Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/709234c1-6400-3078-afcf-c2f8506b08a0.roa
File:                     709234c1-6400-3078-afcf-c2f8506b08a0.roa (raw, json)
Hash identifier:          r7vSYDsuEiCQ4ck+RQ3pP+1hAwi5hmgcJ16MFb+HMjw=
Subject key identifier:   06:79:5C:67:44:F6:42:B6:B1:BB:E3:72:E7:E1:E8:93:D8:11:FB:4A
Certificate issuer:       /CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Certificate serial:       010D0C9F4328584A5FC5D6FBB607198D6B5726E0
Authority key identifier: 3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/709234c1-6400-3078-afcf-c2f8506b08a0.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     400818
IP address blocks:        69.197.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:d6:fb:b6:07:19:8d:6b:57:26:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=f826a45d-4e02-413a-8f60-ce673d88d4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:25:31:bb:92:b3:28:bd:cc:9d:ed:76:3a:56:
                    01:5a:df:ed:99:5f:1d:04:ba:6b:16:de:b2:84:46:
                    9c:7a:78:ff:2d:90:3d:58:c3:38:14:5e:ab:ec:25:
                    2f:d5:ca:18:36:56:ad:5c:1f:b3:2a:bd:4b:ab:f6:
                    07:fc:89:be:9d:8e:b1:3e:0e:5c:2f:a7:5a:79:37:
                    db:84:69:d1:bb:74:e7:ca:00:85:ce:ad:2d:32:64:
                    d5:6e:45:ab:86:f9:52:be:47:fa:34:48:4c:87:df:
                    99:fc:a9:0d:e1:50:3e:90:4b:be:73:c1:53:9e:d5:
                    61:32:7e:b8:a6:78:42:89:06:d9:9d:96:1e:90:1a:
                    da:79:55:51:0f:da:f8:41:06:9e:bc:7a:99:84:e2:
                    fb:47:7c:a7:1f:ea:ec:fa:fd:fa:3f:fa:30:eb:69:
                    bf:d7:5b:cc:f6:eb:69:3d:b8:61:5c:61:af:e7:88:
                    dd:c5:d7:4c:32:82:8c:d7:fb:7b:8a:76:0f:08:5e:
                    a6:cf:ba:35:bc:76:a4:e6:ea:83:38:57:1c:d7:3d:
                    7e:de:c3:fc:bb:b1:68:1b:37:09:d0:21:60:98:4c:
                    d9:56:3f:3f:79:8a:d1:de:7b:21:af:22:13:80:4a:
                    39:be:97:7f:e6:f2:5b:71:8d:10:cf:ee:c1:3e:e1:
                    ba:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:79:5C:67:44:F6:42:B6:B1:BB:E3:72:E7:E1:E8:93:D8:11:FB:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/709234c1-6400-3078-afcf-c2f8506b08a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.197.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:17:c1:63:81:bf:9f:7e:c4:e1:f8:2d:fd:d0:37:37:58:f3:
         17:11:d3:8f:55:6f:c8:6e:11:f2:a3:da:9a:7e:90:1c:ad:30:
         5d:ce:4c:cc:3b:4f:2b:87:7b:73:8f:1e:13:20:a5:a1:39:0e:
         f5:c2:97:cc:c9:7c:d5:11:f7:83:01:d8:4d:de:8b:37:37:d1:
         3e:d9:d8:0f:4f:0d:3c:7e:2f:e6:4f:a5:10:98:9a:8e:39:05:
         bb:7c:3e:37:fc:70:43:d1:6e:bd:c8:32:29:40:52:d3:bf:a6:
         d4:4e:24:2d:f6:03:27:c0:c6:3f:24:0e:e7:13:59:5f:69:8e:
         75:d2:68:65:e6:21:be:cc:f5:22:3d:e5:9e:fc:c4:c2:35:a6:
         79:45:fc:9a:58:1f:ee:96:84:c2:05:04:51:3e:46:01:31:f0:
         3a:86:ec:bf:da:75:fe:2a:8f:c9:4f:27:21:25:4f:31:01:df:
         2b:ac:f4:a1:b0:2d:b4:e1:f9:6b:8c:78:40:f1:73:4c:4d:1c:
         d7:cd:94:5e:f1:12:f2:d9:8b:37:55:80:69:33:20:2f:6d:66:
         bf:c4:7b:e0:83:c9:00:fa:5b:f0:73:8c:88:39:1c:ee:c0:d8:
         1c:b0:5d:b3:b2:96:a4:72:65:ef:94:1b:7a:85:fa:6d:f2:50:
         e5:8d:dc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 09:34:32 2025 by rpki-client