Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/e3db2af0-cd2d-3511-9df3-440fc305371a.roa
File:                     e3db2af0-cd2d-3511-9df3-440fc305371a.roa (raw, json)
Hash identifier:          +KD/6prdwAoCcs1TBT1uFNv+9LX4dhV99Uc+M45ky/s=
Subject key identifier:   D3:CD:AA:2F:7E:5E:B4:93:6D:C4:7A:85:25:1A:08:4A:E6:C8:CB:FF
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F43285849FED6039939EA0AE604DC3840
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/e3db2af0-cd2d-3511-9df3-440fc305371a.roa
Signing time:             Tue 27 May 2025 19:40:21 +0000
ROA not before:           Tue 27 May 2025 19:40:21 +0000
ROA not after:            Mon 25 Aug 2025 19:40:21 +0000
asID:                     1299
IP address blocks:        69.71.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:d6:03:99:39:ea:0a:e6:04:dc:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: May 27 19:40:21 2025 GMT
            Not After : Aug 25 19:40:21 2025 GMT
        Subject: CN=92185eca-c5b5-41b1-9169-ec1d9ad12dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1b:f2:05:14:c8:6a:37:99:6f:03:56:23:11:
                    eb:6c:89:34:08:cd:4a:ce:e5:e6:62:53:df:84:3c:
                    d1:68:b9:77:82:c6:47:e0:3f:64:71:64:cd:da:a7:
                    7b:ac:ff:3a:2c:f8:80:57:f9:d5:a9:23:00:8e:a6:
                    f5:23:75:2c:9a:78:a6:4e:f6:41:03:39:94:1b:87:
                    2c:ba:ac:55:19:76:48:7e:29:40:d5:0a:b3:4d:0c:
                    07:8a:d3:db:23:9b:42:92:97:10:dd:db:ad:3e:9f:
                    fa:ef:a5:26:43:3a:d8:f0:9f:af:98:08:cb:9b:43:
                    b9:16:92:39:e5:f3:d8:11:ff:4b:c4:8e:7d:97:ce:
                    ab:9a:2b:e1:b9:ea:0f:d9:52:f0:fa:fd:44:ac:b4:
                    92:8e:8e:7a:df:4c:bf:4a:9a:d7:f9:a8:f8:7f:16:
                    c4:76:ca:18:a5:4c:58:7c:59:4d:72:15:43:2d:4e:
                    b3:1a:e5:32:f4:3b:f3:c0:0e:db:48:f8:a8:24:77:
                    9c:2a:49:1e:e8:4d:7f:9a:cd:6a:01:b0:ae:2b:3e:
                    6c:d1:1b:42:f3:54:37:71:14:e3:ad:fc:12:7e:2f:
                    c0:cc:12:42:13:13:d9:be:2f:49:e9:00:48:96:17:
                    5e:cd:a6:c6:8b:62:c3:d9:07:59:fa:93:31:ed:69:
                    c7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CD:AA:2F:7E:5E:B4:93:6D:C4:7A:85:25:1A:08:4A:E6:C8:CB:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/e3db2af0-cd2d-3511-9df3-440fc305371a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.71.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:18:87:9f:17:22:c1:5e:df:66:d5:f8:ec:1c:0f:5d:b7:ab:
         e7:fa:8d:8b:cb:3d:d0:5c:47:ac:0e:12:e2:e2:10:68:1f:26:
         93:f6:f4:f6:dd:35:03:58:5a:ee:19:68:92:1a:73:68:99:a5:
         21:70:7f:c3:ce:f6:3a:52:c0:b8:3c:ef:85:4f:83:ea:24:41:
         11:00:06:5a:a6:c6:9b:3a:df:b8:db:41:d1:8a:17:f0:da:af:
         62:e5:27:62:fa:b9:14:4f:7a:87:a7:e1:9e:e1:52:f0:01:d5:
         9c:62:b5:0b:dd:16:6a:9d:81:ca:51:99:05:7c:0a:65:5e:3d:
         03:d3:a2:07:8c:f5:93:d6:5e:52:24:83:f2:4e:3f:52:99:ae:
         46:d0:03:66:37:08:74:58:d8:26:43:e4:e4:25:c4:bb:71:06:
         b8:a4:e7:fe:99:e2:ea:14:ab:00:3e:ac:27:64:76:79:f4:78:
         84:c1:3e:2e:ef:40:66:00:a5:4c:43:e4:21:23:8c:f4:af:ac:
         84:23:e6:33:c8:52:6e:c6:68:6c:f0:87:e2:81:07:19:8a:5e:
         3b:39:01:1b:34:05:26:e2:9d:da:44:4a:d1:03:e0:25:aa:79:
         4f:06:26:8a:40:0e:e0:11:e0:fe:18:5d:d9:0b:28:f2:a2:49:
         5d:b3:56:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:52:46 2025 by rpki-client