Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7b0ec10-2bdc-3d64-b93e-a5d73c31593b.roa
File:                     b7b0ec10-2bdc-3d64-b93e-a5d73c31593b.roa (raw, json)
Hash identifier:          2ug8yTejqUt7T4P0o1vJqYtEQfQyERM6s2s0FP4fYf8=
Subject key identifier:   F0:02:08:51:21:C3:55:BC:41:65:92:4D:3B:53:0C:B1:E5:90:61:C5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA8EF06C740D3731286000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7b0ec10-2bdc-3d64-b93e-a5d73c31593b.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        69.158.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:8e:f0:6c:74:0d:37:31:28:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=67394d37-a099-4c76-95a5-264549d44d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:df:46:49:90:51:ec:23:76:00:f9:f1:d0:af:
                    cc:de:b7:f5:7c:0e:17:59:dc:a0:25:d3:3a:84:08:
                    36:99:1a:d4:fd:e0:a4:9e:8e:3c:06:fc:af:67:a5:
                    a5:9c:09:4f:8d:ce:01:a2:f8:6e:f5:f8:dd:65:14:
                    76:90:f7:dc:6f:ff:40:0b:71:e4:94:0b:37:44:ec:
                    72:8e:0a:de:37:fb:50:28:67:64:4d:9e:3f:be:6d:
                    8a:63:6d:38:9b:fd:14:55:6e:03:e5:e6:54:55:25:
                    bf:e1:ff:1f:5e:11:96:a6:d6:12:d3:d5:7a:8f:10:
                    2f:32:ea:81:35:1c:22:e0:9d:c3:66:a2:31:50:a0:
                    cb:99:76:67:b9:1b:16:74:39:65:dc:fe:15:49:af:
                    78:bf:3e:1b:80:cc:88:f9:c6:2e:0c:d4:1e:a1:9b:
                    4e:4f:01:88:64:b9:e1:8f:d4:76:3d:dc:5a:9f:01:
                    2c:47:09:82:0e:5b:92:3f:aa:32:6a:26:e6:0d:76:
                    25:2d:36:c1:16:40:e0:41:b5:c3:49:d2:85:08:43:
                    ff:eb:00:d1:d9:6e:43:03:ad:a9:cf:b9:aa:06:22:
                    c8:08:4c:c2:ec:df:a8:39:0f:39:48:e7:d8:51:94:
                    06:13:c1:81:6a:10:a6:67:90:53:c3:66:b1:73:a3:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:02:08:51:21:C3:55:BC:41:65:92:4D:3B:53:0C:B1:E5:90:61:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7b0ec10-2bdc-3d64-b93e-a5d73c31593b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.158.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9a:13:38:85:6d:11:46:bf:22:00:c0:c3:b3:9e:3e:a0:8d:
         06:dd:04:ae:6d:64:7c:9d:6c:67:c3:cb:8e:ac:04:96:7c:be:
         4a:cd:57:04:2c:4e:c5:19:6a:5f:ce:b5:72:51:d8:f7:b7:ae:
         83:26:15:35:a1:b6:ab:f1:f2:5e:55:e7:51:0c:72:75:87:e7:
         10:cb:d3:1e:ac:f6:af:f1:2d:12:79:14:37:02:d1:8a:a5:73:
         86:55:85:dd:79:4a:e9:29:13:b7:c3:45:46:92:4b:67:1d:cb:
         48:c1:e6:22:d8:c1:6b:59:0b:4d:ab:30:28:fa:12:5d:3a:1f:
         94:52:5b:aa:3c:b5:ee:35:c5:10:06:c1:89:44:d8:ea:07:9d:
         88:b9:b8:71:a0:11:83:9c:b1:02:00:38:f0:4f:c5:d6:9d:ab:
         22:c2:49:da:6f:ae:7d:68:39:4d:c9:ac:b8:0e:22:4d:17:ab:
         9e:f6:7a:36:55:fa:13:8c:88:7a:85:ae:7b:89:75:f2:e3:72:
         4a:aa:6d:1c:46:ad:5c:f6:75:5d:79:90:05:07:84:fa:e7:28:
         85:83:8c:51:72:11:11:e2:1a:41:a1:70:74:1a:31:e0:52:4a:
         72:be:f2:68:09:6f:b5:ff:de:b6:54:8c:f9:1a:62:e5:d6:18:
         79:72:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:11 2025 by rpki-client