Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/bc8676dc-21c8-349e-8ada-a09a76af2bb2.roa
File:                     bc8676dc-21c8-349e-8ada-a09a76af2bb2.roa (raw, json)
Hash identifier:          RMz+t1oICnqhd190rQMmVs6qbJLtVJyK1LebiIosx14=
Subject key identifier:   C0:1E:03:AC:2B:3C:D0:42:9D:BC:16:D1:F2:5F:E9:69:0A:DD:B1:FA
Certificate issuer:       /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial:       010D0C9F432858497DF45CB1B70D9AEF881999C0
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/bc8676dc-21c8-349e-8ada-a09a76af2bb2.roa
Signing time:             Fri 11 Apr 2025 15:42:14 +0000
ROA not before:           Fri 11 Apr 2025 15:42:14 +0000
ROA not after:            Thu 10 Jul 2025 15:42:14 +0000
asID:                     40934
IP address blocks:        69.167.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:f4:5c:b1:b7:0d:9a:ef:88:19:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
        Validity
            Not Before: Apr 11 15:42:14 2025 GMT
            Not After : Jul 10 15:42:14 2025 GMT
        Subject: CN=01ae1250-2f0c-4685-877d-b6d8b8682e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:3f:cb:f5:59:6e:77:e8:65:02:fa:16:ff:
                    08:10:01:50:61:82:ae:85:ec:ee:92:28:43:06:a6:
                    f3:7e:b5:d9:48:45:92:71:ef:9f:11:3d:3b:2d:9a:
                    0e:58:ce:a1:89:7a:15:47:cf:4d:02:01:64:50:66:
                    50:f3:08:06:b5:d3:d7:fe:39:df:d6:ca:fa:60:ef:
                    60:0f:c3:37:66:b1:af:37:e4:25:47:00:0d:e3:f7:
                    7f:d5:d5:f9:b4:d3:0d:cd:95:92:04:ac:78:6d:94:
                    5f:48:e8:a4:60:2f:fb:90:48:2d:5b:31:d0:58:a1:
                    ff:fc:f3:8a:11:ef:d3:9a:d2:d3:40:43:d7:8a:c9:
                    30:13:da:89:58:de:9e:c2:61:51:bc:ee:5f:b4:9b:
                    29:4a:95:7f:d8:29:30:dd:67:bf:87:1c:8b:81:f8:
                    0b:b1:a1:15:9e:cb:20:71:ac:e3:b7:63:11:2f:c1:
                    d8:b6:68:31:e4:81:9c:f0:c4:b8:36:6b:37:c6:93:
                    05:68:22:39:f6:49:d9:86:28:2d:59:b3:d6:c5:a0:
                    85:24:20:7d:31:87:ae:7d:bf:0f:47:08:03:01:2e:
                    6a:86:50:3c:0c:b8:39:6e:93:cf:75:da:60:e9:97:
                    1b:72:7c:f8:04:6c:b1:21:11:d7:d0:cb:95:a4:3a:
                    1d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1E:03:AC:2B:3C:D0:42:9D:BC:16:D1:F2:5F:E9:69:0A:DD:B1:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/bc8676dc-21c8-349e-8ada-a09a76af2bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl

            X509v3 Authority Key Identifier:
                keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.167.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b8:1e:76:e8:95:ee:fd:11:56:cd:5c:22:b5:db:f6:4c:43:
         9c:b5:73:bc:34:5b:18:76:61:1d:18:e4:60:97:4b:b6:64:fd:
         11:7f:aa:28:0d:28:71:59:d7:35:b1:21:34:ea:23:06:50:e1:
         55:a8:3f:63:11:8e:a1:e5:7f:0f:bd:d7:0f:9b:0c:e2:29:1d:
         64:a7:7a:10:6e:90:51:9b:5e:49:80:c7:99:38:08:37:40:8f:
         ae:6b:b6:1f:4e:18:47:c7:40:27:b4:84:f8:0d:f2:20:7b:79:
         ad:4b:3e:e9:40:b9:cd:d4:b4:2f:25:5d:1f:26:d1:d7:ff:47:
         e2:60:3f:97:69:f1:19:58:b7:b1:93:48:4e:81:31:40:e4:0c:
         ee:f4:24:7f:d4:df:54:d4:f3:22:1a:64:23:d1:51:98:97:4d:
         0d:0c:b2:b3:23:8d:53:23:56:2b:ce:27:5c:75:f0:25:da:d7:
         3b:76:9a:fa:90:0d:82:b4:0c:b3:54:cc:86:f7:3c:11:08:51:
         6b:c2:9b:c2:54:5f:ae:a8:3d:d1:5c:b0:34:18:dd:0b:5a:e2:
         da:56:4c:df:5d:2f:57:26:a8:60:3a:c0:87:96:b0:49:13:0b:
         be:46:0f:5a:ec:7e:01:71:77:5c:90:c0:23:bf:a6:a1:90:b9:
         16:6c:8c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:37:22 2025 by rpki-client