Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/aedfd912-3486-3f56-bdf5-f6296f3312f7.roa
File:                     aedfd912-3486-3f56-bdf5-f6296f3312f7.roa (raw, json)
Hash identifier:          OVmUYUsKgt6dxi7XmodV9mxKB7UX9WFHhgWE928fJG8=
Subject key identifier:   CD:B5:AD:23:37:EA:3B:22:BF:AB:89:F4:A5:00:3B:27:9F:78:08:1F
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848F926AF6DECD00E67986B5D80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/aedfd912-3486-3f56-bdf5-f6296f3312f7.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     25899
IP address blocks:        69.1.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:af:6d:ec:d0:0e:67:98:6b:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=72b62d7e-7d43-4642-ac85-473bb2c8be04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c9:b6:f4:01:3b:30:85:08:b2:3f:62:3b:31:
                    50:aa:6e:d7:5f:7a:95:bf:81:dd:64:8e:cb:49:90:
                    e2:36:a4:24:06:5f:4e:ae:39:1f:13:10:bc:40:82:
                    fe:fe:5e:39:d0:c3:46:ae:5e:8e:9c:e3:8c:f8:89:
                    f7:46:02:f0:90:1f:c9:7c:72:86:b1:05:90:61:b4:
                    08:98:15:d2:0f:cb:e3:2c:75:01:7b:1f:8b:00:74:
                    54:1c:9c:1d:ed:89:94:6f:a6:fc:fa:9c:f9:2b:a4:
                    86:5a:83:8d:9f:c8:81:1e:ab:ad:39:8e:f9:0e:3d:
                    0d:30:41:92:14:18:b2:70:7a:61:14:b2:c0:d4:be:
                    e0:60:78:e8:39:ea:03:74:d8:79:15:76:41:f2:39:
                    79:af:ea:e0:5b:5e:5b:72:e8:85:71:f0:7f:5d:67:
                    ea:fd:c2:ac:29:97:75:59:eb:54:36:36:5f:b6:5e:
                    0c:c9:cf:75:59:38:76:17:2d:9a:91:4b:19:0d:96:
                    07:a0:d9:2a:ed:09:01:e3:33:be:d3:13:b4:e4:58:
                    9c:64:a8:d2:17:48:1e:29:02:58:ff:60:7e:43:52:
                    4c:81:fb:23:ac:b7:fe:9e:82:23:e4:26:44:9b:3b:
                    27:88:b5:1e:82:80:d4:45:3d:74:35:7d:9a:4a:a6:
                    f6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B5:AD:23:37:EA:3B:22:BF:AB:89:F4:A5:00:3B:27:9F:78:08:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/aedfd912-3486-3f56-bdf5-f6296f3312f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:42:de:ad:a3:8a:22:5f:ce:9e:fa:01:ae:a9:a7:6d:cc:56:
         41:2f:78:c6:16:08:fd:ea:54:b6:44:32:af:60:09:6c:6e:ad:
         83:46:18:ca:59:3c:25:c2:fb:79:71:1f:77:d2:41:26:0a:4c:
         ad:0a:d9:1a:cc:b2:98:40:f8:da:01:ba:5e:fe:69:d6:06:e6:
         fd:19:aa:5d:54:2d:9e:87:6c:5b:07:40:19:52:f9:cf:41:cf:
         cf:e7:4a:c5:aa:f5:45:90:a1:05:c5:c4:d1:06:d2:ac:84:c7:
         57:4f:12:a1:8b:39:ff:a0:d6:eb:18:c9:b6:18:9c:d1:c7:8e:
         f1:c3:b0:7d:15:6b:d4:7d:37:7b:bb:30:4f:2c:e7:fe:6f:26:
         33:0d:e8:37:9e:0b:4b:b4:5f:b2:0e:4e:d7:8b:c0:78:57:c3:
         b1:ed:50:e0:b4:77:32:c4:a0:53:0a:4b:bd:04:56:57:4f:ca:
         e3:89:b3:5f:4e:22:0f:9b:33:cd:22:1b:3f:a6:d3:46:88:f4:
         13:6a:6d:5a:1e:42:68:6c:35:31:63:b0:24:ec:0e:4c:67:12:
         45:63:37:86:c6:fc:17:83:aa:33:45:51:f4:82:fd:e3:79:73:
         6e:ed:48:78:87:99:6d:aa:b8:6d:b8:c4:c2:22:cc:22:4e:29:
         0b:7a:50:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:10:52 2025 by rpki-client