Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1bb9657e-7b0a-3aef-9e3d-201279eb899b.roa
File:                     1bb9657e-7b0a-3aef-9e3d-201279eb899b.roa (raw, json)
Hash identifier:          EuGkyYLQDD5VEYoMnHTrYI8l3rIoGGgmkd3aL0MEVck=
Subject key identifier:   8C:CB:45:B7:EB:4C:B7:F3:C9:EA:0D:E5:00:02:42:B1:A3:F5:36:92
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F4328584B0746C2D9ED4361BC110A46C0
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1bb9657e-7b0a-3aef-9e3d-201279eb899b.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     6954
IP address blocks:        69.4.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c2:d9:ed:43:61:bc:11:0a:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=9abac329-91d6-4e02-998e-896f62fb99e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:73:7e:fc:aa:a8:6d:73:0a:b4:44:d4:1e:
                    06:57:39:9c:82:8c:a1:e9:64:f6:ec:5c:32:fe:5d:
                    c3:36:4c:e3:af:a2:87:91:10:89:3d:7e:b7:c4:4e:
                    bc:ec:77:25:91:19:f7:16:5d:64:ab:bb:4e:8c:6f:
                    ae:ca:22:e8:2a:75:99:d8:d3:91:30:00:b5:29:e8:
                    20:74:7b:1f:2f:e7:e2:98:d7:9b:82:f8:ec:04:64:
                    2c:31:df:4a:d9:ce:70:df:f5:5c:7b:96:da:c2:62:
                    f6:5e:6c:99:44:24:51:4c:5f:9c:07:f4:1f:21:64:
                    90:6c:bf:1f:43:9c:dd:90:3d:99:43:ed:43:20:e9:
                    76:12:1b:4a:7d:37:1e:3f:c9:9e:b6:5d:e6:6f:c0:
                    05:55:11:58:99:eb:83:cb:23:dd:29:63:77:88:b3:
                    1c:00:81:59:8f:13:ed:cd:c6:d0:9d:c6:57:c2:4c:
                    99:e0:7d:1e:64:7b:74:ff:2a:9a:b6:6a:95:d9:06:
                    91:93:f1:bf:bd:06:ce:35:73:44:6c:8a:86:8f:39:
                    6b:68:89:36:76:b5:22:91:51:07:64:e7:c0:54:51:
                    21:e6:dc:c4:a8:6c:0e:4b:b7:d3:8f:a8:7d:64:e9:
                    bc:95:6d:91:c6:0b:81:e3:b3:37:7f:60:05:86:3a:
                    7c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CB:45:B7:EB:4C:B7:F3:C9:EA:0D:E5:00:02:42:B1:A3:F5:36:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1bb9657e-7b0a-3aef-9e3d-201279eb899b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:72:55:0a:09:a8:b6:4b:55:65:a8:78:0f:d8:50:b8:b0:6b:
         83:be:4f:3a:de:ee:ca:dd:c2:df:05:1d:c2:7b:aa:04:73:81:
         a7:8f:c0:62:b5:f7:4d:f1:cb:a8:d1:1d:43:67:1e:fa:10:f9:
         6d:c2:57:d7:50:5a:6a:7d:5a:39:22:58:b1:0d:8b:52:97:47:
         66:6c:24:f3:69:6d:8d:2a:08:09:66:ae:c2:72:da:8e:2c:fb:
         7a:10:e0:10:c2:9b:83:d1:85:03:32:14:02:ef:47:bb:ef:63:
         6f:cf:9f:78:fd:38:81:15:3d:96:60:02:64:15:97:b8:ef:ed:
         20:29:79:0d:2e:82:2c:99:51:97:96:65:44:8b:f7:e6:3f:02:
         31:51:e6:bf:81:b3:66:67:72:8b:46:83:d3:58:4f:ae:51:36:
         ea:47:b9:64:85:7f:e0:a6:86:a5:39:e4:0e:21:74:fa:b0:65:
         d2:4d:61:77:3e:45:8b:eb:81:ef:31:d5:64:54:78:91:cc:02:
         c0:67:3b:3c:87:d7:dc:cf:86:2e:68:a1:3d:c8:45:bd:dd:79:
         83:8f:db:53:03:2f:0e:3f:72:cc:b1:62:5b:66:7b:3f:71:9d:
         f1:f5:23:03:01:e8:a1:0b:a5:9d:22:d4:b1:33:bc:d7:23:12:
         a0:a5:ab:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 02:04:54 2025 by rpki-client