Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1902f449-90e9-3792-aee1-5286b0e5e930.roa
File:                     1902f449-90e9-3792-aee1-5286b0e5e930.roa (raw, json)
Hash identifier:          12atAVJ3/i1OkIwVoJW3mGQmrT2IcPiiSHdn9SNzP+A=
Subject key identifier:   62:56:96:47:D9:9A:02:6C:87:4B:D6:B8:AD:7B:A9:10:AB:0B:74:E1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D12280033E3BD77B427620
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1902f449-90e9-3792-aee1-5286b0e5e930.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     7843
IP address blocks:        69.134.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:22:80:03:3e:3b:d7:7b:42:76:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=0378f2b6-1b3f-41b1-9192-58061bec0cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:34:d2:20:3a:8f:a1:ff:f8:71:f7:56:91:
                    49:1b:65:f6:52:f5:f7:b0:ae:b4:66:80:1d:b9:e0:
                    f2:7f:f8:ef:cf:40:36:42:d2:95:3e:c9:07:24:7f:
                    71:ee:1f:3f:e9:12:e2:34:9f:09:83:d8:86:02:40:
                    c5:2a:c4:a6:5d:2c:d1:9a:b5:eb:c4:55:7f:1f:66:
                    83:f1:60:81:fc:ba:7a:bf:9a:53:62:a9:fd:5e:61:
                    1a:36:1b:61:de:77:c6:4f:33:16:ad:28:f0:33:98:
                    fa:c2:2e:51:ea:e7:1c:5b:ec:ab:1e:53:f6:7e:f2:
                    c0:db:c5:f0:89:ee:0e:ff:0e:e4:f7:a2:08:83:81:
                    6d:d5:7d:9c:58:bd:8b:71:43:60:1d:bc:ac:fa:69:
                    28:ec:e1:14:7b:b4:35:95:40:3a:57:6a:e7:6d:10:
                    66:4a:23:06:88:64:e5:98:d7:10:a0:48:e7:1d:ea:
                    13:a6:28:e9:aa:db:d9:ca:84:ea:7a:47:b1:f9:1d:
                    7a:4d:97:0d:75:f0:1e:54:a0:07:cd:55:7f:a9:8b:
                    85:9a:78:16:d4:3a:14:18:29:78:66:f8:16:64:7f:
                    26:8b:2f:da:58:65:4f:7c:39:88:57:14:ea:81:d2:
                    d1:54:7a:44:d6:88:23:98:ff:cf:0a:f6:e5:a9:de:
                    5c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:56:96:47:D9:9A:02:6C:87:4B:D6:B8:AD:7B:A9:10:AB:0B:74:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1902f449-90e9-3792-aee1-5286b0e5e930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.134.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:87:ac:61:72:d7:7d:b6:d8:20:e1:8c:ca:bd:96:3a:4c:cc:
         2f:f0:2e:eb:51:ab:fd:59:d6:97:bb:41:3f:82:ba:76:91:a9:
         9a:3f:f7:f4:77:2d:a8:dc:c3:71:0f:a2:d0:4f:a9:b5:8c:3f:
         d3:94:2c:65:43:cf:f7:84:4f:c5:43:94:8d:90:bb:93:b3:ea:
         b9:0a:35:de:30:05:1f:16:a7:64:b3:0e:9a:e1:19:1a:5e:e4:
         fc:e3:fb:04:08:e3:7a:74:11:c0:5b:cf:27:1e:12:36:71:89:
         33:b1:ff:8d:e8:97:f4:44:95:27:20:44:11:93:b8:b7:64:21:
         21:2e:dc:22:87:4a:6d:7f:01:92:0e:54:52:a1:dc:67:83:9a:
         cc:7a:ee:e6:71:27:2a:80:8b:01:20:87:7c:e5:96:42:8a:b0:
         f0:31:d2:52:b2:8e:d5:3f:df:f1:69:5c:d4:c5:7b:97:cc:13:
         1f:95:43:e3:df:be:ba:6a:b2:30:67:2d:e9:e8:87:96:b3:91:
         46:49:49:6a:4e:7c:56:3d:f8:d7:b8:9c:61:c2:bf:07:8b:96:
         19:3d:6e:25:aa:38:2a:fe:9c:bb:30:3c:cb:b7:bf:3a:3b:3c:
         27:13:0f:00:21:27:7a:77:cf:96:5a:03:e2:2a:b2:12:69:07:
         dc:da:ee:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:50 2025 by rpki-client