    e9:33:c7:45:fe:39:64:86:c4:8d:2c:58:93:31:9a:
                    5c:01:38:ee:97:b9:6b:3b:ad:00:eb:47:f2:d0:e7:
                    bd:36:b1:ea:d5:ba:67:f4:a4:74:ed:d7:bc:48:18:
                    ce:e1:c4:ac:79:0e:6d:c5:d2:ba:1f:c1:58:0b:21:
                    e2:1b:2e:6d:d0:82:ed:28:a1:e1:b1:6f:40:f7:0a:
                    f8:ea:41:13:72:0a:b6:c8:44:71:d3:28:2c:23:0a:
                    ea:41:80:1c:b5:36:3f:8d:64:ef:46:30:fc:92:6e:
                    42:7d:02:f3:c5:55:04:65:35:f7:f8:6c:1e:c0:ca:
                    01:0f:4e:c6:c2:4b:c0:f8:83:8e:54:74:3d:d3:98:
                    77:56:9a:c8:e8:b6:14:8d:af:da:f3:4d:20:28:26:
                    8d:eb:1b:b9:12:e9:a6:ba:e7:8b:17:dc:b3:91:63:
                    b8:58:8a:30:77:91:93:07:44:f6:e8:20:33:68:6c:
                    b8:ab:1f:a2:97:15:36:c5:37:ad:af:d5:c5:12:b4:
                    d3:69:09:28:86:76:c5:95:63:d0:11:d8:d5:fb:2b:
                    0d:9a:82:ec:3a:ce:9e:49:31:d9:f8:cf:43:c3:ac:
                    f9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:48:C5:26:6D:42:A6:01:6F:9A:CD:3F:05:13:49:7A:2E:1C:C5:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4b566042-c799-37d8-9213-53d93b852e3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:94:9f:e5:b8:83:4f:02:59:23:ca:30:0a:4b:c8:5f:30:e2:
         32:f3:77:15:3d:d7:23:d4:6c:86:fb:e5:bc:e5:f9:1b:bd:4b:
         1c:6e:2a:f7:8e:fb:ac:26:6a:d6:6a:ca:b3:8a:41:c6:c8:89:
         d9:a9:11:3b:95:c3:4f:62:c6:69:60:5a:56:6a:c1:9d:54:82:
         98:da:ef:73:07:49:aa:94:d8:12:18:5d:d1:3a:5a:7f:f2:c4:
         7f:3b:ca:43:a5:66:a9:f6:d9:9c:41:8f:ea:53:2a:1a:fc:13:
         a9:34:6d:93:ea:73:f5:a3:1b:2d:6b:ba:5e:38:c0:92:78:9f:
         69:9d:d0:d5:79:5f:cf:01:33:7c:b6:24:2a:fb:0b:8d:82:f9:
         f8:72:25:26:2f:5a:dc:cc:7b:2a:e7:3c:a6:c1:84:f8:7e:4a:
         38:63:d6:be:7c:28:0a:46:c8:8e:5d:d0:45:b8:3a:00:22:a9:
         12:c3:b6:22:8e:a2:a3:2e:5f:ae:5b:d1:c7:41:1a:ca:5a:5e:
         99:59:09:9b:0c:67:96:17:c6:49:33:49:8a:e0:15:b6:cb:6a:
         42:18:f5:6f:af:e3:0b:74:5c:f0:c0:ad:73:ff:e2:de:76:9c:
         4b:38:69:d5:a1:8a:67:94:46:9b:6f:84:bb:fb:ae:e3:dd:18:
         64:22:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:50:53 2025 by rpki-client