Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b4f90c05-80a4-3842-bfaf-a796bcbf6275.roa
File:                     b4f90c05-80a4-3842-bfaf-a796bcbf6275.roa (raw, json)
Hash identifier:          RG2O2OEokYNKXJT84LYwE3GUcFZ6HR5B/L8gw4QOAuE=
Subject key identifier:   63:1C:26:5B:00:60:B4:7B:16:27:53:1A:43:02:6A:A1:24:80:31:F4
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584A89A619CA2086B447CB92C1A0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b4f90c05-80a4-3842-bfaf-a796bcbf6275.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     55293
IP address blocks:        69.48.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:19:ca:20:86:b4:47:cb:92:c1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=0065a235-9ecc-4370-97a9-efa50dadc7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3d:1a:2b:28:17:27:83:47:04:93:28:40:6c:
                    fe:bb:a2:72:fb:38:3a:1e:29:89:81:72:18:32:46:
                    15:55:4b:03:27:1c:e6:e4:04:04:8d:e7:cc:2f:db:
                    1d:26:95:3c:64:98:6a:fa:8a:b5:c2:8a:48:03:7b:
                    e9:ed:b5:5d:46:0c:17:b5:f1:27:71:88:d9:45:e2:
                    5e:49:28:a4:b3:be:b5:75:a4:5d:4b:f4:7d:ce:76:
                    52:ef:d7:4b:19:0b:d6:97:b0:b2:4c:65:97:97:ed:
                    60:1f:81:09:e7:ef:90:93:e8:d2:a5:ac:2d:f5:90:
                    d7:f6:7f:3d:9c:13:37:d6:d9:87:ba:93:51:dd:40:
                    25:91:f3:9f:21:db:78:25:46:8f:86:33:49:81:e7:
                    70:0b:7c:a7:fc:f3:c6:78:4c:7d:a2:9e:dd:9f:8c:
                    84:24:55:29:24:58:b1:a7:d3:ae:9a:4c:4e:6e:79:
                    70:48:2f:17:69:08:4f:47:96:de:08:31:4c:b8:f9:
                    3e:aa:7d:5b:5f:68:6e:43:64:b3:31:9a:c4:04:ba:
                    c2:b0:c6:79:d6:4f:71:be:32:c5:e6:9f:71:3d:51:
                    59:58:d6:0e:c6:67:fa:b3:51:7b:49:69:75:0d:df:
                    25:f7:e1:8b:45:ac:b4:1f:29:06:5c:3d:3b:a6:74:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1C:26:5B:00:60:B4:7B:16:27:53:1A:43:02:6A:A1:24:80:31:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b4f90c05-80a4-3842-bfaf-a796bcbf6275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e4:24:85:55:6c:fa:d6:00:aa:de:6d:ff:59:99:1e:b5:0f:
         b9:4c:ad:9f:b9:12:24:36:f3:16:ec:8b:e0:79:4a:21:e0:ce:
         87:8c:a6:d9:9c:d7:a2:f6:31:42:37:6e:77:3e:8a:6c:06:6a:
         c2:7f:0b:7a:6c:51:82:8b:4b:8c:b6:9e:dd:04:52:02:b1:90:
         5f:52:2e:a3:0c:3a:25:43:e8:34:7a:f7:62:ac:e2:3a:5c:ad:
         90:d3:bb:6e:03:91:60:b5:35:7f:b8:4e:32:b4:2b:5c:14:74:
         be:06:b3:22:92:36:20:7c:fb:87:38:b7:69:ff:bb:b8:0b:dc:
         66:41:02:34:26:31:d2:39:af:94:d7:c2:7b:63:a7:6f:ce:3c:
         c7:34:39:9f:e7:e0:8b:b7:20:ca:c5:65:99:63:aa:73:c4:e4:
         05:b6:01:47:81:fe:5a:9c:bb:c4:a4:a0:af:12:6c:f7:72:03:
         18:3d:3d:c1:6b:57:df:cc:58:77:b0:1d:26:77:89:7c:31:49:
         ca:8f:29:e2:66:29:75:6e:33:64:c6:1d:78:a4:53:47:5e:e5:
         10:83:f3:bd:30:1c:71:55:e1:54:fb:db:de:47:48:3e:01:24:
         c6:d8:59:e0:e2:3f:29:fd:b7:96:be:38:58:ee:35:10:71:74:
         fa:ae:1e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:58:30 2025 by rpki-client