Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/20fbb1c0-414b-3430-ae86-de61e4f95c4a.roa
File:                     20fbb1c0-414b-3430-ae86-de61e4f95c4a.roa (raw, json)
Hash identifier:          wDPifmFLNxtCW3FZWQb9vnw+k0UwG1IvDEu4bkfdGkY=
Subject key identifier:   8F:2D:A4:70:BF:1D:72:5D:14:64:8C:FE:19:15:25:46:8B:51:8C:B8
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F4328584AE1968B25CDDA81E4A5E0CA2B
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/20fbb1c0-414b-3430-ae86-de61e4f95c4a.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     1640
IP address blocks:        69.57.96.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:8b:25:cd:da:81:e4:a5:e0:ca:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=9cbce8a5-e085-47bd-a6c1-58a99112a6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b2:5f:a2:94:9d:d6:d3:8e:eb:d0:34:25:51:
                    d2:be:9a:5a:09:11:a8:27:6b:38:f6:b5:3e:14:e1:
                    bb:5e:53:b0:f9:41:00:59:62:3e:ba:ee:8e:be:fc:
                    62:2c:60:48:cf:f2:9b:3c:2b:2b:80:42:77:d6:80:
                    d1:3e:98:8b:e1:9e:b8:0d:e2:cb:fa:81:86:39:27:
                    1d:bb:6e:5f:71:4d:84:78:64:a1:9f:11:72:c8:d6:
                    68:00:8d:b0:df:5b:b1:1d:7f:c6:65:a0:86:4b:e9:
                    31:5f:1f:1f:59:eb:d4:a4:af:25:4d:2b:51:10:02:
                    87:4e:67:d3:5a:52:83:de:84:93:99:e1:bf:48:0b:
                    1c:01:bb:8e:2a:de:df:03:08:5d:69:d6:5e:9f:d5:
                    1c:2d:d8:39:f8:30:2e:f5:8b:29:64:62:2b:1b:39:
                    52:ad:ae:7d:e0:f9:c1:3a:06:08:f9:04:12:f5:09:
                    1d:d3:2d:a9:40:66:0a:33:c0:0b:13:ac:61:ac:0b:
                    8c:c1:88:3e:c3:55:4b:08:b7:88:a5:6b:fa:32:69:
                    08:db:ad:f8:66:c9:10:4b:67:cd:d0:96:8a:1e:63:
                    1d:90:44:e1:57:78:3f:d4:bf:c4:77:63:f4:e6:b1:
                    59:bd:3d:c8:47:ef:c6:39:dc:a7:2a:45:73:f4:1f:
                    16:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2D:A4:70:BF:1D:72:5D:14:64:8C:FE:19:15:25:46:8B:51:8C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/20fbb1c0-414b-3430-ae86-de61e4f95c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.57.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:71:ed:cd:80:1b:cf:8f:d7:1d:eb:e4:61:86:2a:cd:d4:
         40:c7:b3:fb:e3:f4:8f:0d:4d:5c:57:88:41:de:31:d3:14:9f:
         76:6e:84:0e:50:34:cc:d4:52:2c:86:a2:5c:09:9e:68:51:ff:
         6a:b9:09:77:21:29:93:dd:88:7b:45:76:df:a6:48:ab:eb:1c:
         0b:3f:43:94:bd:9a:31:3f:dd:27:3b:fa:8f:43:00:1a:ba:ba:
         5d:c4:4e:e0:cb:84:6d:95:23:65:96:25:a4:89:07:bc:a2:9b:
         30:09:47:22:b8:2b:86:ac:5a:33:23:13:f8:0a:96:54:b9:4d:
         e8:44:0e:3a:6e:12:f0:9f:4e:0e:20:dd:71:62:bf:33:74:87:
         b3:a2:98:8f:d9:a7:35:b8:05:72:03:56:38:30:6e:c8:d3:a9:
         32:74:1b:4b:7d:a2:eb:24:ab:24:61:c3:9d:8a:83:13:de:4e:
         fc:47:78:6b:64:68:f4:79:6b:48:8c:2f:b0:55:2f:05:4a:ee:
         41:5c:32:4d:3d:a8:26:0a:12:75:c0:24:f3:4c:75:3c:45:df:
         47:e1:94:0f:e8:71:04:fe:54:6a:21:00:85:86:a1:bd:27:af:
         f8:af:1d:4a:39:a3:c1:bf:ea:f0:89:fc:dd:43:1c:22:27:14:
         8a:f5:06:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:07:39 2025 by rpki-client