Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/20e1bdbe-6cd6-3abd-bf9c-c3c30d632928.roa
File:                     20e1bdbe-6cd6-3abd-bf9c-c3c30d632928.roa (raw, json)
Hash identifier:          5M5mhmy8P2jR8NzqMQK3iffqvcCGaibJLinfgq8UDtk=
Subject key identifier:   04:4E:7E:B8:B4:70:7F:B0:98:93:C5:77:C1:14:98:16:41:31:C9:4A
Certificate issuer:       /CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
Certificate serial:       010D0C9F4328584A0C055AA3ABDEFDCF36EF9140
Authority key identifier: CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/20e1bdbe-6cd6-3abd-bf9c-c3c30d632928.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     18780
IP address blocks:        69.55.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:5a:a3:ab:de:fd:cf:36:ef:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=f38451e7-a7dc-4da8-828d-c5d81ab3a379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:af:35:32:9d:53:9f:1b:76:b8:af:cc:be:
                    ab:2b:28:b4:63:19:44:1e:7d:46:dd:64:bd:fe:68:
                    cd:44:c3:6b:51:f7:e2:0d:f6:dd:90:e3:7e:7c:01:
                    c5:ac:8d:fc:cb:22:49:cf:49:9d:f4:e8:26:d4:e9:
                    83:4f:98:ae:69:c9:17:81:c2:8c:f0:74:9a:b1:fe:
                    84:63:ca:7e:b0:d4:24:89:db:f9:2b:a4:8e:2a:e9:
                    6c:37:3e:c6:e9:61:18:77:66:71:6a:78:a8:af:86:
                    a0:6c:8f:c5:2c:a4:e4:88:55:71:dd:f6:18:6e:6b:
                    d4:7b:61:37:22:98:eb:93:16:a3:e0:85:22:57:d3:
                    41:e5:e3:39:90:ef:d1:7f:b6:3a:be:ad:af:57:74:
                    ed:fe:b1:f0:0e:4b:a4:b9:b3:87:93:6e:9b:3f:01:
                    cf:a2:c1:b7:e9:31:10:ee:07:54:32:6e:6c:f2:78:
                    83:ef:ad:81:01:74:11:b4:2d:c8:8e:68:f6:4d:eb:
                    39:e3:25:b3:09:df:6f:32:af:fa:94:0f:d2:35:9f:
                    70:8e:cb:36:95:cb:fa:71:22:1b:a1:85:2a:e2:b1:
                    28:59:ed:a1:cb:5f:74:71:68:3c:27:28:c8:91:c8:
                    ab:f8:c9:29:28:dd:10:62:fc:95:79:c7:0a:7f:50:
                    60:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4E:7E:B8:B4:70:7F:B0:98:93:C5:77:C1:14:98:16:41:31:C9:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/20e1bdbe-6cd6-3abd-bf9c-c3c30d632928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl

            X509v3 Authority Key Identifier:
                keyid:CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a0:6e:21:25:05:ba:49:cb:56:db:f0:8f:af:bd:3f:55:29:
         1c:f0:25:e3:c9:ae:e2:6c:84:50:bd:8c:84:48:76:1e:33:96:
         0c:b4:ac:7c:48:84:90:b1:0e:09:cd:dd:c3:0e:b7:a1:d5:07:
         0c:bd:c0:77:3e:90:43:8c:14:98:96:05:6f:d3:09:56:38:31:
         7a:08:14:88:2d:bd:88:05:f7:6b:f5:6a:01:6d:e9:eb:73:d1:
         f9:61:f0:ce:d1:28:5e:4f:2e:80:ca:bf:d9:aa:58:fd:62:30:
         24:fb:57:0e:a3:b7:e4:44:ca:c0:9c:2d:19:22:f2:1f:7d:46:
         3b:bc:71:7c:00:6c:6e:81:93:a9:bb:e0:19:90:0a:cf:20:8d:
         b0:92:2d:29:54:cd:ce:76:b0:9a:a2:82:3a:78:56:75:62:e2:
         5a:63:c1:3f:1f:f4:b0:88:5b:26:bb:5f:1b:e4:9a:92:d5:9b:
         4b:e2:69:91:b4:bd:1d:39:7f:2a:51:2e:b6:f3:3a:17:36:40:
         d8:af:ee:93:c7:cd:23:24:73:d3:1a:cf:67:98:06:25:f5:17:
         af:16:c1:6c:bd:45:7a:a5:96:94:30:9d:f4:43:8f:52:84:75:
         c3:0a:da:81:10:2f:34:95:0d:0f:7f:c8:0a:9d:eb:df:8a:18:
         dc:20:2f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:11:40 2025 by rpki-client