Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa
File:                     1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa (raw, json)
Hash identifier:          jFDwjdo0h+flBEl17vjDAIWTLBIh/E4OvCpPJXbgFqE=
Subject key identifier:   B6:AD:17:40:DD:85:D1:A2:1E:51:64:12:2D:1B:1E:11:C3:05:98:7A
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F4328584B0746C2B3744BDC9FAFF54780
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     6954
IP address blocks:        69.4.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c2:b3:74:4b:dc:9f:af:f5:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=61275ecb-cda1-415e-b2a8-904b1272227d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:6f:03:9a:1e:7c:6e:fd:ad:4b:67:5d:ab:
                    93:53:3e:91:5f:2f:be:43:f5:2d:f7:6c:01:0f:72:
                    16:c8:a8:e9:04:5a:b0:bd:cd:7f:4b:bf:b9:39:36:
                    e4:20:59:86:7a:a2:a4:9c:8b:60:ff:07:b9:81:36:
                    21:9a:9f:bb:87:ed:b7:f8:ca:f7:e3:6d:5e:94:85:
                    5b:fc:ef:79:89:55:dd:b0:a2:95:a0:25:f1:6a:a8:
                    77:35:b7:b3:b9:d8:5f:a2:7c:10:6c:bf:51:a3:6d:
                    00:e7:c1:11:d5:4f:74:d5:75:d5:4a:46:4f:58:89:
                    24:de:c4:5a:98:cc:04:48:0b:90:f5:9c:98:2d:46:
                    a1:47:34:9d:0c:f5:a9:10:41:b4:16:7c:fb:dd:d9:
                    7b:54:e6:a9:a9:21:09:d4:52:45:24:a8:be:62:be:
                    24:6c:5a:fa:f3:1f:1f:8a:13:af:ad:39:ba:fa:e7:
                    22:9c:f5:c4:3e:54:5c:b3:10:fb:2d:e2:88:44:af:
                    8f:4b:80:77:8b:77:e4:f6:5a:c2:5d:18:1f:ca:b1:
                    e5:43:db:53:c5:34:70:4f:b3:89:94:b9:63:71:91:
                    2a:38:c6:9c:4d:5c:23:ee:92:b1:5f:9b:0f:b2:4e:
                    62:3f:a3:fd:70:30:c1:c7:a0:fd:74:cd:c7:7f:30:
                    77:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AD:17:40:DD:85:D1:A2:1E:51:64:12:2D:1B:1E:11:C3:05:98:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:fe:91:a6:cb:91:15:07:8d:1c:05:ff:e9:04:f0:84:cd:04:
         b2:60:75:be:e4:63:fe:09:21:7f:cd:7f:f0:79:89:88:fa:9e:
         97:04:33:a0:b3:ee:4f:fe:19:38:1c:c0:a2:f9:ea:48:00:aa:
         dd:43:b3:b8:12:87:61:fe:be:7e:f9:03:0a:94:84:90:49:df:
         e7:27:5e:16:c9:fe:01:28:86:d7:6c:af:31:de:bb:06:b1:bb:
         cc:c3:4b:a5:62:37:81:30:9b:76:3f:e9:c9:f1:22:ea:80:c0:
         dd:53:27:16:c8:55:59:75:99:e2:ac:8e:4a:a5:02:28:9b:cf:
         6f:70:99:10:c9:2c:b6:ab:e3:25:bf:80:04:51:b8:f3:43:ac:
         49:af:e0:80:0e:aa:9f:89:48:2f:d1:fb:3f:af:a1:59:90:8f:
         ce:49:c6:78:af:d7:79:eb:13:42:11:1d:4e:bb:6a:e2:7e:d6:
         6c:79:f0:c7:82:6c:e3:42:c8:5a:28:65:a4:ea:91:73:3b:68:
         cc:24:8d:85:6f:e1:f8:90:51:a1:5b:97:d8:5f:2b:1c:1b:89:
         d6:09:d4:26:81:d4:e8:85:2b:75:56:20:e0:69:17:ca:a4:86:
         75:ee:9d:55:e8:c6:ec:de:80:12:7b:b9:ee:96:fa:d4:2d:d1:
         31:f9:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 01:57:51 2025 by rpki-client