Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/beabc413-c81f-308f-a243-574685a79d38.roa
File:                     beabc413-c81f-308f-a243-574685a79d38.roa (raw, json)
Hash identifier:          +tRN4YYkPbmZmkZ8fxS60suSzpc0nW18CuDcNen4hzY=
Subject key identifier:   9F:45:10:2C:C0:99:C1:9B:55:AD:30:9E:EB:0A:93:F0:D9:D2:D5:A7
Certificate issuer:       /CN=6fceed53-754a-4a1a-9f77-5921f5f4dad2
Certificate serial:       010D0C9F4328584A8B0B5EF22F77D392C1057670
Authority key identifier: 1C:E3:EB:27:BF:AE:95:55:E8:B5:7B:3C:20:DF:AE:93:9E:17:4D:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/beabc413-c81f-308f-a243-574685a79d38.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     29928
IP address blocks:        69.84.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:5e:f2:2f:77:d3:92:c1:05:76:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fceed53-754a-4a1a-9f77-5921f5f4dad2
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=ade2048d-5b6c-4406-aa1b-0a24f77325e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c4:12:a9:fc:a2:a2:da:90:61:14:b5:5c:4a:
                    17:8c:45:9c:0c:73:f7:52:8a:15:ed:0e:bc:9e:14:
                    27:7b:4e:4b:7d:b2:d4:1b:10:28:94:a4:43:50:cd:
                    87:6e:c0:d3:38:5e:c2:29:0a:47:57:ff:ab:aa:ca:
                    f9:a6:0e:72:ce:f4:77:76:c4:44:24:dd:25:5e:e7:
                    fc:5c:fa:8e:a3:4a:2b:d2:c1:ee:e1:de:0f:7e:ab:
                    ea:04:8e:23:af:ec:3b:54:93:c0:d0:41:7e:7b:fc:
                    41:27:84:de:63:95:f8:03:ab:fb:b6:c3:03:3a:d0:
                    53:b8:d6:8b:90:58:f4:b2:fc:fb:26:12:11:9f:2e:
                    42:79:bc:f8:b2:b5:c4:02:61:62:f3:dd:ca:25:87:
                    c4:68:f0:f3:48:e8:7d:32:dc:67:63:cc:85:76:7b:
                    ba:f9:a1:6b:9c:54:99:cb:75:a4:09:96:cb:b9:ef:
                    7e:74:65:00:f4:b2:bd:f7:50:7a:b5:b4:fd:2e:d0:
                    c2:51:d7:a2:a7:cf:e7:76:a3:68:1f:91:11:9d:19:
                    09:c7:22:56:05:89:d0:5c:6c:60:73:4c:70:d9:4b:
                    cc:76:10:69:df:26:03:69:dc:7f:30:4c:0b:a1:c0:
                    72:fe:b4:c4:7e:ae:43:0a:59:f0:98:1e:b6:ae:2c:
                    af:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:45:10:2C:C0:99:C1:9B:55:AD:30:9E:EB:0A:93:F0:D9:D2:D5:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/beabc413-c81f-308f-a243-574685a79d38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.crl

            X509v3 Authority Key Identifier:
                keyid:1C:E3:EB:27:BF:AE:95:55:E8:B5:7B:3C:20:DF:AE:93:9E:17:4D:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.84.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:25:0a:4e:ad:6f:6f:d1:00:a7:8b:7e:27:ae:04:6a:ec:3f:
         1a:3b:9a:27:13:2e:95:77:35:12:43:33:97:6e:33:f1:29:bf:
         a4:de:0d:43:22:88:23:a8:a5:e1:1a:8a:77:c2:65:9c:5b:e0:
         71:fb:18:2b:5f:ac:24:d4:72:4d:ee:e5:76:15:04:6c:5d:9b:
         77:c6:26:60:ca:ed:53:e8:8b:23:30:d9:69:9e:3f:98:13:fb:
         af:9b:3b:82:6e:e6:89:53:ba:71:19:21:aa:50:3d:c9:f2:03:
         80:32:2d:aa:e9:50:84:21:40:88:7a:d7:db:6f:85:04:d9:9e:
         dc:ea:3f:6b:cc:b4:ef:e0:97:ec:fb:ae:a4:51:88:9d:43:03:
         4a:ff:a2:ca:90:d2:ab:78:4e:1f:d0:a5:32:d3:2e:5a:ff:f6:
         ba:24:5b:11:65:0e:5d:92:dc:bf:aa:43:e7:73:8b:bf:51:0b:
         04:97:a3:02:71:cb:37:18:64:3f:34:ca:35:ac:8b:71:93:c3:
         3d:f5:bd:16:0e:3d:ef:de:cc:90:4f:3b:6a:61:43:88:36:85:
         1d:d1:3e:71:44:a6:d8:16:bf:de:f3:be:14:86:50:fc:50:38:
         ee:cc:88:6a:7e:28:71:fa:1b:c3:29:f8:ca:b5:59:26:94:cf:
         6f:fd:3e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:30 2025 by rpki-client