Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/333d8dbc-5cfc-344d-923a-da3c0a0e6fde.roa
File:                     333d8dbc-5cfc-344d-923a-da3c0a0e6fde.roa (raw, json)
Hash identifier:          ZW1/aDG/yG2JkVrlLAqI9NoNESHJgxdWdEB9b2W92Bc=
Subject key identifier:   0D:3D:33:4C:1B:E5:3C:54:8C:31:1C:BB:94:F1:6C:D0:50:B7:80:EC
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F432858494733EF11902079CADD3F0A40
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/333d8dbc-5cfc-344d-923a-da3c0a0e6fde.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     6954
IP address blocks:        69.4.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:ef:11:90:20:79:ca:dd:3f:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=13d1ede6-017f-4e16-af17-eaffb86867fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:4b:03:88:48:e7:85:70:b7:f7:3c:a7:48:
                    45:fb:3c:b6:25:85:44:11:8d:f7:30:30:98:47:87:
                    19:6e:ac:c1:aa:6d:f1:80:b7:ea:55:94:fe:e7:3a:
                    66:fb:32:71:9c:03:71:b0:bb:47:a9:74:71:53:f3:
                    bb:20:57:01:02:32:3c:44:0b:e7:4f:10:d8:17:f5:
                    f1:e0:3a:d7:4a:f8:8d:00:36:61:c4:fc:42:6d:10:
                    ea:d3:f7:04:61:90:93:11:91:91:47:9a:bc:65:bc:
                    64:b9:42:0b:27:07:7c:15:89:f7:8a:94:6e:33:ba:
                    3d:52:6f:75:25:9d:a5:6c:72:11:2b:72:02:94:e8:
                    69:8f:a3:ac:97:48:95:95:91:12:9a:37:8b:89:78:
                    6d:64:52:01:dc:7f:af:93:aa:d9:91:08:9f:51:e8:
                    f7:f5:0f:c8:d6:65:a2:f5:8e:bc:2c:97:f8:09:c7:
                    d9:71:99:a6:d1:b0:f1:52:70:d5:47:28:21:0c:f9:
                    30:09:55:8c:3e:cf:10:72:fe:19:19:59:89:4d:07:
                    25:27:e1:05:46:f9:f1:3b:89:1f:4c:88:9b:8f:2f:
                    64:2a:9b:09:40:29:e2:7a:d9:51:2f:83:50:48:b3:
                    ff:6c:63:1a:bc:c8:5c:3d:43:9f:cc:03:29:cc:b8:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3D:33:4C:1B:E5:3C:54:8C:31:1C:BB:94:F1:6C:D0:50:B7:80:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/333d8dbc-5cfc-344d-923a-da3c0a0e6fde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6f:cf:72:d2:82:d3:e2:6a:68:84:d8:8c:42:c3:80:dd:f4:
         2a:cf:74:a9:2b:82:68:a8:c2:9d:70:ad:89:f5:ed:1a:17:7f:
         5f:33:c0:ad:d3:02:24:76:b2:ae:33:cc:a4:a2:2d:eb:29:a7:
         52:8c:6f:28:91:48:58:b9:90:5f:fe:de:ac:14:8d:e9:8b:17:
         5a:2f:fc:d7:9b:02:50:fa:b5:58:07:14:18:a4:a1:9c:04:ac:
         96:62:6a:b3:dc:96:5e:43:5c:9e:62:4c:6d:d4:25:a2:7a:74:
         27:2c:1f:20:dc:83:d5:91:32:2f:2c:ae:cb:5f:ce:79:da:42:
         26:71:59:20:da:bc:d4:2c:4e:55:26:54:ee:65:d7:25:35:61:
         1a:d4:1d:29:d6:46:ed:64:84:ef:0d:77:48:26:64:c3:16:47:
         60:2b:8a:2f:37:c4:8f:ad:8d:f6:59:ac:99:7e:bd:b1:bd:63:
         a0:b0:77:e2:2d:0c:ca:78:78:c1:d5:33:2d:57:a1:09:33:65:
         6c:df:04:f3:27:57:92:95:6e:a8:f8:04:47:59:45:80:25:12:
         e6:be:49:b0:08:6b:6a:d4:47:80:c2:ae:35:84:5e:ea:88:f3:
         8b:b4:54:58:6a:1b:ae:96:8d:30:96:42:69:df:87:f9:f0:ea:
         d6:c8:d4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:01 2025 by rpki-client