Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/9d4580cb-9482-3bf4-93da-cb0364b1e03e.roa
File:                     9d4580cb-9482-3bf4-93da-cb0364b1e03e.roa (raw, json)
Hash identifier:          TPJNfp0o2bLONg9y3/G0MKdpkEhY/kEKG8ehkTX9D3s=
Subject key identifier:   FE:C1:AA:CE:F2:64:97:2A:8B:3F:50:A6:4A:83:E6:62:AE:32:08:BC
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A8410D35980B24CB4BB78E600
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/9d4580cb-9482-3bf4-93da-cb0364b1e03e.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        69.73.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:d3:59:80:b2:4c:b4:bb:78:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=73b6a1ef-5fd5-4312-a69d-87aafa82d020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:46:47:b6:9a:de:9a:3f:50:0a:90:5e:6d:e4:
                    4f:34:eb:f7:47:fe:04:d3:1f:b0:84:24:5d:ae:53:
                    21:c7:b1:43:7f:82:d0:c7:75:91:81:dc:bb:9a:d7:
                    d1:3d:59:29:a0:7e:8b:e9:98:90:3b:12:12:4b:35:
                    ab:14:d0:07:19:af:23:a0:03:a3:a7:1f:ea:2d:e8:
                    39:23:2f:37:2f:95:1b:92:29:81:ed:83:c0:b1:e0:
                    b7:81:e2:28:16:67:c1:9e:eb:26:f0:7b:b7:f0:a5:
                    48:a1:07:e1:27:34:ad:07:b5:fb:a0:29:d0:f5:12:
                    c6:b3:40:b8:2b:aa:44:9d:8f:8e:c9:9b:b2:4d:cd:
                    d5:cd:d4:95:b0:ea:cc:ee:0f:b3:d3:20:ef:a6:a9:
                    4e:73:57:44:e7:30:d5:4d:86:7c:00:1f:7f:36:76:
                    65:f1:36:cf:9a:50:db:9e:67:35:9f:2b:9e:f7:ed:
                    e5:48:60:6c:37:95:29:38:75:eb:a1:d9:71:76:ee:
                    e9:89:d0:73:82:cd:25:cd:42:47:86:c4:ce:ae:b7:
                    40:03:de:6f:e5:11:ee:a8:34:e2:3d:17:2a:23:21:
                    ba:25:ae:e9:70:9f:36:81:6c:6e:4b:3e:7f:e5:be:
                    1d:ae:d3:50:d1:fd:63:cd:75:23:aa:0a:6f:da:c5:
                    87:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C1:AA:CE:F2:64:97:2A:8B:3F:50:A6:4A:83:E6:62:AE:32:08:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/9d4580cb-9482-3bf4-93da-cb0364b1e03e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:fc:ab:00:1e:dc:31:a5:89:0d:71:2c:a1:d2:3a:67:af:e4:
         ef:5e:17:dc:34:9f:12:c0:53:6b:16:4d:09:57:2f:e4:98:bf:
         69:75:51:3b:8f:53:be:66:1e:63:7c:a8:8c:a2:f5:6f:c9:07:
         77:e8:57:4a:b3:7f:7b:c6:35:f0:a4:05:98:b4:17:45:0b:73:
         d9:ad:eb:7e:8b:85:d9:cd:51:ae:cd:46:92:ea:76:2c:46:75:
         e6:04:16:f4:04:15:f7:60:cd:3c:c1:df:02:2f:12:af:6e:aa:
         08:cf:43:6d:b2:3f:00:7e:b8:01:29:3a:bc:f6:49:01:71:f2:
         c5:c0:9f:e4:aa:64:e9:42:88:65:2a:a5:cf:4a:d6:6f:91:50:
         73:5c:67:16:08:ed:8e:e8:6a:5e:c8:11:74:cf:f4:ba:63:48:
         00:af:a6:b2:e7:18:d5:9f:86:78:fb:cb:20:a9:39:fb:6c:98:
         0b:cc:e9:3c:58:45:a5:53:b6:99:1b:2f:fd:3f:62:b6:82:93:
         10:34:4a:14:a4:f3:d5:39:67:b9:b0:f5:34:aa:50:50:b8:84:
         c0:6f:31:a7:1a:a9:62:ea:9f:44:23:b9:58:ce:9a:23:57:c5:
         b3:ae:94:04:dc:65:18:d4:6f:43:90:79:9f:83:d8:fc:35:3c:
         7f:74:d4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:52:16 2025 by rpki-client