Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bb8ad8c-abd0-3ad6-baab-cebcd5f18f70.roa
File:                     2bb8ad8c-abd0-3ad6-baab-cebcd5f18f70.roa (raw, json)
Hash identifier:          rB5u16011vq7c8RsBbGFJKsoOLFFhlgyKc+u5aQKfH8=
Subject key identifier:   FC:B9:C8:42:C6:EC:1B:C0:40:32:C9:F9:AD:78:9A:44:16:21:18:20
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848D641125BEF38EAC0084B6F80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bb8ad8c-abd0-3ad6-baab-cebcd5f18f70.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        69.58.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:12:5b:ef:38:ea:c0:08:4b:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=a9cd8d8e-f72b-4d9d-be43-aac3a5911628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:87:1a:4c:08:61:9b:18:f7:88:5f:a7:38:9b:
                    e6:ca:0b:1b:63:77:cc:3b:92:b4:0e:f8:b1:bc:49:
                    10:08:b4:e3:6e:3d:fb:cd:5c:6e:93:4d:23:1e:c6:
                    05:81:db:71:cf:cf:5a:4d:ff:7a:33:d1:21:2c:e7:
                    4b:2d:0c:db:91:df:aa:f6:78:e5:64:87:06:1f:26:
                    b0:95:67:83:e3:96:5c:e4:37:00:51:31:9b:3a:d9:
                    cc:ed:d8:dd:1b:9f:47:fa:49:4e:98:6e:b0:3e:f1:
                    96:02:8f:24:64:29:59:64:e5:46:b8:3e:04:65:65:
                    ff:f2:c5:e0:5f:fa:a9:47:1c:33:0e:a0:e8:05:18:
                    5b:66:10:11:a7:55:94:7f:ce:47:dc:89:30:03:74:
                    d5:65:65:80:5a:3b:a8:e2:c8:58:c5:f2:78:06:f3:
                    a4:97:c9:9c:42:f1:56:2d:48:a6:55:c3:db:9b:6d:
                    b1:54:93:47:d0:55:02:ec:00:97:0b:d8:cc:31:60:
                    f5:62:0d:0c:16:79:fc:45:b4:14:f6:9c:9a:bd:08:
                    52:54:42:9b:c7:44:90:55:fe:bb:66:57:59:0d:d7:
                    96:e5:ca:57:dd:77:a7:04:96:d4:18:b9:a5:44:3d:
                    0d:a7:ba:4c:73:8e:4e:f0:3d:53:3a:95:22:31:2c:
                    33:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B9:C8:42:C6:EC:1B:C0:40:32:C9:F9:AD:78:9A:44:16:21:18:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bb8ad8c-abd0-3ad6-baab-cebcd5f18f70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:c8:28:02:95:95:93:b7:44:a5:e7:b4:13:9d:5d:4d:dc:cd:
         bc:1c:91:60:8d:af:b9:71:ec:2c:81:46:89:34:df:b2:d8:ca:
         50:41:ca:c5:5f:64:ce:9e:5e:45:cf:c9:7e:a5:94:b0:97:f0:
         5c:89:12:74:d9:dc:21:3d:e5:f9:1d:a6:76:68:56:10:a2:6b:
         05:97:e3:b6:b5:d5:d3:2c:9e:40:76:fc:ab:52:75:7b:21:87:
         7f:ea:81:2e:ca:8a:6b:6c:96:a1:a0:21:b8:36:a4:03:69:aa:
         09:e0:d7:59:fd:f7:1a:3f:8d:dd:ad:f7:1b:eb:ca:87:ca:e5:
         8c:c2:e5:6c:5c:4d:3d:8a:9c:b0:27:02:4b:85:b3:ed:8b:6d:
         c3:d3:03:47:60:00:f4:10:a0:f5:6b:3e:39:46:5a:29:09:ca:
         05:e6:15:68:e8:ec:13:2a:74:30:01:c2:8e:ee:59:41:f2:ad:
         c0:9d:ec:45:90:15:08:13:9d:98:94:74:9f:bb:bb:f3:de:47:
         b7:63:c4:da:74:91:de:d5:f6:ec:2b:3a:23:0b:a9:58:09:20:
         84:fe:67:2e:98:62:34:f1:7a:1e:3a:b9:b9:b1:c8:8f:e7:2c:
         a7:55:97:39:37:69:f5:a2:69:bd:3e:b8:ca:7c:96:fd:a8:26:
         60:a2:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:39:13 2025 by rpki-client