Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f493eac0-b8d0-35b6-8005-d7e7ed336423.roa
File:                     f493eac0-b8d0-35b6-8005-d7e7ed336423.roa (raw, json)
Hash identifier:          MXCj2LI/+9eOU+1SiW2NbzGgO5zFN0jh4Z1UiEKwz/U=
Subject key identifier:   70:D9:54:46:D8:63:A3:79:BF:AD:FD:3F:D9:13:9E:CF:79:F2:AC:41
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584B2D37698B04E2923943CC9840
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f493eac0-b8d0-35b6-8005-d7e7ed336423.roa
Signing time:             Sat 13 Sep 2025 03:10:43 +0000
ROA not before:           Sat 13 Sep 2025 03:10:43 +0000
ROA not after:            Fri 12 Dec 2025 04:10:43 +0000
asID:                     64200
IP address blocks:        69.30.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2d:37:69:8b:04:e2:92:39:43:cc:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Sep 13 03:10:43 2025 GMT
            Not After : Dec 12 04:10:43 2025 GMT
        Subject: CN=b2bebdaf-cd19-47d7-86c2-df3a82809c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:40:ae:5e:c1:6e:dc:b9:07:ef:10:4d:ed:
                    9c:69:c5:96:40:76:46:a2:3a:13:c7:84:7f:08:1b:
                    d1:65:3c:cb:5f:1d:15:79:8c:b2:3c:a8:a3:cb:1d:
                    15:69:8e:32:b0:cb:78:9f:78:51:c6:dc:ec:17:49:
                    b0:69:ee:6c:3b:59:57:dd:69:d1:e7:82:40:24:3c:
                    b5:ee:44:20:a0:7c:a7:db:08:e1:80:89:cc:6f:14:
                    15:b3:cb:00:26:1c:3f:0e:6b:89:d4:84:2d:1e:43:
                    8b:7a:79:59:7b:9d:78:27:33:ac:f5:f4:1e:95:46:
                    87:64:e5:77:d6:cd:d2:84:aa:61:45:84:ae:02:c5:
                    91:55:6c:7a:e3:62:d1:54:4f:52:0f:e4:47:a9:a0:
                    4f:38:c4:ef:2c:0e:c1:bf:90:57:48:ce:ef:fd:c9:
                    33:66:ab:be:51:37:a1:88:d2:4c:e1:a7:90:df:54:
                    54:2d:61:66:72:e4:7c:45:b9:d1:71:46:62:9a:38:
                    3f:43:82:6c:0e:8d:7e:6e:42:48:65:d4:a9:58:a7:
                    b1:3a:8a:b4:f4:3d:9b:30:09:7d:a9:1d:66:0f:14:
                    0c:78:6b:40:f3:cf:b4:41:fb:46:c8:2e:86:ff:2e:
                    f9:fa:51:e4:c5:58:7b:a5:6c:04:77:17:2d:f1:8b:
                    bf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D9:54:46:D8:63:A3:79:BF:AD:FD:3F:D9:13:9E:CF:79:F2:AC:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f493eac0-b8d0-35b6-8005-d7e7ed336423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.30.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:55:26:42:be:26:60:68:33:f6:38:98:05:12:bb:24:96:c0:
         e0:b5:90:25:b4:f4:7d:35:f3:dc:0d:84:66:56:af:34:8a:53:
         fd:45:52:66:3b:93:43:55:6f:75:26:0c:08:12:cb:ff:b8:6d:
         1b:d9:29:7b:84:f5:c7:64:58:0f:9a:ee:23:6f:28:e1:12:6a:
         31:96:ef:a9:fe:d5:ec:c6:45:ea:dd:97:04:9f:10:85:64:aa:
         09:58:03:c3:07:f5:63:0d:ed:b2:b5:91:68:04:0d:62:00:ed:
         55:d9:11:63:c7:2b:dc:8c:6d:93:9f:8c:3c:65:99:00:bb:a1:
         ac:9f:21:53:37:77:02:d6:6a:7c:68:2f:1d:0d:21:ea:32:a4:
         1c:ad:5f:17:be:1a:54:3e:e5:5f:81:d3:2f:f7:78:e8:4f:3e:
         79:c5:9a:f9:e9:27:7a:c6:97:df:e8:50:fc:77:9e:f8:df:94:
         9a:6d:ad:df:3d:86:c2:cb:17:60:f1:17:a1:5c:1b:3a:fe:a6:
         6a:46:02:cb:ae:e6:e3:b5:8b:00:fc:7d:0d:d6:23:b7:43:81:
         6e:ab:69:d4:a1:ad:f4:a5:7c:a8:0c:b4:1c:aa:19:f6:90:ec:
         34:c2:59:31:41:91:1a:79:a3:67:4d:f9:6e:71:dc:4f:30:6f:
         b6:5a:6b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:54:11 2025 by rpki-client