Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/e5b6a421-22e6-3b7b-846f-986179182db3.roa
File:                     e5b6a421-22e6-3b7b-846f-986179182db3.roa (raw, json)
Hash identifier:          WjK3qhzK4lxU8jMRwKxFvXr5xdJ3dSDJOwaRtBCr0bo=
Subject key identifier:   A8:AA:43:48:6C:57:1B:0E:97:A1:C5:D2:49:1F:88:2D:97:7B:B9:2C
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584B0CDC153EBF46F86CF04FD580
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/e5b6a421-22e6-3b7b-846f-986179182db3.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     20016
IP address blocks:        69.30.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:15:3e:bf:46:f8:6c:f0:4f:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=02ebb035-58d8-494c-a7b9-5c529fbdec8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:37:5c:5e:0a:21:80:9e:d5:e3:33:bf:8d:
                    76:30:13:79:3a:04:92:6b:81:55:43:61:ac:06:8f:
                    9e:67:20:74:4b:3c:2c:43:a3:3c:bb:31:d2:d0:8b:
                    16:ee:4f:88:e5:da:66:46:52:0d:f4:0b:04:75:7f:
                    02:d8:63:42:bd:b0:21:0a:88:98:f5:14:ff:6b:fd:
                    cc:73:b5:ec:e2:e9:c8:83:55:51:ae:bb:70:32:fb:
                    8e:a6:a1:0d:d2:08:6a:54:f1:2a:30:66:59:27:8a:
                    8e:0d:6b:3b:d9:a9:dc:5b:6e:40:4f:c2:c1:74:21:
                    93:cf:8c:08:ed:9f:de:08:af:64:d2:d4:ba:eb:ac:
                    e9:d6:7b:72:db:2e:0c:6b:e7:6d:03:af:42:b6:c3:
                    62:06:57:c4:f6:e8:87:12:74:8a:d3:82:44:cf:60:
                    f1:e5:87:ef:0f:2d:5c:30:e4:8e:4c:80:ef:cb:02:
                    fb:a3:2b:04:ec:0f:ec:af:4e:fb:31:b2:79:43:a0:
                    10:fa:2b:42:c0:ad:a1:2a:e4:d6:db:69:90:8b:a4:
                    41:72:3a:60:4c:dd:ec:29:df:27:60:b8:eb:cd:a6:
                    dc:45:aa:a2:be:39:e6:f5:e8:b3:cc:4b:a6:87:65:
                    bd:be:ae:00:57:fe:dd:0e:f2:b5:2d:ec:2b:4a:67:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AA:43:48:6C:57:1B:0E:97:A1:C5:D2:49:1F:88:2D:97:7B:B9:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/e5b6a421-22e6-3b7b-846f-986179182db3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.30.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:23:3d:bd:35:24:27:c4:2e:08:42:b3:f7:5d:ef:fe:be:f8:
         db:e3:90:49:1d:99:e2:e1:63:3f:1d:e9:64:48:d7:30:4a:28:
         ec:ea:79:75:00:03:b2:bf:01:3e:b2:54:bb:e8:eb:54:b1:83:
         4c:d7:fe:a9:d9:c6:75:f9:f7:5f:08:4d:fb:a5:b3:f8:4b:b5:
         a1:d8:e9:ac:b9:e8:1b:07:41:7c:68:11:34:70:1c:65:b0:ec:
         9e:b5:da:0d:f7:22:52:19:b3:7f:d4:78:74:0a:93:1d:75:fc:
         c5:f5:89:98:3b:c6:c0:36:24:20:5d:e1:62:c6:ca:87:6e:92:
         d8:af:49:6c:68:d4:5a:d2:84:a0:6e:ad:cd:bd:37:72:41:9a:
         1f:de:ed:8b:ef:0b:cc:cf:b4:f3:6d:3f:58:92:65:d8:24:9e:
         45:50:9c:58:4a:d7:e1:4d:ab:ac:d0:24:1f:0d:74:c2:a0:31:
         ea:fa:d4:b4:44:b6:de:51:95:eb:11:fe:64:e5:57:eb:08:51:
         c5:66:1b:53:37:13:60:36:94:12:0b:18:88:c0:dd:e3:08:09:
         79:a2:fb:ce:20:b9:6f:51:a8:9a:01:4c:75:f6:7c:5b:12:c1:
         c0:7a:59:e6:ba:9d:14:23:3c:06:c7:c3:01:af:91:c9:11:38:
         b1:2a:f3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 22:51:49 2025 by rpki-client