Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa
File:                     d32f3f1b-47a5-3201-b5c4-5f710806e110.roa (raw, json)
Hash identifier:          d+o7b4bFgsqHUUxWNAvjg8DyAsu1WNNBzey47bRB9PA=
Subject key identifier:   B1:E3:F8:4F:63:B0:22:1B:51:36:76:75:BD:6D:82:9F:30:BE:8B:71
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F43285849CBCF89BE52CF2A1A40A9E990
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     20127
IP address blocks:        69.128.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:89:be:52:cf:2a:1a:40:a9:e9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=b6f4e711-f26f-4c9c-b91b-af06daba48e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:78:d6:71:1e:83:6e:ce:c2:65:90:a3:0a:
                    d0:56:09:7d:ea:1e:10:f6:e4:95:7d:58:f1:31:b1:
                    ec:07:02:90:4f:1d:2d:dc:89:b8:17:da:49:d2:ae:
                    7c:d3:bc:8d:12:17:63:7e:f9:21:90:e4:d4:c5:03:
                    aa:89:11:bf:52:d7:c9:6e:2a:3f:d9:67:78:b6:27:
                    ff:9f:f2:2c:a0:a5:95:38:d1:a5:d2:a9:7e:64:c3:
                    36:79:22:6f:38:85:4c:b4:cf:6a:09:cf:04:65:42:
                    63:f6:9b:9f:11:91:d7:50:8f:d4:ec:bd:cf:c5:43:
                    d1:76:50:a5:db:b0:be:95:ac:ae:61:59:77:f5:44:
                    e0:0c:65:3e:c9:a9:e2:4a:23:d9:4d:ad:ac:e1:c0:
                    21:f0:20:10:19:9d:fc:0e:ff:d4:4d:a6:e5:1c:b8:
                    3a:1e:18:2b:89:f0:7a:f7:45:0d:69:f1:12:95:4c:
                    69:cc:26:18:85:23:64:06:ba:04:2f:1c:d0:0f:ba:
                    c6:64:dc:0a:9f:0d:ac:95:ce:6b:3b:29:d1:eb:a2:
                    5c:56:fa:b1:83:40:9a:72:d3:dd:ca:b8:a7:b3:aa:
                    41:8f:6d:6e:9c:a5:f1:5b:d5:91:14:60:1c:da:db:
                    e5:83:08:bc:d5:e5:3b:ba:20:54:2b:3e:3b:8e:4f:
                    77:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E3:F8:4F:63:B0:22:1B:51:36:76:75:BD:6D:82:9F:30:BE:8B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.128.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:d9:da:43:ee:cf:6c:a5:93:ab:a3:65:26:4a:4e:09:46:af:
         cb:bd:5f:48:3e:ed:83:36:50:aa:7f:88:20:2f:60:90:86:61:
         0e:5c:97:ba:bb:a6:cf:19:7c:5f:80:aa:16:66:66:db:62:17:
         93:33:1f:a3:78:a7:98:d9:95:3c:b5:3d:a1:8e:f5:60:03:3c:
         6a:75:81:a4:b5:00:62:2f:3f:37:da:21:74:a4:ca:1a:df:e6:
         63:65:65:77:4e:a1:c8:3e:e1:3e:a6:8b:32:12:05:07:92:33:
         6d:3b:22:fc:9d:37:64:16:c4:0d:d8:6d:19:a1:a8:43:81:a0:
         7a:10:3b:86:d3:d5:fc:b8:d9:63:0f:e6:6b:6e:26:4c:62:39:
         20:20:39:4b:20:9b:6f:0f:48:b4:89:5b:fe:69:9b:7b:dc:e4:
         2e:5e:e6:ef:d6:fb:4e:e3:5d:6e:00:09:b7:dd:a1:97:fa:8e:
         56:76:ce:92:9b:e8:c3:b5:18:e5:27:7e:1d:a8:9e:10:ad:25:
         94:e9:53:e1:7b:63:91:9a:95:f9:b6:7c:ed:9a:f2:cb:75:62:
         b5:0b:7d:50:f4:9c:71:78:62:7d:06:89:cf:ae:5b:de:03:9d:
         af:9b:10:f7:90:0d:7e:06:4d:1d:89:5a:a5:9a:1b:70:6f:57:
         be:74:e1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:17:18 2025 by rpki-client