Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a6c31ff4-a9a1-385f-94c0-d2358d9c179f.roa
File:                     a6c31ff4-a9a1-385f-94c0-d2358d9c179f.roa (raw, json)
Hash identifier:          wQqmmgAyM1Es3cu1WhGSMy8/lMn0Bpl8qUkmfwPuROI=
Subject key identifier:   DC:BA:AB:47:A0:1B:30:34:2F:0E:B4:FE:9D:B0:82:79:FA:05:84:6D
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285848C42EF43FD85580DE2823F340
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a6c31ff4-a9a1-385f-94c0-d2358d9c179f.roa
Signing time:             Tue 04 Feb 2025 02:39:56 +0000
ROA not before:           Tue 04 Feb 2025 02:39:56 +0000
ROA not after:            Mon 05 May 2025 01:39:56 +0000
asID:                     14813
IP address blocks:        69.73.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:2e:f4:3f:d8:55:80:de:28:23:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Feb  4 02:39:56 2025 GMT
            Not After : May  5 01:39:56 2025 GMT
        Subject: CN=6fc5d76f-6683-4c50-b903-b57721811653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:a5:2c:a5:b8:fd:a7:b5:7a:35:81:a5:8d:
                    1a:1b:a2:fa:3f:3e:81:e9:04:a3:3b:fb:28:43:12:
                    a1:cc:3a:f1:99:6e:92:c4:ef:e0:50:8d:c4:de:4a:
                    6b:8b:72:c0:91:06:d3:ad:51:e7:af:a1:e7:f4:47:
                    9a:ee:fd:1d:55:e3:72:61:ee:e5:60:e3:3b:33:e5:
                    1b:47:4a:6e:74:22:41:7e:9a:62:a5:10:96:f5:81:
                    af:37:f2:60:d6:cc:dd:79:0a:42:bd:74:cb:cc:ba:
                    2b:51:0e:40:10:9c:33:f1:8b:4c:52:9c:a3:71:70:
                    0f:b2:7b:30:ae:75:10:e0:23:2b:9f:f7:4e:a8:dc:
                    ea:cd:28:60:8f:d4:3a:9a:87:5c:b6:96:1a:6e:be:
                    b5:8a:ce:ac:b6:f3:df:0d:8b:5d:9e:42:55:6d:88:
                    16:6d:8e:0e:af:36:8c:e9:c6:60:fd:ae:99:79:78:
                    6d:2d:69:a9:ef:d6:da:54:e1:a9:8d:45:bd:61:f5:
                    72:f1:05:0e:40:f5:4a:48:f9:3b:d0:6a:c5:17:78:
                    3d:9c:29:bf:f6:75:ca:bb:c2:35:72:8d:59:bc:f1:
                    f9:d1:70:79:b6:07:b5:9c:42:15:cc:6e:7e:e6:27:
                    d7:c1:59:74:4c:ad:40:c6:c8:30:7a:f5:b0:64:55:
                    fd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BA:AB:47:A0:1B:30:34:2F:0E:B4:FE:9D:B0:82:79:FA:05:84:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a6c31ff4-a9a1-385f-94c0-d2358d9c179f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:25:93:d8:bb:2c:47:0d:32:1f:8e:23:e5:a0:e1:55:6d:6b:
         f1:bb:b1:37:a3:9a:bc:01:5d:1c:2a:a8:8b:a8:35:48:98:9f:
         df:1d:a8:68:a2:cc:98:41:eb:0d:95:77:d3:b3:ef:2f:58:c5:
         4e:23:e7:ec:3e:cf:61:a7:29:ed:8c:09:1c:80:fa:e0:aa:f3:
         f5:b9:a2:17:d5:1b:85:ac:5a:5d:aa:cd:6c:94:75:26:f7:67:
         63:78:86:e0:2c:89:c5:2f:a5:8c:66:1b:19:0b:74:27:58:66:
         62:28:c1:a9:0b:4b:ba:21:89:73:09:c3:eb:e8:00:40:92:01:
         92:43:6c:25:4c:75:ea:e3:02:b8:c5:95:78:ab:26:aa:c8:1c:
         11:64:b0:7d:45:b0:b4:19:6c:9d:d6:ff:72:67:dd:72:0b:f9:
         3c:4c:86:bd:3f:93:d6:4e:ba:66:4d:33:b8:1f:5a:79:9a:f1:
         a1:3d:88:00:7e:27:e5:2f:d8:be:a1:b3:5c:c2:01:ac:c3:b5:
         fa:91:8b:81:56:95:2a:51:6e:96:df:54:aa:56:a2:52:21:f8:
         c2:da:5e:f1:24:de:7c:3b:a9:22:c1:0e:0f:73:23:c6:49:c8:
         fc:67:04:b4:92:2f:86:d5:94:d9:9f:5b:e7:40:c2:57:5f:79:
         51:36:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:05 2025 by rpki-client