Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7227acb3-123f-331a-8f3b-2f0488de64a2.roa
File:                     7227acb3-123f-331a-8f3b-2f0488de64a2.roa (raw, json)
Hash identifier:          dyYBgtUsyUsQv+Q07n1n10hao8o8fCs7Yghv/7JqGvU=
Subject key identifier:   3F:CA:67:64:73:0F:7D:AE:2C:97:EC:0C:22:AA:57:79:B6:81:F0:FC
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F43285849C904E9B89C46ED161F218600
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7227acb3-123f-331a-8f3b-2f0488de64a2.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     394391
IP address blocks:        69.56.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e9:b8:9c:46:ed:16:1f:21:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=4bf04b66-29b8-458d-b12d-579bb820c282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:89:c4:85:8a:17:9b:1b:05:a0:27:e0:bf:c8:
                    33:30:a2:6d:ab:27:64:bc:c4:1c:c7:94:f7:15:a6:
                    1a:50:6b:ab:37:6c:3e:28:a8:0d:8e:a1:b7:4c:0a:
                    00:18:d2:3a:c6:9a:55:3e:f9:b5:c0:2b:50:88:83:
                    e7:2b:2c:1a:68:cf:49:1e:41:f1:6c:20:6c:e1:e1:
                    ad:fd:94:42:6a:19:e6:12:95:4e:46:c8:e0:bd:d4:
                    92:58:dd:3e:64:3b:e8:0d:ce:24:08:f4:68:9b:31:
                    e7:59:15:27:c9:66:5d:b5:14:8c:9e:e4:05:e2:5f:
                    fd:e3:cb:05:51:0b:15:23:ce:ba:39:66:9e:0b:35:
                    d2:17:69:5d:3d:a1:6d:94:d6:f4:cc:28:af:60:4f:
                    a7:1d:6f:ae:2e:79:bb:9a:ff:c4:a0:47:c5:a9:df:
                    f8:37:af:3f:45:36:66:bf:93:73:7f:64:52:7a:f1:
                    1e:99:3b:a8:e9:1c:cc:8c:ee:73:7c:6b:85:03:f9:
                    8f:4e:eb:84:8d:38:b1:27:13:25:7d:4a:eb:0e:32:
                    aa:7a:6e:6f:25:74:a0:8a:5f:ea:52:c3:b8:e7:83:
                    7a:c3:50:19:f6:47:0a:90:b7:17:52:8d:92:cf:a0:
                    f5:9e:75:44:1d:30:35:02:cd:33:3e:39:6d:cb:4e:
                    a4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CA:67:64:73:0F:7D:AE:2C:97:EC:0C:22:AA:57:79:B6:81:F0:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7227acb3-123f-331a-8f3b-2f0488de64a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.56.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:fc:37:25:f6:13:52:49:87:de:87:a8:89:70:07:9f:09:33:
         9b:2b:cb:6e:f8:5a:5a:28:dc:6f:c3:3e:a2:03:13:3c:93:87:
         1c:2b:9c:86:8a:3e:7e:e1:15:7f:4b:4b:3e:9b:59:55:d9:93:
         97:54:ac:a6:81:e4:c6:0b:5f:e8:18:e5:86:88:f6:d6:97:6c:
         bd:c1:1f:e7:32:f9:30:df:81:06:2e:9c:45:93:63:c9:ff:8b:
         ac:f8:aa:06:21:b7:95:59:18:bc:a4:8e:34:0c:ae:4b:b4:1d:
         67:dc:74:55:06:e3:d1:4f:5c:37:d9:40:40:e5:9f:dd:b5:b3:
         a4:b5:4f:06:6f:20:09:3f:41:95:41:b1:f9:ce:2c:17:41:f8:
         3c:2c:b0:ad:cb:21:19:d0:8b:20:f2:ad:1f:aa:ba:ba:07:fd:
         d6:e2:2b:e4:5f:a5:5d:c2:7d:ff:71:5c:77:a6:af:40:a5:5c:
         c2:74:97:6a:45:51:3d:15:8f:5d:d1:fa:ce:ae:01:e9:0e:de:
         24:20:03:b0:00:f2:15:dd:9d:62:3b:6b:07:45:81:12:e2:69:
         7b:4d:53:bf:1b:a0:23:71:58:6a:85:3c:cb:71:cd:c3:5b:d7:
         dd:7d:4f:43:5e:ff:45:bc:f8:a9:8e:d4:57:21:7a:2e:74:30:
         ae:48:92:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:53:50 2025 by rpki-client