Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa
File:                     68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa (raw, json)
Hash identifier:          J29m/ux1451yJEHiWonH905m2lWZU4V/L0rEFRIZtTM=
Subject key identifier:   F7:90:96:C5:90:05:30:2A:6A:5C:90:A6:7C:13:B8:E4:69:D8:0D:A8
Certificate issuer:       /CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1
Certificate serial:       010D0C9F43285849FCAA75D277083E970A6B9AC0
Authority key identifier: 7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     20304
IP address blocks:        69.71.137.0/24 maxlen: 24
                          69.71.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:75:d2:77:08:3e:97:0a:6b:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=5d97298c-999a-4934-bdd0-3959179834be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e8:fc:3e:cb:3f:3b:cb:eb:c1:6a:50:5b:64:
                    92:7c:f0:e1:d9:f8:1a:51:f8:65:b5:5a:81:df:2f:
                    72:58:55:05:b0:a6:6a:0d:e3:95:5a:26:14:a1:6b:
                    2a:25:3d:a7:c4:c6:00:76:fb:f9:e0:58:cd:0b:1d:
                    fd:3f:51:ff:77:52:74:81:b3:6e:83:e2:c3:f8:8e:
                    be:dc:50:0a:8c:9c:2a:a3:c0:83:67:fd:5c:81:d4:
                    f7:e3:f9:14:b7:df:a3:8c:1c:a2:9b:8a:27:c3:25:
                    e9:bb:35:cf:e1:bd:54:9a:ab:23:64:a2:3f:ad:2f:
                    fa:50:38:9c:51:87:9c:fd:81:97:93:e8:fe:75:7f:
                    99:59:7b:d5:d5:c1:ab:9f:6e:06:54:d1:74:bf:90:
                    38:eb:b5:cd:e3:33:4d:13:fd:bd:44:9e:36:7e:d1:
                    2c:f5:9e:53:ac:c2:f4:05:00:7e:c6:33:98:ea:c3:
                    b6:ce:65:ba:19:d3:31:0d:f9:ba:fc:94:9e:ce:01:
                    e1:e7:5d:9e:20:62:ce:4d:73:8a:14:18:ca:58:b8:
                    21:ab:6b:7c:7d:94:70:10:d5:84:9b:bc:35:09:e2:
                    4a:88:ed:3c:f5:09:b2:62:6e:e3:e9:b4:63:a7:e0:
                    c1:f2:6c:39:d0:f3:3b:2f:b2:85:ec:05:38:4b:a0:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:90:96:C5:90:05:30:2A:6A:5C:90:A6:7C:13:B8:E4:69:D8:0D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl

            X509v3 Authority Key Identifier:
                keyid:7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.71.137.0-69.71.138.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a5:ca:97:47:1b:6f:3e:74:b4:ed:7e:c4:fe:5e:9e:c2:af:
         d0:06:7d:50:4f:02:e2:6d:98:99:64:db:6e:f3:fe:8d:87:c8:
         09:5b:27:f4:5b:82:66:39:2b:a9:d8:54:80:ee:1c:84:95:a1:
         0f:dd:bc:44:9f:df:c0:31:56:30:dc:da:65:51:02:3f:9c:51:
         bd:09:0e:27:78:9f:5f:0a:77:31:ad:55:69:71:36:73:3f:a6:
         6c:f2:83:4d:6f:99:0d:23:3b:70:55:9b:45:b0:09:b4:6d:4c:
         ad:33:1e:41:c4:37:a6:aa:5f:5a:6c:9b:64:0b:3a:65:f0:22:
         54:89:c5:1b:9e:6b:82:a2:49:e9:81:a9:06:92:ed:ef:9e:f8:
         5f:28:92:8b:96:d8:a1:7b:c3:a4:fa:fa:52:95:1a:c4:cf:64:
         63:1a:56:a2:8c:96:7e:e7:71:ff:b6:4f:c0:b0:9c:d5:58:1f:
         ab:2a:9a:10:6e:cd:34:36:b1:7d:c6:7e:d3:1c:75:70:fd:2f:
         92:ea:ee:5f:70:f3:25:23:8a:66:7b:d8:04:6b:c7:3d:04:fc:
         64:80:cf:1c:77:da:3d:af:c6:05:b3:7d:60:60:17:e0:89:47:
         d9:ee:d9:05:3a:e5:5e:61:38:9c:e2:56:46:ab:0d:6d:41:db:
         cf:05:1f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:00:15 2025 by rpki-client