Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91cabb79-9036-3300-b0bf-dad1d3f16525.roa
File:                     91cabb79-9036-3300-b0bf-dad1d3f16525.roa (raw, json)
Hash identifier:          +QYZKA2b3Dr/jN6MKWgexmgwWPx1jA9VnKjxkQFaLYU=
Subject key identifier:   5E:14:A7:B0:73:BA:E2:D6:2B:DA:4E:C3:6F:BB:A2:E5:1A:67:BF:6D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DF5A7B4ABF6670DAB1296A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91cabb79-9036-3300-b0bf-dad1d3f16525.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     16625
IP address blocks:        69.192.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:7b:4a:bf:66:70:da:b1:29:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=0da5a782-153f-4941-bc38-5c85d0a8f22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:35:d1:42:2c:b4:2a:52:19:8b:0e:e7:7b:19:
                    1b:ed:ed:2d:60:19:51:b5:74:19:82:74:e3:7e:fb:
                    91:75:f3:68:1e:4f:9c:4c:30:28:3e:19:e0:04:5b:
                    a1:b3:43:cf:e3:b1:15:1a:73:fa:6a:f3:26:24:2b:
                    44:42:14:34:25:a8:26:f7:4f:77:d0:97:d5:89:c3:
                    19:dc:9e:6f:c5:d5:b2:e5:a4:c9:9d:8c:4c:39:dc:
                    2c:ee:53:5f:1c:1d:fd:3e:30:dd:74:69:65:c2:59:
                    c9:1b:b0:d7:bd:e4:c7:6b:a2:7d:9d:bc:89:af:17:
                    bb:49:2b:bb:34:b0:de:50:f5:28:a8:1e:42:bf:d8:
                    63:48:48:ee:bc:7b:ac:b5:fb:fa:c3:c0:c6:aa:8f:
                    0b:94:23:36:18:91:63:6b:d5:16:e0:9d:ce:be:28:
                    fb:a2:6a:83:53:16:64:05:aa:5f:f1:66:11:d0:0c:
                    8c:db:0e:7b:2a:31:4f:05:5e:2d:07:56:91:d2:8f:
                    09:e1:42:2b:2d:e8:8a:6d:87:cf:e8:9d:0c:d9:25:
                    74:be:2c:e4:cb:c7:0a:4d:30:61:36:bf:c3:c6:b4:
                    cb:89:64:14:f5:19:03:56:2d:0a:21:79:83:69:d0:
                    2d:b9:65:a2:f6:a6:08:fc:ca:d1:e6:6b:5d:1f:68:
                    0d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:14:A7:B0:73:BA:E2:D6:2B:DA:4E:C3:6F:BB:A2:E5:1A:67:BF:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91cabb79-9036-3300-b0bf-dad1d3f16525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.192.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:66:34:05:62:15:4a:85:ac:2d:ad:b6:01:ee:57:0e:66:a5:
         29:ee:a0:e7:63:39:bf:c1:ad:2d:80:d2:b6:b8:ff:fd:76:5d:
         07:59:4a:95:49:9c:f8:61:b6:39:71:b5:4c:cc:21:58:47:9d:
         c6:93:55:53:34:be:74:8f:73:9c:8c:42:89:d8:ff:a0:a9:aa:
         af:ee:88:ff:93:31:76:63:5a:79:b1:e2:bf:8d:2f:19:a4:de:
         9d:99:d3:ef:23:b1:87:5a:f1:1a:e9:36:3c:64:41:75:b1:e3:
         7c:a0:13:26:b2:ab:1f:b5:4e:09:75:d9:ac:e0:c2:20:d4:5f:
         1c:76:8c:52:10:23:7d:02:b5:05:1b:94:b2:8d:d1:ef:9c:b6:
         dc:98:c1:cd:1c:21:45:70:e4:1c:3a:fe:fe:77:61:41:de:0a:
         df:65:18:67:30:44:9c:fe:cc:b7:23:ae:dc:04:48:cc:d1:06:
         ea:10:83:b1:0c:2f:70:96:9c:b7:99:51:6e:9c:6a:ce:b6:76:
         09:34:9b:b6:a0:a5:c7:e7:97:a6:7f:7e:7b:3a:8e:d5:46:b0:
         18:74:60:81:8e:df:37:2b:64:3a:21:1b:75:50:2b:a0:1f:5f:
         3a:d4:29:2b:78:41:a7:5c:09:d8:f2:b7:ec:7b:ec:8a:b9:6b:
         36:00:08:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:18:45 2025 by rpki-client