Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/ed5e6a20-df9f-3a3a-b3e8-be1577b9c776.roa
File:                     ed5e6a20-df9f-3a3a-b3e8-be1577b9c776.roa (raw, json)
Hash identifier:          6uJ6+clfe56MS9xSH+F0hMwjIiBIH8OT2NUm45RH8u8=
Subject key identifier:   4C:78:13:9D:60:00:1F:57:6B:34:64:AF:1C:0A:7B:EE:DD:7B:12:F3
Certificate issuer:       /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial:       010D0C9F432858497DF5C9203FA968A55186F680
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/ed5e6a20-df9f-3a3a-b3e8-be1577b9c776.roa
Signing time:             Fri 11 Apr 2025 15:45:06 +0000
ROA not before:           Fri 11 Apr 2025 15:45:06 +0000
ROA not after:            Thu 10 Jul 2025 15:45:06 +0000
asID:                     27226
IP address blocks:        69.31.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:f5:c9:20:3f:a9:68:a5:51:86:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
        Validity
            Not Before: Apr 11 15:45:06 2025 GMT
            Not After : Jul 10 15:45:06 2025 GMT
        Subject: CN=23c8f576-e9c6-4620-b5f3-81fedb0cf1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:e5:e6:ed:1f:7b:74:f6:c2:71:3e:aa:c5:
                    94:9e:f8:8a:07:eb:1f:c0:11:3f:47:fc:63:ce:0a:
                    cf:e2:13:bc:0a:c0:24:81:2f:38:9b:10:cf:d7:8a:
                    0f:7f:dd:ff:5c:c2:32:12:e6:57:7a:d1:19:4f:e6:
                    57:46:73:0c:51:aa:d1:f1:6d:62:e6:de:5c:a1:54:
                    33:98:98:e1:71:ed:ad:c7:27:bc:7a:fc:f7:11:84:
                    53:b6:85:b0:18:8f:d3:e2:6b:d3:0e:43:ba:e7:db:
                    96:4f:24:02:ac:b6:75:9e:d7:6d:d4:a6:e7:e5:07:
                    5f:f2:e9:4c:08:63:b7:d9:f0:75:ad:35:2f:f7:9b:
                    4d:12:27:be:ad:6c:d0:74:20:73:ae:2b:1a:a8:35:
                    de:4c:47:b3:3d:a7:7c:ba:37:74:8b:c2:f6:3f:52:
                    fd:12:3a:5c:f2:58:8c:2f:cb:22:55:6b:3a:8f:86:
                    71:3b:35:fe:d2:79:e9:4b:22:03:aa:8e:b6:0e:ce:
                    d4:ea:a6:87:d4:51:b7:cc:25:ec:dc:3c:7d:7c:03:
                    f5:35:1c:6c:de:39:99:6c:23:fc:79:a0:e5:5b:34:
                    e4:38:39:82:16:35:26:37:fc:46:1f:0b:1e:92:46:
                    29:5d:cc:c6:4f:d7:e4:6c:15:e3:8d:50:8b:e5:eb:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:78:13:9D:60:00:1F:57:6B:34:64:AF:1C:0A:7B:EE:DD:7B:12:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/ed5e6a20-df9f-3a3a-b3e8-be1577b9c776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl

            X509v3 Authority Key Identifier:
                keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.31.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:be:8e:1a:ac:ea:ac:7b:21:00:ae:74:58:88:d6:2e:96:64:
         94:96:7a:29:3b:3b:8b:94:1e:ac:1b:58:a2:73:ee:b4:48:47:
         68:33:05:2f:62:3b:eb:56:3b:34:ea:c5:a7:de:d9:48:15:2a:
         cb:54:f1:93:c7:c8:47:a5:48:eb:2c:a5:99:43:f7:2a:7b:40:
         6b:73:74:75:ac:94:bc:fa:9a:94:6d:7a:53:c9:86:4e:19:5e:
         cf:2a:85:40:35:f5:b1:2a:f5:ad:36:56:0f:2d:0b:1f:6c:0e:
         78:e6:8e:9b:f0:47:1a:1d:49:c5:cf:64:ce:ad:87:41:f1:ff:
         82:be:33:33:76:4f:ae:a1:2e:01:c4:3c:4f:b2:fb:e1:37:42:
         16:69:05:9b:fe:ed:a9:8e:c1:38:97:a1:72:e1:04:f9:39:36:
         37:01:7e:61:2a:ed:b2:04:f3:b2:bd:b8:94:c3:55:e2:90:01:
         f0:47:01:b6:2c:5e:4a:f4:6b:17:b2:cf:be:41:ec:06:52:0e:
         3a:9a:21:2a:40:60:35:c8:aa:77:d6:e7:11:92:d1:48:46:80:
         68:a5:cd:06:f6:c8:1b:d2:59:b4:9f:eb:0b:68:5e:10:ca:13:
         ad:c6:19:54:17:46:cc:26:aa:13:70:2c:fb:fa:1a:a5:11:4b:
         8b:0c:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:34:20 2025 by rpki-client