Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/c0b646e9-5e2a-3452-8ac7-bf4e33b82533.roa
File:                     c0b646e9-5e2a-3452-8ac7-bf4e33b82533.roa (raw, json)
Hash identifier:          oq2Xvx+OBwHyZ2pkKWKU+Dpmg7W5bmLE4Oe1dJ2ubSU=
Subject key identifier:   2B:25:87:2D:61:D9:0B:C7:BA:8A:36:6D:7D:38:1C:54:0A:2E:6D:1E
Certificate issuer:       /CN=6fceed53-754a-4a1a-9f77-5921f5f4dad2
Certificate serial:       010D0C9F4328584A2ABAD8E57D68930ED17B7700
Authority key identifier: 1C:E3:EB:27:BF:AE:95:55:E8:B5:7B:3C:20:DF:AE:93:9E:17:4D:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/c0b646e9-5e2a-3452-8ac7-bf4e33b82533.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     14197
IP address blocks:        69.84.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:d8:e5:7d:68:93:0e:d1:7b:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fceed53-754a-4a1a-9f77-5921f5f4dad2
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=659887d8-3154-4a3d-adfd-aea9e6149458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3a:7a:a9:30:e9:e5:ac:11:bc:01:24:f0:13:
                    a6:0f:e3:66:1f:7a:13:01:a3:a2:14:a5:42:a8:14:
                    10:c0:3b:70:c8:7f:e6:9b:89:23:92:d7:9a:98:27:
                    cf:1f:8e:35:f0:23:53:a7:39:d4:08:2f:6d:3e:02:
                    d8:55:40:b3:99:71:5b:0f:42:67:e6:8a:ce:d0:20:
                    ff:f9:d2:af:18:13:67:57:0d:73:d1:b3:11:44:a9:
                    3c:80:77:a2:f3:0b:dc:9a:28:79:0a:8e:21:c7:1c:
                    97:e0:4a:7e:b6:36:ac:44:16:9e:00:28:cd:8e:7a:
                    59:e1:4c:b8:ce:2c:a4:a8:bb:02:eb:31:c3:3c:3d:
                    da:dc:6d:bf:98:3d:dc:99:86:14:9c:be:2b:a2:ff:
                    a1:58:32:ac:ca:db:85:9e:d6:09:1c:8a:f4:cf:60:
                    aa:12:ba:8d:04:eb:ed:9b:f6:75:6a:6d:bf:bb:1b:
                    fd:b1:da:7a:e6:0e:e7:c1:20:5b:a8:99:67:92:41:
                    22:9a:31:5e:c2:4d:ea:6a:b6:90:d9:78:4e:33:97:
                    52:e3:e8:20:2a:bb:b7:49:ac:f9:6f:45:cf:f9:b5:
                    00:60:48:06:45:31:4e:38:b8:66:e3:21:84:b9:3d:
                    07:02:62:da:ce:9f:3d:ba:8e:87:9e:6a:9a:a1:46:
                    6a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:25:87:2D:61:D9:0B:C7:BA:8A:36:6D:7D:38:1C:54:0A:2E:6D:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/c0b646e9-5e2a-3452-8ac7-bf4e33b82533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.crl

            X509v3 Authority Key Identifier:
                keyid:1C:E3:EB:27:BF:AE:95:55:E8:B5:7B:3C:20:DF:AE:93:9E:17:4D:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.84.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c4:2d:bc:af:b7:d1:55:18:70:b5:da:20:02:6a:04:98:3e:
         7e:1e:2c:d9:2f:0e:3a:18:e7:9d:ed:df:9e:d5:3f:27:f7:77:
         bb:ab:33:ad:78:2d:d6:46:fc:b2:6b:65:50:77:1a:0b:ab:b2:
         7f:e3:63:b6:a4:99:c5:e7:34:8f:85:4f:03:91:3e:4c:70:25:
         94:2e:a5:74:55:a6:37:f4:21:1c:1b:fd:f0:ee:30:f4:16:05:
         73:b3:2f:ed:57:87:7a:22:ea:a8:57:e4:64:67:ad:2a:0a:f5:
         2b:47:fb:25:93:e3:c2:a9:41:02:b2:c0:7a:21:79:6b:d7:1d:
         d0:f4:82:d7:18:61:58:0b:70:16:28:d8:ac:2f:38:87:84:66:
         67:5e:7f:4d:53:64:6a:b9:d8:d4:6d:88:dd:10:58:9b:e0:23:
         5b:7a:9a:2e:4a:38:66:c9:d8:09:03:40:75:0b:2b:13:17:87:
         52:62:19:68:fb:34:e0:15:af:d8:c2:91:3a:a8:01:5c:f0:1a:
         5a:22:6d:ce:7d:77:93:a5:c6:21:a2:06:30:06:a7:27:c1:6b:
         0d:1d:49:99:f5:1f:21:e7:af:04:6e:6d:0e:8c:38:f4:16:51:
         82:82:7e:84:fe:5b:f6:d5:b6:b7:ce:01:3d:57:b8:99:cb:3b:
         a9:2d:68:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:49:28 2025 by rpki-client