Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/bb269ca5-856a-33c0-95d4-1f5608886d4f.roa
File:                     bb269ca5-856a-33c0-95d4-1f5608886d4f.roa (raw, json)
Hash identifier:          e/GmjaWyMSEHR1NRPdoTzMDIptsAq6HV1roBWP5rQeM=
Subject key identifier:   11:5A:96:B7:83:60:98:8A:AF:B3:FB:64:A0:25:B9:53:95:98:45:E4
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F43285849780F120BAD81391E69711940
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/bb269ca5-856a-33c0-95d4-1f5608886d4f.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     27539
IP address blocks:        69.26.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:12:0b:ad:81:39:1e:69:71:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=e5d160f1-1ee3-4de9-9ce8-0fce1cb031a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:70:79:32:f5:40:be:66:b7:75:45:b9:84:27:
                    a9:96:9c:20:a9:37:45:ed:4e:83:4e:63:7f:10:1f:
                    a5:60:ef:e3:b5:ed:7a:86:5c:19:1a:ae:5b:c9:e8:
                    6f:8e:54:f4:ca:00:8a:6d:fe:bd:2c:4f:75:a3:40:
                    30:a0:37:b9:b6:f4:cf:77:fc:e8:79:ca:fc:21:7e:
                    24:91:c5:fe:c0:32:51:11:50:5a:30:db:51:7c:f2:
                    81:63:e7:26:25:10:a4:ff:c3:a9:fe:95:9b:0b:98:
                    5a:15:ca:b8:4c:22:65:ae:62:99:89:5b:c8:d7:be:
                    84:93:f9:15:95:10:1e:84:1f:80:34:57:e7:25:da:
                    ad:8c:57:55:61:52:5b:85:c0:b2:f9:f4:a0:1f:9d:
                    bc:99:0f:8b:61:63:25:fc:aa:fc:a9:a6:8a:db:25:
                    17:c0:6a:c5:a6:bc:2e:eb:c0:68:e9:55:8b:d4:54:
                    53:06:7b:3e:2d:35:f0:6b:86:ff:b2:44:8c:08:b9:
                    25:59:10:f9:e2:b2:e4:68:77:59:99:ce:3b:43:ae:
                    bb:22:31:c1:d6:05:9f:c4:04:a5:19:dc:ca:e1:62:
                    7b:48:d1:1e:30:8a:e8:6d:d6:92:a8:77:80:bc:fa:
                    77:69:4c:9f:02:db:9b:19:e2:24:af:3e:b2:45:8e:
                    a4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5A:96:B7:83:60:98:8A:AF:B3:FB:64:A0:25:B9:53:95:98:45:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/bb269ca5-856a-33c0-95d4-1f5608886d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.26.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:16:a0:a5:40:bf:91:83:46:6b:25:e7:a6:23:ef:21:fe:f4:
         59:92:07:87:21:62:6e:fd:ba:e0:0f:45:bb:bb:c9:8b:9c:50:
         4c:f0:58:5e:20:d7:15:90:9f:20:01:77:e9:df:f7:ad:54:8e:
         b0:e5:04:58:b0:2a:46:3f:de:ef:d7:88:72:e2:3d:2c:33:9c:
         a9:f4:58:da:9d:bb:d0:a6:0f:d9:82:3a:c1:90:56:51:2e:24:
         fb:7c:7b:cd:dc:b1:9c:d3:67:c6:73:83:a3:af:5a:33:c2:76:
         b1:7d:9b:8f:5f:41:92:fa:2f:9a:a1:16:b2:43:43:6c:80:1a:
         9c:a0:58:7d:7f:93:6b:5c:39:91:93:47:e6:a7:1d:11:03:31:
         54:2b:bd:3f:53:46:5e:1b:66:a2:b9:d1:73:e9:06:36:94:ac:
         0a:5b:f5:08:c6:d9:44:58:54:a2:21:ee:eb:2a:ed:ba:df:2d:
         00:ae:5e:e5:a4:f1:49:80:f5:6c:b5:91:3f:17:6e:88:d8:dd:
         fe:9d:d9:64:61:3c:33:6a:bc:92:41:b4:55:ba:19:0b:52:53:
         0c:40:58:16:7f:0b:f8:8a:15:b6:0e:a0:b7:fc:41:13:5b:69:
         be:9a:36:92:aa:59:c0:78:7c:57:05:ca:2c:67:af:af:d7:1b:
         19:35:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:00:24 2025 by rpki-client