Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1abfb895-2b7d-37c3-a600-980b35057f17.roa
File:                     1abfb895-2b7d-37c3-a600-980b35057f17.roa (raw, json)
Hash identifier:          09Nd2jWiaNfIf3NcjS2/Y2ycwkO4RVvvNtDp22ph7R4=
Subject key identifier:   BF:61:E3:FE:BD:45:E5:1F:5E:4A:4F:AE:58:D4:23:E3:DB:05:73:4A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA8CEE7BA2C9EAD20084E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1abfb895-2b7d-37c3-a600-980b35057f17.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        67.69.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:8c:ee:7b:a2:c9:ea:d2:00:84:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=f9f98ef4-74d9-4d8e-a945-2b6862cec88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:0e:61:b7:84:bf:f4:16:8b:26:42:ae:71:
                    51:5d:b3:06:43:5c:a5:47:b1:b2:dd:ae:5c:3c:54:
                    45:a4:b4:54:1d:5c:da:4d:0c:4c:4c:9f:5f:84:fa:
                    21:95:3b:ac:b2:ee:e0:fe:4a:6e:af:ab:ca:8f:bf:
                    f0:ea:86:9b:fc:1c:64:a3:a4:e0:ab:40:1b:14:e3:
                    06:ab:8b:e8:94:52:15:7a:af:15:2d:a7:8a:96:4a:
                    02:f5:fe:c7:c7:19:8f:af:c9:62:90:44:c1:e7:92:
                    13:7e:85:35:c5:ca:35:2e:76:8f:62:1e:16:07:9e:
                    9f:2a:da:51:34:68:ca:75:ff:8b:95:ec:a8:4b:bb:
                    cd:a0:9c:94:b0:35:f4:43:e0:63:01:08:ac:44:82:
                    14:77:0d:fb:b5:2a:0b:b5:34:90:8e:c2:04:4a:d9:
                    ff:64:f0:2b:1f:03:ed:6c:53:94:9d:5f:0e:34:9f:
                    90:d0:91:a6:29:ff:bf:f5:53:3d:bf:98:ab:57:99:
                    52:66:d8:57:d2:67:f7:73:72:a8:82:56:1f:06:bd:
                    d0:40:8f:3d:16:91:64:66:9d:0e:4b:43:fb:4d:ef:
                    02:38:24:63:5a:8b:9e:98:15:d0:96:31:c1:a0:06:
                    19:61:13:e8:02:7c:00:c8:ff:8d:82:92:2e:7d:f3:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:61:E3:FE:BD:45:E5:1F:5E:4A:4F:AE:58:D4:23:E3:DB:05:73:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1abfb895-2b7d-37c3-a600-980b35057f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:31:84:35:52:14:0d:52:8e:52:7a:89:d4:3b:11:cc:de:d9:
         45:0b:f3:41:f7:fd:74:03:68:31:00:25:b3:4a:09:61:3e:35:
         aa:e4:13:f2:5e:a3:f6:3d:3b:57:9e:16:13:21:9f:1f:e3:81:
         6d:aa:11:41:57:37:14:5a:81:d4:f2:94:e5:31:ae:fd:72:3b:
         34:34:19:56:c9:4d:5e:a6:e7:db:1e:da:08:3c:94:df:55:a2:
         9d:c5:9e:dc:4a:2b:3b:74:c2:99:de:64:5d:06:fd:7f:e9:df:
         c5:08:2a:6c:9f:40:20:b5:75:e2:07:34:da:55:88:61:91:49:
         96:99:cb:a9:77:5d:f3:8d:20:73:f4:dc:d9:30:da:8f:1c:8c:
         27:ed:a3:26:56:de:c1:a4:c7:e0:dc:d5:33:81:3f:2b:79:3b:
         f4:cf:e3:b0:b3:ee:08:ef:d5:90:f0:7e:93:fe:9b:67:df:1f:
         e5:d1:fc:4b:7d:ee:48:a5:94:53:a0:60:d4:0f:3d:32:25:24:
         09:14:c5:2c:13:4d:74:18:ce:9e:2d:4a:05:ec:67:0b:77:15:
         95:4c:35:c1:77:b7:be:bc:66:51:a5:5d:fc:87:bf:f0:7d:48:
         ec:e4:55:19:1a:01:6b:52:9d:71:59:80:cf:f5:af:44:77:27:
         03:9f:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:59:47 2025 by rpki-client