Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8a6f32c4-dc58-3dc3-82d8-9190199e51ba.roa
File:                     8a6f32c4-dc58-3dc3-82d8-9190199e51ba.roa (raw, json)
Hash identifier:          2bKZbMWJvz4iXkJ0qIVI7FrwR7wN2F7SZ7ncq60S8yY=
Subject key identifier:   41:9C:97:C1:20:6F:44:61:E3:B4:0A:E2:43:BC:A6:89:BE:E9:E1:9A
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F43285849CE9A41152A113D9C6A525300
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8a6f32c4-dc58-3dc3-82d8-9190199e51ba.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     19197
IP address blocks:        69.41.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:41:15:2a:11:3d:9c:6a:52:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=adeb2ea9-b42e-4747-a3a3-0cb4840980da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:a6:ec:47:2e:6f:53:68:27:61:7d:b6:7b:
                    22:ab:7b:32:0a:df:e7:e7:56:7c:7f:6d:76:aa:2e:
                    ef:35:ee:86:a9:e9:2f:91:36:e3:3a:34:62:f4:17:
                    36:70:60:e6:9d:14:93:f8:cd:61:80:b4:42:02:6a:
                    95:6f:e5:c2:61:17:1b:02:c3:31:49:4e:b9:0e:17:
                    83:00:67:e3:df:48:ed:60:9b:79:cf:42:c3:39:77:
                    18:50:73:2f:9a:cc:bc:64:56:77:04:eb:7d:59:2a:
                    5e:a1:73:1f:14:ca:94:7c:9c:22:8b:86:b4:3b:f0:
                    20:3b:71:f1:fa:83:3a:1c:28:39:27:a8:73:f6:74:
                    5a:18:61:d9:ce:50:86:d9:56:74:da:6f:bd:39:25:
                    45:69:0c:71:03:02:f6:2e:05:c3:c7:53:e5:df:eb:
                    e7:54:e0:33:73:d9:ee:32:4f:11:2b:7c:cb:bc:af:
                    3f:3c:ef:60:31:b0:f1:32:bd:f9:a1:4f:ee:0c:c8:
                    0e:ed:78:30:c3:9b:53:9a:67:0f:95:29:d7:ce:18:
                    fa:d2:c4:67:0e:25:a4:5d:21:d4:0b:fa:88:bf:38:
                    de:fb:70:08:29:c4:1f:e2:0e:c5:6f:6e:7a:ec:be:
                    94:cf:09:fc:07:60:95:ee:11:55:42:ae:f1:a0:36:
                    24:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9C:97:C1:20:6F:44:61:E3:B4:0A:E2:43:BC:A6:89:BE:E9:E1:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8a6f32c4-dc58-3dc3-82d8-9190199e51ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:25:dc:29:70:92:0c:b3:db:28:73:65:7b:51:8c:56:9a:d8:
         5c:30:62:fb:8c:a3:cb:b8:ed:d4:82:55:43:92:ac:6f:60:27:
         c2:f3:93:7d:a9:df:db:69:f9:a1:13:18:53:1c:d8:8a:76:19:
         5a:70:5a:12:78:a4:4e:48:3c:d4:d4:b4:af:b0:c4:03:72:b5:
         b2:01:80:07:12:03:ec:75:62:3e:03:14:52:6c:1e:cb:26:bc:
         fe:42:9c:69:f3:20:63:1c:54:b6:83:c2:5b:8b:d3:df:82:02:
         d6:37:ae:d0:ae:6d:8c:55:f2:76:30:fb:95:d1:d0:12:03:ed:
         a6:a9:e1:b0:33:b0:83:c3:d4:ae:1b:e4:1a:b2:b3:b9:74:d9:
         9d:38:62:78:d1:89:f7:91:1b:a5:85:7a:3a:bb:47:a6:c7:a6:
         dc:8c:a0:4f:3d:fc:0b:dd:d0:8b:6d:61:16:6b:b2:bf:7b:9c:
         8f:e4:a1:e3:9e:75:5a:6e:41:ee:cc:ef:f1:48:07:17:d5:7e:
         b5:bf:ea:72:3d:d8:4e:73:3b:e0:c0:bb:9c:fd:cb:88:1b:f8:
         fc:f0:f4:10:62:fd:cf:58:57:88:6e:6f:ef:4c:d9:fb:37:81:
         22:2d:bd:cb:b2:28:d0:e2:a5:97:9a:57:4e:39:c1:8b:b2:6d:
         ba:95:f5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:12:10 2025 by rpki-client