Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa
File:                     ce268d52-bc78-36a5-a64e-f76a492c0e21.roa (raw, json)
Hash identifier:          CUCuexsjNewgFs3ASeFs08Hx6aGuz3KGefSQx/oN0Ts=
Subject key identifier:   7B:10:A7:EE:A5:1F:EE:C5:A0:BE:B5:D5:DC:84:3D:32:24:37:42:98
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F4328584B0746C2C6F2C4E483DC50D3C0
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     6954
IP address blocks:        69.4.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c2:c6:f2:c4:e4:83:dc:50:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=2c94c216-3d44-49cd-bf1a-18c7a7399dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1a:de:cb:96:aa:31:2b:29:7f:ae:ba:8f:ab:
                    59:a4:7d:8b:ec:0d:c1:12:5c:ee:00:48:82:01:ea:
                    28:37:04:56:73:70:bc:d4:9a:4e:30:bf:b5:13:9b:
                    f2:7d:e6:93:3a:c4:9d:3f:4f:02:f9:1e:4a:0d:c1:
                    20:c8:07:1b:a1:9b:1f:bc:05:60:ad:e7:30:df:aa:
                    ba:b4:3d:7e:51:d1:f0:be:e0:8c:28:7d:01:9f:ea:
                    c8:d7:fc:27:95:b4:8e:20:73:28:1b:5a:94:11:54:
                    26:0e:96:7b:80:ae:f0:8a:b9:5d:b2:4b:7a:b3:e3:
                    06:70:43:a1:d9:3b:06:87:f8:24:0c:86:5c:96:f9:
                    17:d0:3f:a4:43:c4:96:b6:1b:07:c7:af:67:f9:39:
                    52:42:39:72:b8:96:a0:c7:49:4a:c0:97:d7:9f:af:
                    d7:1c:31:fd:5f:58:3d:97:5e:fd:0b:7a:2c:9f:21:
                    c3:49:51:9e:5e:97:8b:1f:a4:04:6d:1c:af:4b:ea:
                    f6:28:bb:3e:7d:92:97:f0:dc:6e:bc:04:58:d8:97:
                    bb:cd:b5:c7:45:61:0e:16:71:d8:78:51:78:7a:8e:
                    86:25:3a:b1:a9:40:51:c3:1b:a0:88:df:19:67:f9:
                    24:dc:06:e0:09:f0:d7:8a:20:5c:cc:fb:f6:10:7e:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:10:A7:EE:A5:1F:EE:C5:A0:BE:B5:D5:DC:84:3D:32:24:37:42:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:53:de:ef:79:61:6f:2b:49:6e:4e:51:6e:9b:79:69:69:98:
         e1:32:cc:49:97:54:aa:c0:5c:25:5f:05:f1:ab:ab:25:bc:8a:
         3d:e6:b8:f9:70:8c:89:c7:36:d5:72:80:10:fe:d3:7d:a1:09:
         2b:46:fe:4b:4c:7e:b8:5d:54:59:c6:e0:79:7b:3b:05:58:62:
         c4:37:31:47:b6:e4:49:55:3a:ed:00:c4:d4:c0:5d:cf:70:a2:
         42:b9:06:f7:57:4f:fa:52:a8:f0:cc:19:ad:96:7a:d0:1e:e2:
         05:a4:c4:03:09:db:b9:9b:45:6a:72:dc:af:8a:c4:c8:1f:d3:
         98:56:3a:a8:b0:dc:5d:0d:66:87:63:03:88:ae:a7:a9:46:ee:
         1e:9d:91:73:3b:d0:0c:38:e0:3e:6a:16:26:a4:60:2f:10:5b:
         96:21:e1:60:49:c5:03:ed:65:dc:c5:f7:c8:f7:4f:d5:5b:58:
         09:91:0d:67:b8:3a:3e:76:2f:df:eb:76:0f:7e:56:49:b3:d3:
         fd:22:d4:e2:2a:b2:fa:ce:32:d2:7b:f1:cb:53:0e:de:e0:39:
         1a:fb:e1:b3:73:ee:58:d3:ff:e1:b8:21:57:b6:91:de:c2:7d:
         57:c2:1c:b8:8a:34:46:c3:4e:25:e5:10:53:ab:fb:1b:11:e1:
         f5:b8:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 01:55:36 2025 by rpki-client