Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/735c437a-0c6b-360a-a793-474bca780cb6.roa
File:                     735c437a-0c6b-360a-a793-474bca780cb6.roa (raw, json)
Hash identifier:          +U8i4VTefWA7/GqPxI4sRAuLfLVlU9tnpAmOLTYITlw=
Subject key identifier:   E5:C6:8C:CA:7B:29:53:CB:55:4F:2B:51:16:DD:07:F3:77:D3:59:AE
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584AFAB681A3248A427330CB3E20
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/735c437a-0c6b-360a-a793-474bca780cb6.roa
Signing time:             Tue 26 Aug 2025 01:00:32 +0000
ROA not before:           Tue 26 Aug 2025 01:00:32 +0000
ROA not after:            Mon 24 Nov 2025 02:00:32 +0000
asID:                     62240
IP address blocks:        69.168.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:b6:81:a3:24:8a:42:73:30:cb:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Aug 26 01:00:32 2025 GMT
            Not After : Nov 24 02:00:32 2025 GMT
        Subject: CN=1eddbc37-edc3-431c-88e8-db30ad484bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a8:52:35:fa:69:76:f5:a9:95:cb:6a:0d:0a:
                    cc:04:5f:99:32:07:49:a7:6e:22:92:2f:75:5a:f0:
                    d3:33:6c:32:8a:98:e2:10:72:c7:c7:3b:cd:7c:8e:
                    7e:93:8f:55:96:be:b4:14:fb:5b:d1:b2:f9:2b:07:
                    c7:f1:ec:cd:d6:28:4a:38:fd:9d:90:1a:aa:75:2f:
                    20:87:e8:a7:ff:8e:55:a9:9c:88:d7:0a:50:a8:43:
                    d7:e7:b8:63:b5:dd:ab:ff:6d:bf:c8:28:b1:81:65:
                    67:2c:62:51:9f:b6:5c:92:64:6e:9f:06:82:1c:aa:
                    c8:a9:f5:79:d1:19:17:dd:bb:24:cc:34:36:43:38:
                    60:9b:c1:84:19:37:18:fe:d3:21:da:e6:69:78:5b:
                    0a:ba:5a:b4:6b:cf:eb:09:4f:26:e8:08:c4:46:22:
                    ee:2c:2e:fc:68:c1:8b:dc:0f:0b:ca:be:df:ab:9d:
                    66:de:95:cd:ea:d8:c6:a7:5d:8a:be:00:16:75:73:
                    24:db:3a:05:94:f9:81:5e:7a:76:ba:bc:60:3d:0a:
                    82:ff:5d:1c:b3:26:fc:0e:b2:fc:4f:bb:d4:37:8d:
                    dd:e2:48:f0:69:c3:0d:5c:17:2c:05:cb:5c:b2:d1:
                    ed:cd:5a:77:6d:c9:90:a2:11:b5:f6:35:92:f0:a7:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C6:8C:CA:7B:29:53:CB:55:4F:2B:51:16:DD:07:F3:77:D3:59:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/735c437a-0c6b-360a-a793-474bca780cb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:ae:31:c5:a7:fb:44:94:0c:44:16:05:43:c4:50:16:6e:
         49:33:cf:3e:7b:4f:97:a4:ff:2c:7a:1e:5c:d8:76:9e:c9:4a:
         b6:6d:e9:44:1a:52:64:7e:9d:e7:31:df:04:1c:fb:27:6e:47:
         7b:7d:e2:79:ec:58:16:55:9a:9d:a4:e8:b0:ad:17:57:e4:9e:
         89:ce:97:c2:13:e7:8e:b0:8d:07:88:db:22:cd:ee:5c:82:28:
         c3:c1:aa:00:a1:91:95:b0:e7:7d:98:c4:f2:54:dd:08:63:a5:
         30:01:60:5f:d0:e2:67:d3:44:a0:d0:97:e0:bd:fa:46:44:ca:
         b4:9b:92:02:31:ba:63:90:44:ea:12:35:5a:3c:d1:fe:ea:1b:
         c1:c2:7d:e2:cf:ee:27:65:95:90:03:6e:f7:b4:0c:41:02:09:
         b9:88:b2:22:84:c7:6a:70:0b:dd:7c:ad:96:74:d1:86:43:e0:
         c0:8a:78:a4:e2:2f:8b:25:01:e4:47:69:50:64:e3:87:7f:97:
         7a:cd:b4:f5:6c:32:87:af:f1:05:7c:3f:c2:20:74:8d:7f:93:
         e1:84:8c:fa:f3:ec:a8:cf:ed:19:15:aa:64:b4:61:7a:5c:9f:
         d7:82:3d:6c:85:07:f7:f7:25:ea:ea:e9:49:16:95:ce:a1:b6:
         f3:8d:5f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:06:25 2025 by rpki-client