Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa
File:                     9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa (raw, json)
Hash identifier:          pChDrAlmF5Kg3fPIigidqVg7HSwR+kIKXei1caLnWuk=
Subject key identifier:   AB:D4:4E:33:C4:39:CF:FB:CE:78:72:8A:A7:DC:BB:F0:DC:36:56:48
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584A0D6A83BA39FA0B30D03E1E80
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     40934
IP address blocks:        69.48.238.0/24 maxlen: 24
                          209.40.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:83:ba:39:fa:0b:30:d0:3e:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=b4b96c08-8168-4740-bda8-eb0389625612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:f4:95:57:79:b8:58:f6:c8:9a:7f:51:cb:
                    08:fa:63:30:92:f9:39:5d:41:a4:17:fc:7f:39:b1:
                    3c:0d:ce:e4:01:bf:6f:3b:1f:90:f5:f5:11:03:d0:
                    10:6d:9b:80:e1:d4:fc:cb:bc:ae:ed:ae:df:58:bf:
                    f4:af:83:e4:f4:d6:ba:4a:83:45:50:c6:0f:74:e4:
                    89:08:7c:6e:74:17:5d:04:67:82:64:dc:3a:9a:dc:
                    c0:10:95:ff:11:be:17:f8:53:80:97:a9:84:32:e9:
                    84:87:23:d1:67:41:b8:27:ba:a5:d9:39:8c:9a:cf:
                    b4:83:ae:98:db:9b:ea:61:6c:75:d1:e1:e5:1f:e5:
                    2f:93:3f:cb:c9:9e:0e:0e:4c:de:79:1f:a8:36:4e:
                    5f:29:63:87:68:43:fe:b9:e6:18:fd:23:2f:5f:29:
                    3e:c6:4f:6e:66:93:12:1f:35:c7:a7:9d:15:8e:d6:
                    62:69:a7:60:d3:ed:c1:75:22:bc:53:32:41:40:d1:
                    2c:c2:8f:20:d1:6c:89:17:fd:e8:ac:f2:bb:d6:7e:
                    21:41:c9:d6:5b:1c:6f:95:35:98:cc:de:03:76:4e:
                    3c:e9:8c:0c:ef:f2:0f:21:56:4e:24:16:e1:dd:09:
                    84:8a:10:1a:49:45:50:99:3c:77:27:9e:d4:66:39:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D4:4E:33:C4:39:CF:FB:CE:78:72:8A:A7:DC:BB:F0:DC:36:56:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.238.0/24
                  209.40.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:42:b7:8b:cd:1d:4b:32:62:f7:3f:0b:cd:84:77:fa:94:4c:
         59:e5:93:de:1d:0a:93:0f:30:32:13:3f:4a:d2:ba:0e:c1:29:
         b7:c1:f8:50:33:46:8c:72:aa:df:c4:76:a5:7f:c6:3a:83:c3:
         33:e3:b3:9e:a0:51:38:05:dd:b9:8a:a8:5e:dd:99:17:d1:9e:
         ce:9c:06:4c:22:84:9a:3d:50:5c:85:a1:c7:a7:bb:e5:55:09:
         38:68:31:db:30:ec:21:6c:01:f3:54:2f:34:35:46:21:8e:0e:
         89:e9:33:b5:49:a8:cc:79:d3:61:d1:ce:86:97:ab:b0:28:99:
         f1:04:29:98:54:c5:47:3b:93:c7:53:54:60:3b:ba:9b:8c:2d:
         ff:77:f5:bc:84:b7:da:50:40:69:ae:6a:f6:af:f0:2d:b5:e6:
         ef:32:a0:73:87:83:81:80:4e:86:fc:42:94:c2:ed:7d:e1:15:
         fb:d7:d8:60:7e:7a:e7:bd:a0:2e:e0:4e:5c:5a:67:53:b7:b2:
         49:85:3f:9a:86:e4:4c:90:62:01:28:a5:1e:18:16:5b:7a:67:
         09:39:80:fc:ef:29:76:71:e7:ae:38:b9:0a:93:4e:12:78:e0:
         74:54:53:04:6c:5c:a7:ff:81:ab:ba:1b:f1:7d:66:06:73:08:
         39:19:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:31:08 2025 by rpki-client