Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa
File:                     1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa (raw, json)
Hash identifier:          hMfcyt/rrg3AUk30Jn3b6bwyOtyR6Cm0b0/YfL1/E0Y=
Subject key identifier:   5E:11:C9:B0:0F:D9:79:B8:37:8F:17:1C:29:1C:71:82:A3:74:D1:F1
Certificate issuer:       /CN=6b72a822-0e8f-45f9-a612-463da7164bf3
Certificate serial:       010D0C9F432858492CAE99FF2736EBF12253D800
Authority key identifier: 58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     174
IP address blocks:        69.54.244.0/22 maxlen: 22
                          69.54.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:99:ff:27:36:eb:f1:22:53:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b72a822-0e8f-45f9-a612-463da7164bf3
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=39565ff2-3418-4c8b-8c5f-172f3420a986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4d:97:76:be:03:0b:ca:5a:d7:24:18:62:13:
                    45:03:b4:c2:d3:cf:04:02:32:58:4d:4d:73:ed:87:
                    c8:04:62:16:31:e1:00:3c:0b:3a:ca:4e:06:df:d5:
                    d9:09:69:68:4f:ed:d5:d2:b4:70:af:0e:c3:16:8e:
                    b6:0e:eb:ec:27:9a:09:19:98:99:6d:6c:9c:5e:43:
                    ed:45:6d:33:89:91:d4:b4:d6:1a:32:35:75:b7:ab:
                    e9:00:30:3a:e6:b1:62:1c:c5:ac:56:a6:52:3d:eb:
                    66:ba:37:1b:5c:36:8c:ba:67:ec:c2:af:1b:bb:47:
                    82:b2:6f:9c:00:2b:ca:e1:0b:27:ec:07:d4:9d:82:
                    3f:73:9f:99:c4:28:c6:eb:ca:fa:69:5b:58:44:8d:
                    f8:7d:b1:e9:dd:40:42:8b:7d:6e:6c:ad:29:9a:23:
                    32:2b:13:e4:03:92:50:5e:0d:58:f3:74:44:de:de:
                    36:2c:4c:23:78:9c:6b:dd:dd:97:b2:a9:5f:07:b4:
                    a4:19:83:31:e5:ad:31:65:78:05:24:75:d2:65:05:
                    52:0f:8c:cc:c9:29:8d:96:d4:21:45:4c:e5:fa:57:
                    ba:e9:cf:0b:14:0d:cf:27:44:af:d6:13:35:96:78:
                    f7:3b:81:3b:ea:61:b8:2e:bd:3b:3e:f7:59:14:f4:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:11:C9:B0:0F:D9:79:B8:37:8F:17:1C:29:1C:71:82:A3:74:D1:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl

            X509v3 Authority Key Identifier:
                keyid:58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.54.244.0/22
                  69.54.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:57:ea:45:f5:1e:5f:59:4f:6e:37:f4:ac:52:17:2b:6c:54:
         12:fb:23:43:dc:e7:22:2d:61:8a:fc:d2:02:2e:e9:9c:81:b0:
         95:ec:b8:2a:f7:c3:c0:4b:3c:8d:99:f6:03:3d:73:a1:a6:e7:
         b4:75:ef:e1:52:a6:76:89:a2:18:c1:3c:bc:8e:ee:0d:77:98:
         35:3e:c9:e1:49:53:cc:a6:21:5e:81:96:23:e5:95:14:94:7a:
         d9:b7:de:7c:d9:3e:3c:98:8b:84:c0:89:ff:66:92:b9:79:b4:
         2d:21:29:d2:0f:d9:de:f7:95:b5:9e:b0:a7:d5:fe:cd:ac:eb:
         21:05:0f:95:a4:27:43:67:8f:b9:2b:97:03:87:e6:7b:12:3a:
         2c:2e:51:53:98:30:17:13:f2:36:9f:52:05:52:65:dd:12:5d:
         b2:83:66:02:67:1b:cf:cb:5c:c1:07:7c:22:78:5a:0e:84:bb:
         82:c1:e8:1f:36:fa:b4:ce:62:29:eb:f6:57:5b:f5:30:a9:17:
         af:c2:49:61:9f:cb:4b:de:57:b3:04:08:56:bf:65:ae:bc:9c:
         cb:5f:24:55:f3:ee:bc:a4:e3:c8:79:25:2e:c3:c6:d1:ed:44:
         1a:3a:85:e9:08:58:48:bd:b7:40:0e:c9:2e:41:2c:b7:fd:66:
         08:99:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:01:25 2025 by rpki-client