Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa
File:                     684a9134-a16d-336c-8191-a5944e08412f.roa (raw, json)
Hash identifier:          mktjVSKnn/vbeOHYlk4pjMikocWB+dGFaXvIYAa5CYg=
Subject key identifier:   3D:5F:08:66:00:3C:C3:C8:D7:34:C8:08:ED:7B:A8:A8:BF:26:96:B3
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B1D9C34FEBD47C80EC250FEE0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     21859
IP address blocks:        69.17.5.0/24 maxlen: 24
                          69.17.11.0/24 maxlen: 24
                          69.17.12.0/24 maxlen: 24
                          69.17.13.0/24 maxlen: 24
                          69.17.14.0/24 maxlen: 24
                          69.17.15.0/24 maxlen: 24
                          69.17.69.0/24 maxlen: 24
                          69.17.70.0/24 maxlen: 24
                          69.17.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:34:fe:bd:47:c8:0e:c2:50:fe:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=b98c25a9-6e22-4eac-aefa-9e8f3bb296e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:20:32:0b:9f:c6:f6:0f:5f:4c:43:34:55:
                    6f:c6:c6:ab:df:d5:57:62:e5:42:a9:59:14:c7:7a:
                    97:ca:ce:01:f4:24:ab:63:12:4b:be:70:9f:23:cb:
                    07:d3:0d:9a:6d:47:2d:18:96:6f:6c:22:cb:fd:4f:
                    b3:e4:18:77:aa:c3:a3:34:e2:e9:ed:74:da:e7:95:
                    e2:47:50:ed:ca:99:5b:05:3a:c9:d7:5a:bf:87:ab:
                    a3:51:d6:92:31:40:3c:fe:92:70:e6:eb:78:b3:92:
                    94:0d:3a:f8:97:eb:4d:e9:b0:2e:56:a8:2e:81:f9:
                    fa:0e:c1:f7:ae:89:92:db:0e:d0:94:4d:44:c6:ec:
                    06:f8:54:2b:59:33:62:de:b8:eb:85:0e:c5:74:78:
                    e6:29:f0:14:73:99:6d:51:db:19:b6:28:14:11:5b:
                    a0:ee:2f:3b:8f:15:2e:05:38:ed:f4:45:09:d7:51:
                    a4:02:80:1c:bb:f8:08:eb:9f:33:be:61:09:87:a7:
                    1e:eb:d1:e8:70:a9:9d:e8:6a:04:b5:fa:9b:29:9e:
                    7c:5a:05:0f:46:73:55:b4:ff:13:72:96:79:ad:db:
                    cc:ce:16:5b:73:0d:e9:02:1d:c0:1c:15:c2:1b:65:
                    47:86:78:97:85:cf:cf:b3:a4:96:1a:95:3c:07:8b:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5F:08:66:00:3C:C3:C8:D7:34:C8:08:ED:7B:A8:A8:BF:26:96:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.5.0/24
                  69.17.11.0-69.17.15.255
                  69.17.69.0-69.17.71.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:6f:00:fd:3b:80:0e:53:93:94:04:3f:82:dd:35:c2:c0:44:
         02:cc:a8:85:35:d1:4c:0f:6d:ed:fe:73:a4:b9:e8:56:5b:ad:
         c0:55:8b:a0:ad:6f:15:e7:cf:95:56:00:8c:24:14:92:cc:fd:
         c5:f2:88:2f:80:d8:29:d4:bb:f4:bd:b9:7b:44:7e:da:32:62:
         91:65:17:7d:47:08:7c:71:ef:09:74:dd:31:f9:c2:dd:fb:c1:
         9d:ca:fd:01:eb:b0:27:f5:d6:39:42:32:53:e0:76:75:cb:a3:
         bb:a8:e5:0f:2e:d4:78:62:91:7d:1d:ad:79:e7:93:95:8d:0c:
         40:2f:60:10:c7:1f:ad:cd:24:b0:0d:f6:bf:95:c0:83:6f:2e:
         6d:bb:68:20:45:28:be:20:fa:bf:ee:db:19:0e:c1:96:d7:51:
         15:92:61:4e:1b:c6:4e:e9:a0:65:e3:13:d6:c2:3d:9b:de:e0:
         5e:98:97:f9:dd:8e:06:fa:84:89:a2:15:50:4f:f8:7f:6d:b8:
         5b:9d:14:99:df:8e:d4:6b:ce:30:d8:09:97:60:b0:ab:6a:89:
         09:10:ae:f4:3f:86:6b:b5:9f:2b:22:90:b2:ad:15:37:76:f5:
         b4:ec:4b:98:da:0d:04:05:0f:7f:3f:a8:92:4e:7d:0f:83:9d:
         b1:10:d0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:55:35 2025 by rpki-client