Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/c2695bc1-2ea5-3610-9082-0f23909f3562.roa
File:                     c2695bc1-2ea5-3610-9082-0f23909f3562.roa (raw, json)
Hash identifier:          MLlOsJaOcALS0J2gGiFhj0ZkruyRS2dHC57l1mRvb/A=
Subject key identifier:   F5:D2:70:78:C7:4E:14:53:D9:F5:C3:6F:BD:06:CA:50:C6:9C:7C:5F
Certificate issuer:       /CN=360964b0-1eb6-4597-8231-2e448a53e152
Certificate serial:       010D0C9F4328584B13D6B5AC232DEF8B70F62300
Authority key identifier: BD:07:97:1A:0E:2D:23:05:3E:86:63:A6:F6:16:95:1A:F2:64:A9:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/c2695bc1-2ea5-3610-9082-0f23909f3562.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     401493
IP address blocks:        69.67.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/360964b0-1eb6-4597-8231-2e448a53e152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/360964b0-1eb6-4597-8231-2e448a53e152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b5:ac:23:2d:ef:8b:70:f6:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360964b0-1eb6-4597-8231-2e448a53e152
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=9187a506-890b-410c-a088-62f40135b457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:70:16:6a:bc:ec:c2:40:a3:ff:35:35:09:
                    e4:8a:c5:cc:57:10:b7:28:a5:06:73:57:6f:21:23:
                    d3:f1:8b:6b:d4:95:f9:93:33:45:89:1b:78:bc:3c:
                    ab:2f:ff:e5:9c:51:15:7a:fd:1b:b2:f3:1f:c5:3b:
                    9d:f7:51:3b:ad:8a:3e:1f:57:d2:3f:49:78:8d:d4:
                    c4:ec:f1:a7:f9:32:dc:16:fd:68:0a:a6:f9:a1:7e:
                    af:e6:e4:ea:15:51:47:56:54:45:1e:e4:9a:f7:c6:
                    8a:b6:93:ac:a8:47:94:1f:46:d4:92:19:a6:0a:2e:
                    b1:67:a3:0d:f9:f3:ae:67:0e:aa:f3:be:fa:5e:04:
                    1d:ab:f3:f4:6f:3b:da:0b:c7:b0:bd:5d:a8:30:83:
                    d3:eb:b2:d4:72:d2:a7:71:de:8e:8d:64:f4:99:03:
                    cd:f1:38:1a:00:cd:bc:78:09:0f:7a:6a:f1:a8:d0:
                    2b:08:db:5a:b1:af:e5:ef:4c:f9:f5:e0:94:a0:ca:
                    df:7e:f2:00:2d:68:ec:85:74:57:a9:06:b4:7a:69:
                    71:c3:b5:5c:c0:eb:98:31:15:6e:40:00:32:3f:4a:
                    6c:8b:bb:c5:c1:f0:a6:c9:b9:82:44:72:a2:72:ae:
                    e6:f1:24:d0:2d:51:42:c6:f7:e1:83:da:21:3d:c4:
                    65:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D2:70:78:C7:4E:14:53:D9:F5:C3:6F:BD:06:CA:50:C6:9C:7C:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/c2695bc1-2ea5-3610-9082-0f23909f3562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/360964b0-1eb6-4597-8231-2e448a53e152.crl

            X509v3 Authority Key Identifier:
                keyid:BD:07:97:1A:0E:2D:23:05:3E:86:63:A6:F6:16:95:1A:F2:64:A9:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:e7:89:ce:01:ec:e9:21:36:06:f9:ed:15:53:83:56:14:f9:
         96:99:6c:8a:fb:ab:b1:54:35:9b:22:fe:cb:87:83:c9:0e:f7:
         9c:df:02:c1:bc:d9:8a:bf:2b:a8:d6:d0:22:87:75:14:ba:1a:
         0a:96:bb:5d:be:75:05:c1:6b:11:91:9c:b8:db:3c:11:cb:88:
         5a:e2:17:d8:8d:0e:33:e2:30:84:c7:e3:a7:a8:89:18:a1:6b:
         81:32:aa:c6:90:c5:ef:e9:aa:59:f2:5f:10:ee:d2:0a:69:d6:
         5c:28:48:0e:6b:93:d6:c0:74:35:59:79:e0:f5:df:19:56:43:
         0f:15:65:05:85:78:8c:0c:cc:ba:46:96:4e:c6:29:5e:95:f0:
         39:10:bd:d0:19:e2:93:e6:68:98:7c:39:11:2d:fa:08:2d:61:
         c2:54:d2:28:b7:8c:2b:f3:c8:ea:a3:44:cc:de:93:00:ec:28:
         9d:b7:b8:dc:30:f0:bb:de:34:76:ef:89:5e:34:ef:0c:bd:18:
         b0:36:28:c6:4f:51:bc:ad:5e:ec:5a:e9:db:58:f3:a1:7a:47:
         25:82:f4:c2:37:44:21:68:ea:0b:e2:04:22:7e:6a:6e:c1:40:
         6d:39:44:93:3c:b2:da:e7:cd:a9:d5:ae:0a:df:50:67:5b:29:
         e5:3b:5f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:24:18 2025 by rpki-client