Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e882a76d-dcef-3c43-8c03-fb6cd72062ac.roa
File:                     e882a76d-dcef-3c43-8c03-fb6cd72062ac.roa (raw, json)
Hash identifier:          Sx0W0ibux35HAnoGOK6acJsKdnlr83mWCDp9IqKnOJE=
Subject key identifier:   74:01:C3:2A:A8:8C:34:9A:81:4C:6E:B2:38:87:B4:CA:0D:94:16:41
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584A033122B1857DE29503959800
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e882a76d-dcef-3c43-8c03-fb6cd72062ac.roa
Signing time:             Thu 29 May 2025 09:07:11 +0000
ROA not before:           Thu 29 May 2025 09:07:11 +0000
ROA not after:            Wed 27 Aug 2025 09:07:11 +0000
asID:                     3257
IP address blocks:        69.17.64.0/24 maxlen: 24
                          69.17.65.0/24 maxlen: 24
                          69.17.66.0/24 maxlen: 24
                          69.17.67.0/24 maxlen: 24
                          69.17.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:31:22:b1:85:7d:e2:95:03:95:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 29 09:07:11 2025 GMT
            Not After : Aug 27 09:07:11 2025 GMT
        Subject: CN=f91d8fcd-e01d-4851-b031-55b5d4f2ac89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:33:b2:53:48:4a:8b:c1:31:c1:de:d5:14:b5:
                    d1:37:a5:12:d0:b2:d3:de:84:c0:80:68:93:32:f0:
                    08:91:8c:66:04:63:6f:33:f8:e2:9e:a8:b2:22:0e:
                    ea:ff:5a:42:d5:00:1d:75:1d:d9:ff:74:76:fe:0a:
                    1f:de:9a:0a:c8:b8:d9:d0:22:ca:e1:88:24:d4:6a:
                    59:dd:4c:f9:fd:44:70:56:0d:b6:b4:92:9f:45:df:
                    c2:e1:25:e0:b5:77:ca:e7:13:7f:85:21:ce:65:02:
                    47:8e:d0:dd:69:2b:ec:86:28:36:a6:bb:09:0a:42:
                    cb:c6:27:e5:c2:1f:97:4d:5f:e7:d9:97:67:06:52:
                    cc:69:61:e7:9b:af:02:a9:53:41:e2:3a:e8:52:60:
                    bc:78:bc:28:69:62:e8:30:17:e3:e8:90:de:e4:d0:
                    21:73:b2:d6:38:b9:fd:bd:8f:34:ad:d6:7d:81:e1:
                    2f:82:bc:49:20:ff:9c:dc:3c:c0:c5:8a:9f:8e:6d:
                    86:6b:3c:38:8f:a2:5c:73:61:2b:f5:60:31:a9:10:
                    b5:b0:f7:fe:cd:17:e0:4d:6f:e9:96:ab:0c:b6:21:
                    ee:fa:64:e6:3b:73:c4:f7:82:c7:a0:86:1a:41:c0:
                    8f:c5:28:83:29:b6:58:26:e6:ee:64:d7:e8:df:9d:
                    50:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:01:C3:2A:A8:8C:34:9A:81:4C:6E:B2:38:87:B4:CA:0D:94:16:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e882a76d-dcef-3c43-8c03-fb6cd72062ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.64.0-69.17.68.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:45:e8:71:c7:7b:5c:6b:33:d5:44:6a:1d:4a:90:16:34:04:
         ec:b6:09:69:04:ad:8b:ad:18:a5:9a:7a:bd:de:ca:05:1f:57:
         45:68:8c:5b:58:e2:73:57:4b:48:e8:df:03:bb:98:6e:df:c2:
         19:30:ed:b6:7e:c1:dc:04:36:f5:ab:ba:54:64:72:d4:eb:01:
         1c:67:53:d3:2c:3a:2d:7d:ab:a4:a0:ee:87:dc:60:6a:81:4e:
         fb:5e:df:6e:05:3f:06:a1:32:6c:5d:e2:42:bf:0d:78:b7:ed:
         92:33:47:07:bb:0a:37:61:78:a5:56:a6:ee:b4:a5:39:db:e5:
         67:13:76:58:08:30:74:41:8e:6e:b8:9a:25:42:74:5b:2d:27:
         51:d5:b7:38:bb:f0:58:55:21:c0:f0:d9:69:33:ce:01:a8:84:
         73:94:ea:ac:54:af:c5:31:e8:17:5a:da:4c:26:21:f5:a9:89:
         0f:cc:d4:ee:79:73:b3:20:46:9d:0e:3a:43:28:23:b5:2c:45:
         48:49:2a:45:f4:b0:13:fb:ff:2f:36:05:6f:43:b8:f6:9a:c1:
         a5:7f:35:55:83:a4:89:de:b3:b4:8a:b1:ac:8f:eb:b7:ca:2b:
         a9:a1:85:6a:10:71:71:12:43:1d:25:bb:2b:d8:56:0f:d4:97:
         25:10:a1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:27:02 2025 by rpki-client