Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b82ece2e-61b5-3a1c-977c-6d1e74f169f4.roa
File:                     b82ece2e-61b5-3a1c-977c-6d1e74f169f4.roa (raw, json)
Hash identifier:          /J8Hcn22SzymSfF+2E1GH/4P0xfPcZawYRSsGtafcW8=
Subject key identifier:   84:5B:25:05:2C:0A:54:2D:16:12:D5:53:81:A7:65:31:3B:CE:10:CD
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F43285848EF613150402E1B72ABE7A040
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b82ece2e-61b5-3a1c-977c-6d1e74f169f4.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     7782
IP address blocks:        69.161.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:31:50:40:2e:1b:72:ab:e7:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=9a749254-4053-4436-ad2e-affa7b5a1f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:51:00:3c:ca:4e:9f:c0:83:c5:ce:f0:ab:cb:
                    95:61:4c:d7:92:fd:ef:c6:35:c5:52:13:f4:cb:73:
                    c8:d3:12:39:cc:d7:62:9b:a6:f9:0b:45:f1:bf:e7:
                    a2:89:12:1f:fa:1f:8d:e5:b1:6a:04:62:f7:ce:21:
                    04:35:07:8c:76:89:3e:ff:97:b1:56:88:46:e0:86:
                    55:fb:0e:5c:47:5e:d7:90:cf:96:c0:c0:1b:e6:db:
                    f1:9a:4a:1c:e2:1f:68:80:1b:fd:be:f0:af:51:ab:
                    30:0e:c3:9e:62:67:02:2e:7f:50:84:4f:ee:13:ac:
                    d0:7c:ed:02:c3:ff:d7:63:c1:1a:26:60:2a:de:48:
                    bb:51:1c:12:02:26:4a:5d:c0:cb:4d:d6:d9:7b:79:
                    ff:44:7e:b6:f6:c1:bd:49:d5:2c:65:a0:0a:dd:88:
                    fd:2d:48:83:a0:73:e8:3f:c3:67:80:13:3e:37:3c:
                    a2:02:be:23:1d:c8:42:f9:44:b2:84:5b:7a:8a:c2:
                    c7:59:a5:14:5e:85:95:1f:cc:3b:e3:f8:b3:86:e0:
                    1c:c6:25:d6:c5:f7:ef:0a:1a:e8:9a:3c:97:36:b8:
                    9d:09:b1:48:b3:fb:eb:a7:1e:db:cc:19:63:88:3b:
                    84:0c:e4:0e:66:da:1a:8b:89:cd:38:98:12:ae:77:
                    9d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5B:25:05:2C:0A:54:2D:16:12:D5:53:81:A7:65:31:3B:CE:10:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b82ece2e-61b5-3a1c-977c-6d1e74f169f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.161.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d7:63:f9:45:4c:7e:a6:bf:01:4e:47:d6:5c:a8:23:27:70:
         44:dd:fb:cb:0c:fd:7a:c2:16:96:1c:7d:4a:68:03:e8:a0:6d:
         d5:f6:57:fa:e8:03:8a:88:a2:7b:97:ae:bb:62:7a:fa:9d:e2:
         cc:fa:a1:99:f2:65:e5:c4:f9:77:79:e6:25:5e:ac:d2:b7:02:
         5e:51:87:6b:03:37:6c:89:43:5e:7e:41:a8:3a:44:05:3d:6a:
         d9:4b:fa:7d:b8:4a:d0:59:7a:27:1e:1c:10:5f:b9:a3:6c:d1:
         82:55:41:88:53:5a:ee:1e:05:f5:3e:ab:33:10:5b:be:4d:6d:
         da:20:2b:bb:0a:e7:9b:1b:65:0d:0c:58:3f:b1:eb:24:5e:5a:
         2e:96:49:8a:95:4e:36:8b:aa:04:04:96:60:48:6c:95:70:e3:
         31:b5:e8:d9:cb:25:c9:4b:35:a2:6e:42:ac:ed:6f:2e:4d:c9:
         61:b7:72:14:32:1e:50:85:51:42:25:7e:82:28:b5:a7:43:cc:
         5a:ce:08:a5:9d:2a:c6:d2:6a:6a:90:8d:f3:08:5a:03:c9:1e:
         59:0a:50:8f:f6:a1:b0:1e:8f:36:9d:fb:6a:3c:10:3a:d6:2d:
         67:c8:00:fd:4c:d4:7d:79:7b:44:18:7b:73:1f:d3:22:6d:0c:
         60:63:9e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:00:55 2025 by rpki-client