Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/f3c15ef5-39c9-3101-9296-aaa5c219fa00.roa
File:                     f3c15ef5-39c9-3101-9296-aaa5c219fa00.roa (raw, json)
Hash identifier:          AyCLlGatBseM5eQ8lBrV3IaKN8/zn5rSfXLzwpbsQrg=
Subject key identifier:   5A:1C:F5:D3:BB:96:55:7D:CC:08:E6:B6:1F:9F:6E:33:D8:6E:5B:62
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328584B21CC16A230336BF1A8FC3C40
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/f3c15ef5-39c9-3101-9296-aaa5c219fa00.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        69.7.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:16:a2:30:33:6b:f1:a8:fc:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=cf8ac18e-581d-4c51-8df3-d5a497601298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e2:a5:85:2f:35:a7:f8:cc:b8:00:10:d4:47:
                    dd:e7:6b:c0:46:1d:6d:12:df:a3:56:a4:f4:71:19:
                    69:a5:28:34:f8:ac:e6:08:b8:1d:6b:27:c9:0b:bc:
                    5f:5e:c3:a1:0e:1d:54:c9:16:b0:ac:a5:9b:a2:ed:
                    aa:97:cf:ec:2d:8c:4e:d0:1b:51:59:7b:01:ad:55:
                    30:d9:ea:6d:c4:6f:d9:6f:9e:f7:b1:7e:9a:55:9e:
                    b3:de:38:39:42:58:26:d4:f6:a5:ce:e1:26:bb:95:
                    93:08:c1:50:5e:cd:59:5e:37:94:28:6d:5d:3f:f6:
                    e7:9e:d5:a3:6f:e2:cb:f3:10:1b:3c:ab:82:5b:86:
                    8f:2d:8f:2b:59:e8:5e:d7:0d:41:d6:05:ac:53:4a:
                    f1:11:cf:56:ac:5c:e4:56:4b:cf:72:28:68:84:1b:
                    0d:90:ad:77:b8:35:ea:bb:c9:4a:bd:72:6e:1e:ca:
                    c7:0e:c1:f9:7a:62:9a:66:9e:7e:a4:f9:a2:a0:e7:
                    42:d9:a9:21:08:ff:e7:3c:3f:e8:c6:d6:ff:1e:3b:
                    aa:cc:6a:c4:62:9b:87:60:3e:df:b6:25:4e:2e:e8:
                    cb:13:e5:e3:b2:4f:42:09:c9:48:82:af:55:70:15:
                    03:03:86:58:5b:e3:70:7d:b5:d8:7b:73:53:22:13:
                    b1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1C:F5:D3:BB:96:55:7D:CC:08:E6:B6:1F:9F:6E:33:D8:6E:5B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/f3c15ef5-39c9-3101-9296-aaa5c219fa00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.7.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:77:69:11:c6:76:16:62:cb:12:11:52:ef:d1:48:e1:72:73:
         0f:52:c6:6f:79:72:a2:1c:94:df:b1:89:1d:36:40:9b:ca:62:
         73:31:04:81:08:54:7f:8d:31:52:ad:a9:0b:93:e0:d1:06:0b:
         59:ff:61:22:14:a4:ac:ab:94:5d:8d:ec:60:c0:ac:55:be:82:
         f9:e9:4e:95:3f:83:cb:3f:73:fe:dc:73:9d:5b:b3:3e:44:73:
         1c:e2:35:31:c1:92:ae:32:6f:f2:da:77:b0:4f:1d:3a:20:45:
         53:f4:5f:15:76:e6:a9:19:fb:4a:51:62:1c:da:5e:22:d6:79:
         2f:b4:f3:23:b5:60:16:12:27:84:0c:05:1b:f5:8b:cc:6d:e4:
         e4:a7:c9:b1:3c:ab:94:69:9e:c4:28:29:92:04:8f:d2:c7:cb:
         94:77:3f:8f:e5:01:a0:54:b5:1b:86:e2:c5:68:c6:e0:0f:72:
         ba:4e:f4:fa:78:7c:ca:9c:ff:68:eb:4d:40:a1:95:a0:4b:7c:
         15:e3:8d:0a:c2:18:61:2e:b5:c0:d8:eb:d5:d7:4e:d1:b3:5a:
         6c:4b:be:57:73:cb:f0:58:cb:32:4b:1f:d0:8d:b6:95:5c:78:
         db:6d:30:a3:0f:51:9c:f1:f0:8e:f9:c7:11:ab:7e:ca:c9:5f:
         72:43:70:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:15:23 2025 by rpki-client