Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/09d2f343-ab41-3977-b59f-c0d921d8e7d0.roa
File:                     09d2f343-ab41-3977-b59f-c0d921d8e7d0.roa (raw, json)
Hash identifier:          2PU6R5Qm4TwaWvYM1stqK4uqhxgMks6UlUDlzSwjr20=
Subject key identifier:   72:04:CC:DA:11:A3:11:C8:FA:AD:C4:FA:83:79:80:43:41:1D:C0:0B
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F43285848A73FF4DE717E44C3A76E488D
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/09d2f343-ab41-3977-b59f-c0d921d8e7d0.roa
Signing time:             Fri 24 Jan 2025 17:55:45 +0000
ROA not before:           Fri 24 Jan 2025 17:55:45 +0000
ROA not after:            Thu 24 Apr 2025 16:55:45 +0000
asID:                     7018
IP address blocks:        69.176.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a7:3f:f4:de:71:7e:44:c3:a7:6e:48:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jan 24 17:55:45 2025 GMT
            Not After : Apr 24 16:55:45 2025 GMT
        Subject: CN=e606f35b-2be3-4a6f-baaf-f7179ba2eb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:11:54:88:82:00:e8:17:ee:ef:25:91:6a:77:
                    42:1a:de:cf:db:44:3a:d8:91:7a:7d:5b:44:fd:b1:
                    f9:87:1b:26:37:16:c1:38:19:87:12:d8:6f:2c:b9:
                    4d:81:d1:aa:d0:28:7a:74:4d:34:a6:58:18:7c:71:
                    b5:59:ea:e5:29:21:e8:7e:97:d2:0c:3b:f9:3e:a9:
                    ed:99:52:94:b7:da:63:b0:2e:90:4a:24:65:8a:ea:
                    2d:5b:65:4c:d0:7c:b5:59:a1:f1:38:ae:ba:4c:7f:
                    46:09:ac:af:1c:06:ec:29:41:f2:13:a7:37:3d:b2:
                    f3:6d:dd:64:7f:cd:a2:bf:f7:03:97:ba:29:e8:b2:
                    61:08:36:fd:f1:0f:f4:5f:de:9f:e5:3e:f4:ab:59:
                    49:eb:26:c0:82:1f:08:04:0e:79:b5:4c:23:93:57:
                    0d:44:d9:30:1d:b3:5e:7f:19:55:42:6c:a3:a6:a1:
                    44:89:4b:1c:5f:c8:58:be:01:89:97:7a:d3:8e:5e:
                    0c:ad:58:d6:ab:c3:01:93:cf:ca:92:7d:09:6c:fe:
                    5b:69:de:1e:41:0f:59:41:bc:24:ea:c8:78:42:df:
                    05:10:ea:07:d5:1e:71:32:07:8b:c8:b8:d9:d3:06:
                    e3:6e:ad:0e:ae:cf:d0:24:ae:64:24:d8:ff:6d:1c:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:04:CC:DA:11:A3:11:C8:FA:AD:C4:FA:83:79:80:43:41:1D:C0:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/09d2f343-ab41-3977-b59f-c0d921d8e7d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a6:23:46:10:25:47:8b:8a:76:bc:0c:a8:3e:d6:f4:ab:d7:
         35:5e:11:b8:4d:0e:58:56:67:5e:b8:06:2d:27:f7:ea:4c:7a:
         f9:45:62:ef:22:55:ea:c5:0e:a4:3f:6a:43:9f:b7:0c:61:7d:
         ab:6d:09:2c:19:19:f6:f9:22:08:15:ff:19:54:a8:8d:57:63:
         20:f2:41:09:df:27:0c:86:40:f6:30:04:b7:15:cd:cb:87:9e:
         8a:cf:7f:31:f5:d3:16:db:2a:66:f1:85:3a:8e:91:ab:3d:b7:
         45:78:85:77:d2:68:7f:e5:f6:5f:73:ad:0f:9e:f0:07:27:2a:
         2f:5a:b2:46:14:be:46:b4:65:52:2c:a7:93:c8:0a:85:22:f8:
         2e:25:a5:68:b7:1c:ab:08:cd:5e:5e:ba:ca:86:d9:32:b2:c4:
         fc:45:5c:ab:75:d5:9c:1a:20:e2:8b:e1:85:f0:a3:48:b4:a4:
         85:ba:1f:86:b3:9f:b5:79:94:b6:31:9b:37:f8:7e:6a:1b:0b:
         67:b7:86:b6:bd:6b:51:fd:dd:26:fd:85:08:0e:dd:9b:7d:99:
         16:37:92:ff:b6:33:be:ed:7f:bc:c1:97:a4:ea:89:5a:d0:67:
         a4:41:60:1c:6d:e9:48:c5:e4:4f:63:24:0a:f3:43:17:ea:cd:
         5d:e8:3d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:42 2025 by rpki-client