Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/fd1faffe-95c0-36c2-a662-424685f19387.roa
File:                     fd1faffe-95c0-36c2-a662-424685f19387.roa (raw, json)
Hash identifier:          wBFphBLK/KWnrtu2qq/nLH778adwouRRLCy4cxJOAhg=
Subject key identifier:   9F:6A:C7:93:4C:1C:3F:2C:56:8A:BE:A5:50:E6:7C:7D:F7:20:C5:5B
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F432858493DE3B708272D017DD98E6800
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/fd1faffe-95c0-36c2-a662-424685f19387.roa
Signing time:             Wed 19 Mar 2025 16:56:57 +0000
ROA not before:           Wed 19 Mar 2025 16:56:57 +0000
ROA not after:            Tue 17 Jun 2025 16:56:57 +0000
asID:                     15331
IP address blocks:        69.51.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3d:e3:b7:08:27:2d:01:7d:d9:8e:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Mar 19 16:56:57 2025 GMT
            Not After : Jun 17 16:56:57 2025 GMT
        Subject: CN=c9c35a17-8afd-4f99-ba7d-aa1643d64c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:19:e2:d3:98:fe:ff:2c:da:49:58:c5:cd:c0:
                    d5:54:f7:ce:95:31:91:7d:d6:31:54:74:9c:c1:11:
                    02:13:73:8b:b5:a3:a1:e1:06:f1:88:8d:20:05:6b:
                    3a:42:c0:c0:0b:59:45:f8:7b:d5:b9:4d:8b:ec:5e:
                    c5:44:73:c6:b4:e9:49:de:bd:a2:2f:9a:95:d9:10:
                    b0:f2:c9:d1:47:ab:32:d4:fa:a8:3e:c6:95:6c:67:
                    f6:f4:05:77:b8:0a:77:fe:22:5c:d6:be:5c:6b:50:
                    21:e0:64:f1:62:d1:af:60:e1:fd:a0:21:8a:20:45:
                    67:a5:a6:10:2e:d0:70:8d:52:be:40:a3:80:0f:97:
                    63:37:2a:5b:e7:1a:74:88:c3:55:26:25:92:18:51:
                    d0:d0:53:e3:ee:26:19:08:ac:33:e1:6a:42:81:94:
                    d2:0d:65:f6:8a:21:2e:a3:2b:68:d2:94:82:5f:fa:
                    cf:db:88:b9:41:02:38:48:aa:e4:c1:b6:19:3f:07:
                    cd:95:ce:b0:b1:f8:f2:0c:e8:9b:6e:08:bb:30:06:
                    ea:6c:8a:6f:98:b0:d5:37:2f:14:63:b0:f2:70:0c:
                    21:d8:fe:48:9a:a0:a8:8a:63:64:22:ad:de:ea:b2:
                    ef:bc:85:f1:3c:83:d8:4e:12:47:9d:78:80:f0:6c:
                    33:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6A:C7:93:4C:1C:3F:2C:56:8A:BE:A5:50:E6:7C:7D:F7:20:C5:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/fd1faffe-95c0-36c2-a662-424685f19387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f5:ad:8d:df:8c:26:1d:16:51:3c:e0:b9:e2:23:82:48:80:
         74:65:d2:ea:1d:16:e0:8d:12:65:c1:06:6d:1b:09:f4:f8:9b:
         8e:04:3b:1f:23:79:ac:de:e0:0f:88:55:5b:2c:5e:b9:67:13:
         2b:53:bb:32:a4:c0:ef:93:c1:66:80:3f:bd:19:1e:c7:e8:5f:
         1e:41:95:47:1e:9b:4d:75:70:8c:86:6a:f7:99:78:fc:fa:97:
         eb:f2:7a:a8:e7:ad:a0:c1:58:a9:c4:ee:c2:8a:8b:9e:78:75:
         92:5f:2a:b6:0d:1d:13:8f:b0:be:4f:63:b1:b2:80:58:9e:49:
         1f:db:ae:ab:0a:05:f5:39:bc:cf:88:c9:24:d5:0f:c2:63:e6:
         03:09:d5:24:d0:86:1d:91:75:3c:43:69:24:17:47:86:0b:02:
         91:18:12:2e:c7:46:39:30:c3:c9:88:63:cc:c9:ef:ba:43:7b:
         7a:4c:ed:62:6b:d6:e1:ee:a0:b4:5c:c6:35:63:e8:17:f0:79:
         f7:1c:db:f1:2b:fe:b0:f8:c0:39:ec:44:30:a3:45:d9:de:80:
         51:17:f4:dc:3a:aa:a0:10:12:77:f6:13:bd:88:a5:f6:d9:7c:
         0c:4c:6f:41:1f:ee:84:38:ad:6c:2d:1a:65:7c:3f:6a:be:89:
         ff:d7:e8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:08 2025 by rpki-client