Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/72490e2b-d9c4-3ddd-a82a-8ec002bfb10e.roa
File:                     72490e2b-d9c4-3ddd-a82a-8ec002bfb10e.roa (raw, json)
Hash identifier:          Gf+i7K0SUnVKO4Xk/sEbCYq1USp1FHUsZzqGcdU/TaI=
Subject key identifier:   29:17:9A:05:C1:EA:98:5B:21:B7:A3:C0:3D:7E:17:08:E7:20:70:EE
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F432858490E16C5B97F10862BA423AFA0
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/72490e2b-d9c4-3ddd-a82a-8ec002bfb10e.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     30059
IP address blocks:        69.61.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:c5:b9:7f:10:86:2b:a4:23:af:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=4489e7fa-ba80-4a50-bacb-4ea2f739e9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:74:c7:ca:49:81:f0:35:d0:c5:2b:de:cf:
                    70:ba:93:2c:d2:e5:d4:50:27:23:97:fa:4b:aa:b7:
                    3c:1b:31:8c:f4:98:18:09:4e:da:73:7d:16:78:a1:
                    a8:6f:35:18:d7:fb:19:f8:42:f8:51:03:cc:4b:6f:
                    ca:b6:32:33:6c:3a:0b:e6:ff:bc:f1:64:25:79:60:
                    fb:41:e4:36:b8:24:c6:1a:fb:f7:cc:cd:77:79:14:
                    b1:d5:a4:c5:52:6d:09:ff:42:6f:da:50:64:91:4b:
                    f6:f7:1e:38:62:cd:47:cd:09:93:28:db:fb:73:4a:
                    ca:83:1e:60:69:03:0a:c7:52:24:04:fe:d2:5f:c0:
                    e2:83:fa:64:0e:ea:84:80:24:41:8d:2c:1f:24:2a:
                    12:1f:9e:07:cd:90:c2:fb:d5:16:0b:9d:9c:f0:72:
                    2f:12:85:12:f6:44:0c:55:a3:53:b4:90:37:38:cf:
                    2c:a7:f6:d8:42:95:c7:2d:37:a7:4e:87:f0:c5:cc:
                    52:e4:f6:b4:95:72:c1:62:3b:c4:e5:11:27:5a:f2:
                    cf:14:2b:7b:53:b2:29:9f:82:3e:38:eb:57:f7:06:
                    e9:8b:51:35:83:fb:21:4c:e0:ad:e7:6b:66:23:32:
                    3c:58:ab:64:99:85:4d:75:03:39:02:71:bc:48:1f:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:17:9A:05:C1:EA:98:5B:21:B7:A3:C0:3D:7E:17:08:E7:20:70:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/72490e2b-d9c4-3ddd-a82a-8ec002bfb10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.61.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:69:9d:63:9b:af:ed:9f:78:39:3c:88:63:c2:cd:71:44:67:
         ba:86:ec:48:e1:f6:d9:fe:96:e1:b0:af:a3:a9:ed:3b:4e:43:
         34:c4:7d:b3:d3:b3:c5:99:07:b6:f3:ae:d6:58:20:14:c6:01:
         d8:21:43:72:80:1c:9f:ed:49:0c:8d:e6:b3:aa:ae:d8:35:89:
         af:61:b8:94:20:d8:02:50:1a:35:7a:43:12:b5:c2:c1:af:6f:
         2a:8a:f1:d7:8f:af:1f:08:3e:bc:86:3e:ab:b7:0b:75:c0:28:
         82:ef:7d:78:61:db:6f:ee:be:8a:7c:37:2c:b6:c4:c3:64:3b:
         af:8d:e0:94:7b:88:89:96:48:dc:a4:69:bc:d1:0b:e3:a7:5c:
         d0:55:e6:6a:6f:ba:98:35:9d:f0:59:60:15:73:29:65:ef:63:
         e9:3c:fe:87:b3:08:80:da:4a:00:c1:e5:4b:75:1e:c9:ba:9f:
         52:42:d6:2e:4e:a7:77:2c:ae:fa:c8:1d:ad:73:20:c7:ce:80:
         39:c0:20:39:97:ed:f2:54:2a:b7:41:ce:08:bf:4a:9c:33:c7:
         9f:60:f5:6d:27:14:fd:dc:a1:9d:be:7a:3d:19:32:7a:32:ba:
         f7:93:f7:6f:28:4c:3e:fc:da:22:d9:c2:4d:87:89:58:1e:42:
         d4:36:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:19:27 2025 by rpki-client