Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/787bccb6-3826-3e00-8b03-f7cb54c0ee2e.roa
File:                     787bccb6-3826-3e00-8b03-f7cb54c0ee2e.roa (raw, json)
Hash identifier:          BUnJ1R+T4XRCU0QVBKx7Nl5WwXQTaB0X6pv6uem0T9Q=
Subject key identifier:   2A:79:8B:51:7D:8C:9B:FF:E5:BC:AD:60:90:E4:E5:A9:B6:F3:C0:2A
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F43285849489949261F371AE605C3E500
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/787bccb6-3826-3e00-8b03-f7cb54c0ee2e.roa
Signing time:             Sun 23 Mar 2025 13:00:52 +0000
ROA not before:           Sun 23 Mar 2025 13:00:52 +0000
ROA not after:            Sat 21 Jun 2025 13:00:52 +0000
asID:                     63023
IP address blocks:        69.42.210.0/23 maxlen: 24
                          186.190.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:48:99:49:26:1f:37:1a:e6:05:c3:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Mar 23 13:00:52 2025 GMT
            Not After : Jun 21 13:00:52 2025 GMT
        Subject: CN=16049569-acf5-4c0e-91ae-7a4ff1f15f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:77:7c:a5:f9:c6:be:f5:d9:41:3c:d0:e2:
                    ae:3d:76:be:40:d9:9f:06:29:2a:48:48:b2:e0:5f:
                    b7:c7:18:3a:9b:aa:42:74:f5:d7:e9:39:7b:09:d0:
                    7d:92:38:c5:b7:5b:dd:f3:4a:2a:b7:a0:69:9e:b3:
                    bf:b0:5e:cb:5f:12:6f:64:f2:62:45:9d:fb:4a:36:
                    6d:91:dc:7d:17:b3:2e:67:e2:19:cb:23:92:5b:20:
                    84:4e:f2:c7:72:30:e2:9c:0b:eb:b8:f6:2b:2d:35:
                    b1:3c:20:09:05:b6:4a:39:8b:4b:57:bf:e5:d8:b4:
                    f6:5e:ff:9c:3e:a0:0e:30:53:89:dd:80:9e:94:84:
                    2a:15:ce:c2:f5:e1:12:2f:a0:75:b2:4f:8d:39:c7:
                    d1:3b:1c:4a:b1:60:fd:56:f0:27:29:4b:5a:7c:88:
                    49:d0:12:1b:13:31:8e:a2:c9:af:a9:9d:87:36:b1:
                    cd:08:a3:ca:70:f0:a4:57:3a:4e:ef:67:5a:91:2a:
                    0c:0c:55:c2:ec:0f:75:d7:22:08:35:bd:47:7e:e7:
                    c2:16:a4:8f:39:a2:cd:bd:02:3e:39:b9:dc:8f:f9:
                    2c:1d:de:b1:4c:63:ba:d1:f3:69:f7:82:e5:e0:0f:
                    c8:44:5d:14:d9:2b:8b:54:2f:68:c8:65:d2:65:a0:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:79:8B:51:7D:8C:9B:FF:E5:BC:AD:60:90:E4:E5:A9:B6:F3:C0:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/787bccb6-3826-3e00-8b03-f7cb54c0ee2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.210.0/23
                  186.190.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a4:41:98:b9:49:b8:98:15:29:fd:7a:30:70:08:6a:c3:0d:
         a2:93:f1:b1:0f:6c:6c:31:35:54:4e:4d:5b:00:29:68:c4:9f:
         96:65:d4:10:02:d8:53:0d:50:e2:cb:56:28:da:97:74:cc:43:
         59:48:19:6e:a1:cc:a1:76:64:fd:ee:57:4c:35:70:70:47:43:
         ec:29:a4:36:24:f9:f0:d8:86:02:fe:ea:be:f5:5c:95:fd:af:
         2c:6b:86:23:95:df:f4:6f:5b:2f:cc:d5:c6:47:0c:df:99:57:
         a4:76:92:e3:07:a4:78:6c:db:67:b1:43:73:76:dd:83:f9:d7:
         ec:97:3c:d4:2f:e7:d3:a8:e4:c4:d1:93:f2:4d:87:44:74:27:
         21:11:31:41:3c:45:c7:1e:25:e1:c6:12:cb:ab:9f:74:a2:61:
         65:08:59:90:88:3e:e8:a6:4b:a6:ac:4e:32:3b:c3:f8:af:45:
         85:cd:bb:87:72:0d:9c:b1:ee:50:a9:43:d3:75:72:a5:f2:31:
         da:9f:14:07:95:1a:c8:be:08:bc:d5:f1:a7:51:11:1f:06:f1:
         fe:dd:5a:ae:a6:81:ab:58:a4:e6:74:8a:2d:82:7d:ed:49:56:
         4a:94:34:88:4a:59:0c:d1:de:9c:03:34:f2:4d:b5:3b:70:d4:
         a1:58:3a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:28:17 2025 by rpki-client