Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/43ad427e-7249-3591-940e-94008c9d2700.roa
File:                     43ad427e-7249-3591-940e-94008c9d2700.roa (raw, json)
Hash identifier:          2tur2qb59dK0C45zqKXZnjnLKIxMAyY0+LSp45A/MdM=
Subject key identifier:   EC:32:F6:C5:0B:50:45:B7:33:9F:2A:58:91:87:B8:67:92:09:A1:86
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B5DCD87962230F30B56412840
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/43ad427e-7249-3591-940e-94008c9d2700.roa
Signing time:             Tue 30 Sep 2025 12:52:00 +0000
ROA not before:           Tue 30 Sep 2025 12:52:00 +0000
ROA not after:            Mon 29 Dec 2025 13:52:00 +0000
asID:                     401476
IP address blocks:        69.17.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:cd:87:96:22:30:f3:0b:56:41:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 30 12:52:00 2025 GMT
            Not After : Dec 29 13:52:00 2025 GMT
        Subject: CN=dc82176f-a2ca-41d6-b655-b87fb2b9305e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:61:2e:5f:9b:dc:a8:1e:46:c5:a1:e1:fa:64:
                    86:78:46:b1:3a:69:52:8b:00:21:3a:d2:55:e9:fe:
                    3d:78:39:a3:93:1d:14:39:21:a4:49:d8:38:53:34:
                    00:ed:7a:a2:2b:cc:45:84:39:b6:9f:54:93:fe:66:
                    db:d4:9b:4a:e9:8a:ff:04:ea:1c:c1:b7:dd:7f:73:
                    3c:31:39:48:44:ca:15:95:ab:fe:4e:ff:a0:a0:65:
                    6f:31:6d:4e:48:a0:98:a4:8c:be:ea:3e:f8:9f:ae:
                    e2:5e:3c:6d:db:ca:bc:9c:73:8e:64:be:1b:cb:92:
                    9d:df:a3:3e:a9:2a:c8:c9:48:68:5c:00:33:04:15:
                    3d:f0:35:ec:22:5b:3f:97:47:01:8a:30:9c:8e:ee:
                    2d:39:e7:16:09:0a:2c:17:ff:cb:78:d6:2d:ed:c1:
                    42:65:59:3a:8d:38:11:09:8d:b5:a9:40:80:ed:09:
                    a7:c3:a3:9c:5d:36:a0:0f:a2:4b:1f:ad:1e:a8:6f:
                    c9:25:0d:aa:94:12:9b:5a:46:81:4d:db:3c:1e:ad:
                    74:51:1d:87:49:1e:4a:92:71:e6:31:cd:47:51:81:
                    27:0f:46:e5:8d:b6:25:67:c4:74:30:23:d7:cb:f2:
                    19:06:ba:bf:cf:6a:a1:3e:31:05:2e:a3:30:5c:6e:
                    f6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:32:F6:C5:0B:50:45:B7:33:9F:2A:58:91:87:B8:67:92:09:A1:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/43ad427e-7249-3591-940e-94008c9d2700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:3f:c0:a0:89:a8:cd:f6:1b:33:9b:bc:8f:ae:81:25:6e:f6:
         6d:5e:0d:31:33:e5:f6:cd:5b:db:84:45:a3:d6:15:55:c0:a6:
         de:04:7f:1f:1c:0b:ae:4d:6c:db:cb:3d:b4:94:e6:9b:d4:ef:
         ba:ba:a2:c5:12:39:d2:2a:3d:8f:98:91:c6:b1:f9:e2:81:30:
         14:f0:9a:97:aa:03:1b:1b:6e:6d:ea:5c:de:a9:8c:39:37:8d:
         e9:7b:de:d4:37:b0:cb:2d:ef:eb:42:53:62:4c:aa:27:86:87:
         27:37:53:83:96:1b:1e:63:4a:0b:57:68:89:64:a3:7e:c9:de:
         68:01:28:3c:31:a4:b9:1b:68:94:4c:32:7b:0d:14:df:1e:7a:
         69:fa:44:03:d9:f4:da:6f:9e:74:e5:56:8e:a2:62:f1:a8:b2:
         58:17:22:81:35:91:97:1e:05:0a:eb:18:60:fb:49:e3:71:61:
         49:a6:6c:18:36:58:a2:9b:c0:94:11:bd:64:7a:d0:38:d3:6a:
         c7:16:76:0d:75:79:51:90:a9:70:80:4f:df:80:27:74:ce:c3:
         ec:06:69:48:b5:f9:8f:1b:74:8d:18:0c:69:b9:d9:4e:2a:c3:
         1d:2b:05:06:b9:5e:3a:85:d5:8b:46:e3:86:6d:25:98:06:09:
         bc:d8:df:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:57:31 2025 by rpki-client