Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/d776af37-63a1-394b-9314-6c4437b891d5.roa
File:                     d776af37-63a1-394b-9314-6c4437b891d5.roa (raw, json)
Hash identifier:          OO6mthN9SzUUlejE2oeq7LxQxz7ikRdenwhgjwkrUes=
Subject key identifier:   BE:5B:44:CA:AB:E3:55:8A:C1:ED:7A:22:1D:D3:F3:09:B4:88:FF:67
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F43285848EF61551E1A9C3333F23BC080
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/d776af37-63a1-394b-9314-6c4437b891d5.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     19197
IP address blocks:        69.41.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:55:1e:1a:9c:33:33:f2:3b:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=767b7b2e-782c-4675-9c82-1b47f48812c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:98:3c:ac:87:0e:7a:52:ab:3d:70:f3:87:f7:
                    ae:d9:4e:9a:22:84:2f:ab:eb:e9:14:89:2c:6d:90:
                    64:b2:5e:f6:dc:9b:3c:5f:2b:e3:af:8e:49:3b:54:
                    71:a3:59:af:eb:9f:fe:6d:0a:df:f6:28:51:0f:56:
                    7f:e9:54:2c:07:33:1b:c0:cc:0c:b9:d6:78:96:73:
                    fd:00:8d:c0:37:ad:f1:f4:67:f6:a8:7b:81:02:e4:
                    e3:11:c9:6b:95:bc:d5:71:92:cc:86:5a:95:26:b4:
                    9d:bc:ba:1a:2a:8a:8c:6e:0b:09:ce:cc:6c:fb:b5:
                    90:db:c4:a9:d0:34:c1:6d:72:b4:71:35:4c:8f:76:
                    9f:38:db:1e:c6:e3:05:d0:a9:7c:3d:29:c2:1f:d6:
                    91:df:21:9e:d9:4f:73:bf:b6:2c:d3:67:7c:12:63:
                    48:95:47:83:c3:f3:be:f6:c4:d5:34:06:76:ab:7b:
                    5a:78:04:5d:13:ba:80:e6:c8:8b:65:3a:b4:c7:77:
                    3c:69:2d:12:06:d4:db:ff:2a:03:6d:ad:7d:b0:81:
                    3b:9f:93:20:d5:36:34:ec:4f:a2:24:de:35:85:ce:
                    19:df:c1:96:75:17:23:c1:b2:7b:cb:16:b6:5b:35:
                    22:5e:3a:5c:48:9c:e5:75:d9:80:18:33:f7:22:47:
                    f4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5B:44:CA:AB:E3:55:8A:C1:ED:7A:22:1D:D3:F3:09:B4:88:FF:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/d776af37-63a1-394b-9314-6c4437b891d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:f2:69:40:f0:7d:0b:5a:cb:0c:68:d6:db:d3:e1:f3:7d:37:
         24:6e:d1:71:47:d2:09:87:57:64:d6:a1:86:c8:f2:82:ed:98:
         5e:19:47:ce:90:db:be:b8:32:db:a4:40:4f:91:ea:b9:4c:9a:
         bb:24:c6:12:e8:fc:97:82:95:43:a6:c7:7a:ef:d3:9e:e1:d1:
         58:12:b2:44:4d:8e:4e:2b:dd:b0:94:f3:d0:1d:5c:4a:ee:59:
         bb:8a:10:3f:e3:89:c2:31:d2:dd:39:cd:47:3a:28:b3:f4:45:
         ed:80:04:08:b1:74:b8:a8:46:4a:8c:bd:e9:4b:62:06:ca:ca:
         79:68:56:5d:6a:29:48:6e:c8:e2:7e:ac:57:9c:68:75:6d:12:
         7b:5a:9a:b8:f7:d7:48:a7:d8:8a:fb:f2:9f:42:48:cd:56:c8:
         65:77:79:7e:d3:53:52:53:cb:b9:0a:b0:e9:a5:63:b9:11:0e:
         ca:ef:8d:af:58:bd:f1:fc:3d:1b:5e:2a:a3:87:a5:03:ed:50:
         5d:17:8b:b7:e1:54:d4:ea:6c:9b:37:88:03:79:af:5c:1e:dd:
         cd:e5:64:74:a3:90:19:41:04:c2:40:d6:8b:0b:59:45:a3:b8:
         8a:78:44:1c:ef:c7:79:a1:95:63:3d:87:8d:e0:fc:4d:c7:c6:
         3a:d0:50:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:18:41 2025 by rpki-client