Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8ba81a6c-ff89-3c12-950e-cf712665914b.roa
File:                     8ba81a6c-ff89-3c12-950e-cf712665914b.roa (raw, json)
Hash identifier:          AoRC7kqkL6LxRqlFh9ovInIRwvz4MT+QxQWS2JeNK4M=
Subject key identifier:   A7:DA:12:76:17:B0:F6:B1:E0:57:63:E6:04:BF:DA:2E:F0:90:80:42
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848FD56BAFF740B67B1821D7E60
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8ba81a6c-ff89-3c12-950e-cf712665914b.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     25899
IP address blocks:        69.1.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:ba:ff:74:0b:67:b1:82:1d:7e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=964dd74c-a6de-43ef-9b30-6f201a1c27f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:02:19:c7:40:2d:f1:57:ea:64:26:dd:bd:
                    17:03:42:8d:34:6a:cc:49:17:5a:49:2c:33:c7:e2:
                    1b:85:c2:96:e6:d2:3d:3d:30:9c:a6:ac:f3:be:ae:
                    3c:20:1b:47:01:e3:46:6a:b9:5a:6b:e6:db:f1:ab:
                    49:7f:b4:d8:67:33:60:d5:f4:7a:39:e4:c5:3f:da:
                    63:48:58:95:1f:d3:bb:67:20:4b:ee:4e:93:d0:1c:
                    bb:d4:67:03:8a:57:1f:b4:e8:13:96:ef:3e:6e:68:
                    f4:7c:9d:ce:1b:97:03:90:4d:3e:ae:3e:ab:0d:30:
                    62:1f:1f:3a:65:36:f0:b5:b0:9a:9b:c0:4f:ad:6e:
                    f9:4f:88:5b:4f:ba:29:65:8c:3f:39:0e:9a:73:2a:
                    e0:f3:f8:bc:48:12:2a:0e:62:00:74:fc:f4:ee:4b:
                    0e:ec:d4:9a:79:03:d7:3f:d2:1d:43:f4:80:03:15:
                    81:62:0b:1f:17:06:9d:8b:4c:2d:57:bb:44:0e:e0:
                    81:f6:33:0f:7a:f4:aa:fc:d9:ef:d1:92:c9:ab:bc:
                    81:28:b9:cb:5f:ce:22:c4:09:ac:51:0d:23:4d:93:
                    16:5c:d8:42:29:03:15:22:ba:f9:e8:ee:b0:ff:06:
                    f8:d4:13:d2:ca:9e:57:c6:aa:21:5a:77:95:3c:5b:
                    d8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DA:12:76:17:B0:F6:B1:E0:57:63:E6:04:BF:DA:2E:F0:90:80:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8ba81a6c-ff89-3c12-950e-cf712665914b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:69:de:06:a9:9d:95:12:42:2d:96:69:6a:11:ec:a2:06:1d:
         77:f0:e0:da:85:0b:c5:5b:d5:ac:55:41:50:bd:10:82:bb:4a:
         c4:dd:2a:a4:3f:13:5f:92:57:c7:6b:72:36:f9:9a:db:17:20:
         30:f1:c5:4b:ee:87:ae:ae:68:58:65:6d:7f:de:ad:10:4c:3a:
         fc:04:7d:8d:8a:1a:e7:e8:32:76:24:4b:2a:d9:bc:4b:74:96:
         41:e1:4b:aa:0a:b3:b9:23:63:0f:a4:5e:fa:9d:1a:77:82:60:
         b8:be:d6:a6:74:b9:cd:b6:b3:54:c8:f4:10:51:ba:01:19:30:
         06:89:bc:eb:e6:ec:5e:e7:52:ac:8a:7d:7f:53:71:73:28:bf:
         dc:b5:1e:9b:cf:28:17:6e:05:4b:19:95:47:91:15:41:ae:57:
         64:e1:ba:2f:35:02:36:1a:2d:89:34:cf:10:26:4b:65:34:e6:
         7c:79:fc:71:98:6d:dc:41:d1:24:b9:63:58:4c:b4:19:44:90:
         2d:8a:6e:6b:93:a2:f0:66:ed:f6:1b:f9:91:03:98:e7:a2:8a:
         2e:bc:fb:30:9d:a8:bf:fa:e8:db:be:f9:c4:b5:9e:d1:c6:5f:
         04:5a:85:d2:a3:26:5a:44:6e:db:88:21:84:02:c7:08:a5:b1:
         dc:a8:b7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:46:00 2025 by rpki-client