Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7effcfd6-71db-3402-9537-a1125bf61d60.roa
File:                     7effcfd6-71db-3402-9537-a1125bf61d60.roa (raw, json)
Hash identifier:          23E4dwd5qFM0KI7oHJCTLUluD/jdX8xACVl1brOwMFA=
Subject key identifier:   07:37:22:7A:24:65:1A:02:32:A8:D9:25:2B:27:81:B1:EA:4F:64:B1
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285848CB1653818838892B53620220
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7effcfd6-71db-3402-9537-a1125bf61d60.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     55293
IP address blocks:        69.48.168.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:53:81:88:38:89:2b:53:62:02:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=5042053b-898f-47c0-9d1c-cbf6a36b1273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:63:28:3d:ef:3f:a0:4f:0e:4a:6b:08:ea:f2:
                    66:1b:30:5d:0d:79:8d:0e:44:d0:2a:24:2c:52:75:
                    db:b4:af:d9:80:83:e3:cf:20:dd:55:ec:81:2f:f1:
                    61:3c:1a:f1:df:67:70:85:93:52:fd:d7:55:a5:54:
                    b6:b7:7d:4a:1a:43:9a:0b:1a:a5:0b:32:77:3b:fc:
                    33:12:f8:3e:37:2b:2b:f2:92:f5:89:11:ac:03:15:
                    0e:d5:61:e5:b6:8a:7f:ed:74:34:9e:a7:b5:7b:10:
                    ea:ad:46:13:c4:d4:73:a8:29:eb:1e:ff:c1:5e:0f:
                    1a:75:d6:1e:9a:c7:28:8e:64:88:5e:0f:60:0f:05:
                    2c:fa:57:43:b4:3f:80:16:22:10:19:b4:aa:d0:49:
                    2d:3f:dd:5a:97:86:e3:91:f7:0f:05:e7:10:e4:55:
                    e8:1c:26:0e:1b:04:8d:e1:2e:2b:d5:2a:c7:3b:03:
                    29:24:97:93:1c:e9:04:5a:1b:d4:da:51:c0:0f:24:
                    09:d0:b2:03:72:36:fe:84:6d:40:96:57:31:0d:7d:
                    15:a1:34:cc:1a:4c:70:dc:15:02:6a:9c:77:98:28:
                    87:a1:48:1c:48:89:03:0a:7d:7c:64:bf:32:33:5a:
                    03:4b:e8:5f:b5:68:17:f7:54:3b:73:4f:5c:8f:6a:
                    eb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:37:22:7A:24:65:1A:02:32:A8:D9:25:2B:27:81:B1:EA:4F:64:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7effcfd6-71db-3402-9537-a1125bf61d60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:4a:13:46:9d:08:59:6d:3d:dd:71:d9:63:04:a1:fa:cc:57:
         99:bc:b0:55:4b:c8:4f:0d:2a:b5:7f:5a:00:25:1e:d4:31:5f:
         d5:57:30:58:22:52:a1:43:62:80:1f:9f:43:5b:0f:e3:c6:93:
         39:d6:1f:55:7f:a2:a4:e8:c5:7d:28:3d:58:2f:2b:93:99:b0:
         c2:45:91:b4:62:94:70:a6:39:9f:b4:19:ed:15:03:94:42:11:
         c3:90:d7:b3:ba:dc:a2:4d:65:9a:e0:e7:28:fe:39:c9:79:bb:
         0b:5a:f8:63:c4:d8:d0:4c:70:e1:a3:76:9e:df:b8:ba:67:0b:
         23:ab:a4:77:ab:cb:04:8c:49:ee:50:30:0d:d3:6d:e7:e4:1b:
         4f:92:bd:c6:3c:40:14:31:06:22:0b:48:14:42:91:bb:51:f2:
         2b:dd:cd:0d:d6:02:75:8c:6e:d4:31:22:57:0c:50:0f:5e:a7:
         4b:41:3d:63:6d:10:09:5d:3e:0c:fb:6d:c3:5a:f4:21:ab:18:
         8c:00:6a:4c:4f:3c:1a:54:2d:1f:17:de:b7:ce:d1:28:c3:25:
         ff:7c:42:0f:b4:02:0e:93:a1:b2:fc:d8:15:57:4c:b0:2f:b1:
         5c:5f:64:95:9e:c1:f5:7d:64:b6:a0:27:48:7b:ac:db:19:9c:
         04:45:cd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:11:01 2025 by rpki-client