Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/990a62e3-1d14-3057-96be-e832a75e7d08.roa
File:                     990a62e3-1d14-3057-96be-e832a75e7d08.roa (raw, json)
Hash identifier:          IbtKvo9LQcnvxIbJIDy6FgeXaJPKydVNcTRNsCf3UG4=
Subject key identifier:   BD:27:9B:72:A9:52:C5:33:87:0B:2B:4B:B2:A1:58:A6:AF:64:03:C5
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285848C43D39B05F4BA7FD7997E600
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/990a62e3-1d14-3057-96be-e832a75e7d08.roa
Signing time:             Tue 04 Feb 2025 03:08:41 +0000
ROA not before:           Tue 04 Feb 2025 03:08:41 +0000
ROA not after:            Mon 05 May 2025 02:08:41 +0000
asID:                     14813
IP address blocks:        69.73.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:3d:39:b0:5f:4b:a7:fd:79:97:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Feb  4 03:08:41 2025 GMT
            Not After : May  5 02:08:41 2025 GMT
        Subject: CN=53bb167d-8276-4d20-a088-ae4b204ca36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:03:c7:aa:b1:4d:75:b4:a1:20:e0:88:60:
                    71:91:9e:15:aa:de:64:e0:57:34:8d:c4:ce:da:47:
                    2e:87:df:b6:24:a9:2c:84:fd:cf:ac:25:77:74:de:
                    fc:be:0b:aa:cb:1e:25:61:3d:b6:6d:c2:9c:1d:6e:
                    88:49:61:5a:3a:bb:85:31:51:16:17:2b:42:ff:6c:
                    10:ac:35:74:bb:6c:37:5c:db:8f:f4:8b:03:a2:6a:
                    40:fc:e9:51:85:b7:9a:d8:92:b8:5a:e7:1a:bc:ae:
                    2b:84:80:2d:3c:52:1f:c5:7e:1c:bd:86:33:27:1f:
                    0d:45:c0:4d:55:6f:df:f4:a0:e9:21:8f:77:1d:af:
                    2f:22:24:a1:83:a2:19:92:ad:11:e7:6b:4e:b0:61:
                    c4:1b:06:88:06:b5:5f:3e:e0:59:88:73:87:d3:7f:
                    f2:9d:a4:8a:8f:2f:d0:a7:48:d2:b0:37:23:84:3d:
                    f1:0f:33:26:cf:99:3a:62:2b:51:ef:ec:50:d3:e9:
                    be:29:9b:04:46:15:fe:e8:f4:4e:84:66:e1:0b:85:
                    37:f8:44:6b:11:26:82:2d:72:ba:1c:dc:78:bf:76:
                    86:73:d4:61:23:4d:7b:1b:77:2b:80:4c:d7:9e:c9:
                    e9:55:fc:6a:42:4d:85:28:3d:13:89:1e:ba:e9:de:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:27:9B:72:A9:52:C5:33:87:0B:2B:4B:B2:A1:58:A6:AF:64:03:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/990a62e3-1d14-3057-96be-e832a75e7d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5f:6f:52:71:47:24:16:9a:e0:45:58:f2:4b:de:e9:a0:c6:
         5c:21:59:22:4b:1d:1c:96:54:11:1f:44:84:fe:00:fb:3f:a3:
         77:37:10:eb:83:b5:78:e2:04:bc:44:e1:ee:e9:12:1a:50:ee:
         0b:14:2a:d8:f7:b5:64:4b:ed:1e:4b:b9:02:b1:6b:ad:d0:29:
         65:60:a8:f3:77:b5:a6:dd:17:27:81:f5:9c:fc:22:8b:06:d9:
         4f:3c:96:bf:fc:13:ef:39:90:95:5e:bd:d5:df:f1:4b:5e:15:
         f6:1e:9a:0d:c7:fc:4e:be:f4:30:37:90:55:ed:36:57:ff:5e:
         46:3c:92:80:21:67:ee:20:2c:7e:a8:44:04:1f:74:a3:cf:89:
         33:e6:10:62:28:04:5e:3c:0e:dc:bb:68:42:de:e0:74:4c:d7:
         f3:6a:7a:e8:ce:a8:c5:2a:5f:cb:18:13:ea:91:f9:2b:d1:33:
         7d:8e:b8:b4:68:2e:51:4b:7e:06:72:41:a2:33:6a:96:38:80:
         97:f7:68:60:00:fe:b7:f5:d8:13:7e:36:9a:f9:73:75:a7:19:
         ac:f1:4a:36:b5:a3:b2:6d:8b:4d:5b:cb:f6:32:22:4e:8c:72:
         af:b3:87:5d:c9:06:8e:b2:f0:15:3b:70:18:f1:a4:eb:49:ef:
         05:cd:c7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:49 2025 by rpki-client