Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1f32733e-35c9-3462-9d15-83e8dcf865c5.roa
File:                     1f32733e-35c9-3462-9d15-83e8dcf865c5.roa (raw, json)
Hash identifier:          qsDq0gHpM3ezz760VNauR6ya09Q2hceUKSGYmECLiyk=
Subject key identifier:   AB:57:9F:A4:D4:E6:08:64:52:82:76:8E:E2:F6:AF:39:A1:71:1E:F4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584A0EE521471106A714FFA3E440
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1f32733e-35c9-3462-9d15-83e8dcf865c5.roa
Signing time:             Mon 02 Jun 2025 13:43:45 +0000
ROA not before:           Mon 02 Jun 2025 13:43:45 +0000
ROA not after:            Sun 31 Aug 2025 13:43:45 +0000
asID:                     199527
IP address blocks:        69.17.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0e:e5:21:47:11:06:a7:14:ff:a3:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  2 13:43:45 2025 GMT
            Not After : Aug 31 13:43:45 2025 GMT
        Subject: CN=3aeff386-518a-408e-a7f4-28522e69a36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d6:33:90:9e:f4:e9:97:93:11:d3:b5:c8:05:
                    9d:6f:70:d8:12:20:e0:b9:23:a9:96:cd:2f:8d:56:
                    a4:d6:c8:d3:26:18:15:9f:17:9b:ac:3c:85:09:27:
                    47:22:dc:a6:50:14:d9:3d:a1:86:1a:f5:cf:43:ba:
                    d1:96:58:61:c5:2b:0c:35:6b:e9:07:a1:05:4e:bb:
                    35:d0:40:45:d7:0b:4d:8b:dd:b6:33:52:ca:88:db:
                    85:9a:0e:e7:4d:21:78:90:97:3a:19:c3:fb:19:73:
                    9d:21:32:ce:5a:81:1c:c3:78:f0:ba:bc:95:fd:21:
                    ca:af:41:01:17:2b:f6:d8:f6:5c:78:a3:81:35:0b:
                    e8:b7:fa:50:12:e2:43:36:61:ef:d1:ac:91:b9:06:
                    d0:d5:3e:5a:eb:5b:92:7b:15:6b:20:01:08:77:84:
                    34:4b:5a:b1:5a:29:04:c2:d4:4b:be:94:bc:d1:f2:
                    9e:77:f9:be:ea:89:c8:25:13:05:1d:9a:18:85:61:
                    cb:eb:41:3c:79:b0:9b:3a:ff:7b:9a:c3:10:b5:9e:
                    0e:37:58:17:86:ff:4c:a2:c5:55:bc:6d:69:16:e2:
                    07:f1:d8:41:36:e7:67:09:35:ac:89:09:9f:88:23:
                    3c:56:ac:84:fe:2a:28:ff:24:bd:92:ba:cf:70:c8:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:57:9F:A4:D4:E6:08:64:52:82:76:8E:E2:F6:AF:39:A1:71:1E:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1f32733e-35c9-3462-9d15-83e8dcf865c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:3f:2d:83:4f:8c:1e:d9:f1:7e:00:49:7a:eb:2b:51:f8:93:
         de:50:da:7f:90:e5:32:5d:ea:75:77:80:a1:c7:9c:40:6d:58:
         f1:1d:17:fc:65:0d:c9:76:7c:14:b2:33:2c:6a:8a:75:14:f6:
         25:c7:c7:25:8f:09:2d:e9:b3:43:c1:a0:b4:0c:db:dd:bf:89:
         e1:d5:d3:5f:66:6e:f8:c7:af:a1:f7:7f:82:1e:a0:b2:c0:7a:
         50:20:b8:0f:42:63:ea:a5:7f:c8:27:cc:f4:1c:2e:30:9a:fd:
         ea:0b:91:48:98:e4:ca:47:33:3a:6b:68:e7:8b:02:94:0d:4d:
         5e:10:91:16:83:bd:85:eb:61:16:37:60:9b:1c:d4:d5:76:c5:
         ae:93:38:c5:a7:63:26:bf:a6:ed:56:81:93:ad:57:1e:64:2b:
         5f:9e:fb:ed:73:a5:32:13:f7:e2:0d:94:11:78:b4:25:3c:9e:
         54:04:43:fd:56:4e:b8:eb:6b:d6:97:b8:9f:89:ff:3f:87:4e:
         32:d5:1b:57:c6:97:20:cc:d5:dc:ae:a5:75:78:b1:48:b9:75:
         ad:9c:9b:31:eb:58:49:4d:36:29:14:e5:02:87:4b:1d:dc:27:
         d3:88:02:c9:bc:48:21:10:83:82:32:77:a4:f8:01:7e:70:6b:
         15:fa:cd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:37:46 2025 by rpki-client