Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8b239c89-4c84-3291-ae22-3e63274d32c7.roa
File:                     8b239c89-4c84-3291-ae22-3e63274d32c7.roa (raw, json)
Hash identifier:          /mIP2YALXQtwFG4vHSTTi3djfe98r1/2RF2YYee+l8o=
Subject key identifier:   CC:16:6B:AA:CF:BE:63:EB:7C:93:7A:0C:D1:13:89:FD:54:ED:BF:83
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584A89A619973228549D71317400
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8b239c89-4c84-3291-ae22-3e63274d32c7.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     55293
IP address blocks:        69.48.162.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:19:97:32:28:54:9d:71:31:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=983b3036-02e0-42cb-a108-6c7af46b2ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:6d:cc:99:f5:e4:2e:f8:a9:92:0d:94:86:
                    79:7b:2f:21:6e:e9:41:c9:f7:0e:95:8b:50:db:a5:
                    75:ff:47:9e:7e:5e:aa:9a:f4:5b:88:1e:e3:26:a5:
                    26:24:0e:d1:8a:01:57:55:78:6a:f5:cd:d9:98:2d:
                    9d:dd:2d:2c:c3:80:0b:8d:dc:eb:79:85:cb:e0:9e:
                    fa:6c:50:c2:aa:84:c5:59:b9:f1:27:dc:61:31:ea:
                    fa:a0:60:d1:41:b7:00:2f:f2:82:2a:34:d9:dc:fa:
                    17:30:88:85:06:b3:d2:5f:7c:6c:45:c6:91:24:34:
                    ba:ed:28:f7:30:47:50:b6:68:ad:3e:b6:48:6d:80:
                    7c:6d:ef:27:7e:31:d6:b0:ed:7e:5e:c1:f0:1b:37:
                    a7:5e:cf:69:52:27:c6:9c:90:7f:df:95:76:b4:e3:
                    61:2f:51:94:56:b5:ea:90:7e:55:49:74:ed:aa:25:
                    d5:d1:c4:38:b6:43:54:88:51:1d:97:88:3f:dd:14:
                    60:8d:7e:ad:8b:85:80:1c:28:c2:25:2b:b5:77:42:
                    6f:f5:c5:e1:73:72:22:05:f8:87:39:98:f8:d3:90:
                    22:f1:4f:0d:4d:ef:c8:e6:8f:9d:a9:f8:f6:77:ec:
                    d6:f4:1e:ef:47:52:4a:29:ab:fa:79:2c:bc:d4:94:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:16:6B:AA:CF:BE:63:EB:7C:93:7A:0C:D1:13:89:FD:54:ED:BF:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8b239c89-4c84-3291-ae22-3e63274d32c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3e:1d:8e:72:af:56:1f:67:89:dc:1a:a6:5f:a1:12:33:e4:
         59:ca:7a:49:01:5b:71:91:39:8c:05:21:40:e4:4c:fc:d7:18:
         76:47:01:a8:11:a6:8f:8f:e1:dc:57:0a:0e:ec:7d:a4:96:43:
         ff:fd:14:53:a1:cd:0d:fe:80:5e:24:37:47:30:2b:72:fa:1d:
         f8:5b:f8:e6:22:62:b0:ee:f7:b4:6c:cc:96:da:cf:d7:32:a6:
         01:e1:dc:e3:9f:d8:d4:cf:1d:88:ba:b3:dd:bd:8f:7a:70:0a:
         b8:72:aa:05:40:1f:b1:4a:69:36:31:40:4a:a8:61:83:0f:b9:
         78:af:35:3d:24:cf:2d:86:d8:55:18:5a:99:d9:8c:48:f3:8c:
         5b:4c:2e:c9:82:5e:83:ac:1a:97:be:67:33:a9:ea:f5:d1:a2:
         9b:ea:db:da:5a:4e:ce:25:cc:5f:78:9e:5f:65:4a:77:ec:6a:
         30:a1:2a:86:20:73:d9:41:00:5d:25:b3:d6:92:3f:cd:d0:8e:
         13:df:af:62:22:8a:87:1b:2a:69:35:38:17:d7:81:0e:b7:64:
         f6:e5:75:a4:fa:4f:13:dd:6c:9b:4f:ad:37:1e:f6:dd:4f:62:
         7d:63:1f:d0:ef:4f:a8:0a:7f:b5:0b:e6:21:30:cc:2a:98:4a:
         0d:3d:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:01:34 2025 by rpki-client