Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/c88f8f34-c9f1-35e5-a52d-747c8d220ace.roa
File:                     c88f8f34-c9f1-35e5-a52d-747c8d220ace.roa (raw, json)
Hash identifier:          9rVqhXB/Vq1mC3PaplzbfHiXPYtBgcsfAglH/tw49tM=
Subject key identifier:   8C:F8:07:D9:F6:B7:AB:E2:E0:D2:CC:F6:6B:9C:8B:BB:A1:A7:17:6C
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F43285849780F11FA56D6F8F42902DE80
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/c88f8f34-c9f1-35e5-a52d-747c8d220ace.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     27539
IP address blocks:        69.26.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:11:fa:56:d6:f8:f4:29:02:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=c50e6c0b-1643-4dc9-a714-96a5e8f193de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:9a:5b:67:d3:32:33:bd:a3:5e:47:5b:a6:
                    2f:cc:4a:1e:39:eb:05:44:ea:ab:4e:d7:e8:d8:b2:
                    50:72:4f:c6:e7:8b:2a:9b:7a:e9:59:ad:13:7f:b4:
                    54:c8:d4:ce:78:dc:30:14:a5:70:97:54:a5:69:bd:
                    ab:3a:02:be:d1:10:0e:f5:25:7c:63:f5:e7:cc:4e:
                    76:18:f3:4f:5e:cc:f8:0d:6c:c2:49:92:c5:32:7d:
                    35:3d:8d:c6:23:59:98:73:bf:44:af:cd:26:20:25:
                    21:88:33:5c:49:8d:b7:7d:ca:c9:da:a6:be:44:19:
                    01:73:48:55:35:37:1a:d1:9c:e8:32:1d:bd:34:86:
                    37:30:78:be:ef:23:bf:45:fd:54:d0:5a:f9:87:80:
                    5e:f8:90:f6:26:f4:57:5b:14:36:35:c1:01:8b:91:
                    13:98:ff:ce:d1:4c:85:3d:5a:5f:04:6f:8e:27:3d:
                    55:f1:eb:2d:35:35:71:bd:ff:f8:4f:f7:97:a2:ed:
                    ba:05:4e:bf:70:42:17:9e:d3:7f:16:80:f7:50:2e:
                    28:c6:ae:a4:b2:af:9b:ac:f8:c7:67:1c:a7:fc:e4:
                    6d:37:f2:97:9a:7b:99:f1:52:5f:eb:b6:61:5f:d3:
                    25:b3:02:4d:43:19:59:89:19:07:cd:e0:db:56:07:
                    a6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F8:07:D9:F6:B7:AB:E2:E0:D2:CC:F6:6B:9C:8B:BB:A1:A7:17:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/c88f8f34-c9f1-35e5-a52d-747c8d220ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.26.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:22:ed:c6:b6:9f:b2:87:ee:26:67:2b:7e:eb:a8:7e:e4:8e:
         30:a3:09:f1:65:5a:d0:02:ea:6a:e6:19:47:38:24:b5:7b:39:
         52:68:de:3f:dc:26:80:60:52:61:7e:ac:7a:48:f5:22:0c:37:
         45:8f:56:d3:b5:85:99:8a:29:c5:d3:f7:9a:d4:48:0b:67:c5:
         b2:75:e5:b8:43:cd:53:77:d1:2b:a6:e6:2f:38:42:b6:89:12:
         38:38:b4:c9:40:c9:e4:a9:de:64:05:4c:95:bf:b7:2b:40:29:
         41:57:07:d9:ad:17:81:ec:a6:d5:af:a3:22:c3:32:2c:84:2a:
         dc:14:3a:c9:b1:77:6d:73:b6:fb:ff:68:56:39:4d:d4:92:d2:
         10:0d:32:7c:d1:c2:15:d4:79:e6:90:ce:a2:93:67:a7:cc:62:
         b7:39:88:c8:8c:be:5f:72:a3:2a:f4:52:e3:8f:af:0d:47:d1:
         12:da:c2:af:83:03:68:fc:cc:5a:07:cc:d1:e1:cc:67:0a:f9:
         bd:5d:9e:0d:83:e0:b5:c9:73:6f:61:58:e0:87:c3:f3:a6:0d:
         23:54:c8:e5:f0:13:ad:9f:0c:1a:02:61:b0:a9:f6:89:ed:74:
         9a:56:db:03:04:0c:10:49:d2:3c:37:5c:43:f1:9b:f0:d7:8e:
         b8:84:56:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:46:02 2025 by rpki-client