Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6ab83537-bc7a-3c80-b657-ce248de461ef.roa
File:                     6ab83537-bc7a-3c80-b657-ce248de461ef.roa (raw, json)
Hash identifier:          gk0D+QLb3Qa8rEjykAT7sU1gPKsm8N2e8OfW15ujLTk=
Subject key identifier:   6E:82:22:29:19:F5:DA:53:79:7B:7F:FD:B9:E9:A8:AD:D7:CB:AF:AB
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B2365FF89BC805F162A5F7280
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6ab83537-bc7a-3c80-b657-ce248de461ef.roa
Signing time:             Tue 09 Sep 2025 14:46:30 +0000
ROA not before:           Tue 09 Sep 2025 14:46:30 +0000
ROA not after:            Mon 08 Dec 2025 15:46:30 +0000
asID:                     399073
IP address blocks:        69.17.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:65:ff:89:bc:80:5f:16:2a:5f:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  9 14:46:30 2025 GMT
            Not After : Dec  8 15:46:30 2025 GMT
        Subject: CN=e571e4a8-bce7-4c60-b26f-b158df291dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:02:20:4c:a4:fe:d8:92:f0:ce:5a:23:0b:
                    02:f7:a7:be:c2:34:ee:b0:cd:01:57:25:94:8b:5e:
                    8b:16:4c:ae:14:a3:20:4c:ba:46:9b:44:15:91:50:
                    c7:4f:e8:75:ac:9a:6d:1e:15:b2:63:b8:aa:af:44:
                    72:c7:19:fc:89:0b:c8:88:74:f5:69:50:6c:72:2e:
                    ff:05:8f:f7:8d:b2:b1:9f:40:ef:a7:67:a6:60:c3:
                    86:7b:31:de:7c:cf:a1:fb:51:2c:64:41:a8:85:0b:
                    71:1c:24:45:f1:d2:cd:f2:92:b9:5c:3b:2c:cf:ac:
                    f0:bd:ef:77:4d:fc:66:80:af:26:b9:09:c3:01:7c:
                    b9:df:aa:b7:b0:59:ca:c3:65:8b:a5:6b:d1:72:49:
                    46:ee:62:71:39:77:52:a9:c5:a3:4f:fb:85:3f:35:
                    c1:5c:fe:7a:3a:42:0b:af:aa:2c:e8:78:04:a9:76:
                    9a:af:b8:e3:af:82:79:c9:76:1e:ca:af:78:4b:aa:
                    d6:6b:9e:07:76:30:2b:5b:ce:e0:1d:fc:ee:6e:39:
                    3e:91:0d:78:47:a1:84:5b:95:9f:3d:3f:9a:e9:3a:
                    a3:d0:ee:61:91:da:d0:20:ff:d5:bd:55:f1:07:da:
                    ad:2d:53:13:bc:3a:a7:95:bd:78:b5:04:26:cd:78:
                    ef:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:82:22:29:19:F5:DA:53:79:7B:7F:FD:B9:E9:A8:AD:D7:CB:AF:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6ab83537-bc7a-3c80-b657-ce248de461ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:71:b4:09:27:c7:97:7a:5f:b7:99:0d:51:fd:66:4c:f3:74:
         11:8d:09:bf:08:8d:24:e7:db:a9:fa:b9:f7:70:f1:83:d4:97:
         2f:ff:01:df:e4:83:cb:6d:d0:95:eb:e5:03:33:d8:94:8c:80:
         8b:bb:c3:4b:c6:46:cd:9c:72:b7:d2:c3:d5:b1:4e:72:b4:ba:
         33:75:14:2d:fb:86:c9:c7:de:27:5e:9e:17:00:28:0f:af:15:
         03:49:c7:fd:a6:2d:77:4e:3d:22:a1:4e:fd:bb:09:21:b0:59:
         a1:a3:69:1f:35:11:54:24:2f:e6:ad:e0:a1:de:ea:cd:4b:59:
         cf:11:06:f1:e4:6a:93:09:71:80:cb:ae:3e:b1:34:a5:f8:04:
         3a:6f:0b:55:87:89:60:35:93:0c:34:33:84:04:ef:ff:25:02:
         f2:13:66:ed:22:f8:af:37:0e:59:7f:ce:e3:66:0e:f4:10:79:
         24:6c:7c:cb:a9:c4:07:11:49:b1:5f:d7:09:cd:6c:4f:c5:2e:
         0c:a9:e5:b4:b2:fb:af:97:b7:f6:b9:96:aa:b3:4a:5d:b2:c5:
         3f:cf:ec:3b:4e:5a:ed:cd:49:6e:d8:7e:04:27:bb:21:f7:9c:
         d6:65:93:5e:0c:6b:24:ff:de:8d:19:45:48:2e:3d:c1:c2:50:
         f0:ee:03:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:59:53 2025 by rpki-client