Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa
File:                     cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa (raw, json)
Hash identifier:          0U5Y6Rayc6WwAE2O0gYKdhx2Uy1sAQQoLcda/TYosaY=
Subject key identifier:   27:AA:61:7B:3B:1A:DD:25:D8:A1:E3:C2:46:40:71:59:AB:53:81:ED
Certificate issuer:       /CN=ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9
Certificate serial:       010D0C9F43285849C0A4DC5180738CDA31849200
Authority key identifier: 41:EA:CF:00:CF:55:36:EE:11:FB:1E:3D:03:C4:20:D5:38:36:69:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     64230
IP address blocks:        69.161.205.0/24 maxlen: 24
                          2620:e2:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:dc:51:80:73:8c:da:31:84:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=cb4ce1c1-2fe7-40c1-bfeb-2455772ab895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5a:d3:73:81:d7:79:6c:fd:cb:07:4d:f7:ca:
                    20:35:6c:8a:13:d4:26:d7:c5:fc:95:6d:a6:74:97:
                    9c:d4:45:b8:8f:56:1d:ff:9e:9d:67:0c:aa:27:95:
                    bd:5b:5e:ce:04:3b:1c:3a:80:ea:29:f9:26:d9:42:
                    f6:df:de:67:bd:60:42:6c:d1:98:7a:7b:9f:54:ec:
                    2b:52:3f:8b:24:fe:1d:de:c7:5b:c0:5f:f4:2a:66:
                    f4:c0:98:b1:fd:7e:aa:df:c2:46:eb:51:ef:6f:59:
                    1f:43:5f:a0:d0:db:b5:8c:ea:6e:6a:14:f0:21:a2:
                    6b:63:f8:ab:01:31:49:0b:2f:f2:8c:e7:90:f9:58:
                    3e:78:5d:29:81:f4:b6:67:d8:7b:ab:86:ab:a6:6e:
                    2b:73:60:66:a0:18:0f:d0:22:76:54:e9:92:6a:f8:
                    2d:26:35:5a:48:4a:73:54:42:d2:08:27:cc:0a:9b:
                    a3:99:6b:43:f4:01:4b:94:0d:95:5f:88:43:ea:b9:
                    ac:50:57:c5:ee:c9:29:23:56:ea:e5:b2:5c:e9:ba:
                    93:c1:ff:e7:45:f8:f0:c8:81:c1:cd:46:56:3e:c8:
                    b3:40:99:8d:23:40:7d:cb:be:58:94:88:79:81:46:
                    b9:96:22:1a:12:cd:77:f4:1f:c5:8e:c6:7d:80:92:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AA:61:7B:3B:1A:DD:25:D8:A1:E3:C2:46:40:71:59:AB:53:81:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.crl

            X509v3 Authority Key Identifier:
                keyid:41:EA:CF:00:CF:55:36:EE:11:FB:1E:3D:03:C4:20:D5:38:36:69:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.161.205.0/24
                IPv6:
                  2620:e2:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f2:27:7c:1b:98:a7:3d:4f:72:91:4c:38:26:91:11:a5:cd:
         2d:d1:ac:43:4e:59:50:f3:9a:bb:c8:0a:8e:0c:e6:7a:c4:61:
         99:20:b0:55:61:e6:0b:c2:cc:c0:96:7e:d8:10:c6:93:43:16:
         22:bb:4b:78:c2:7d:22:65:8d:99:0a:e7:e9:8f:08:76:cf:6d:
         50:71:64:81:45:a1:16:15:44:cb:2b:d0:e6:ea:ef:8d:b5:a3:
         0d:67:50:97:3c:0b:48:f8:2d:b3:8f:97:7f:3b:55:e3:bd:ef:
         09:18:51:60:6e:06:14:b9:b5:67:f0:51:cf:7a:ec:eb:da:1b:
         76:c9:7b:c3:1b:82:cf:1d:05:6a:49:6b:c4:ff:62:d7:64:72:
         cd:64:f3:32:93:e7:65:0a:12:ba:46:18:ae:09:17:64:5f:1e:
         47:38:39:ca:eb:31:f7:93:88:70:ee:14:50:8b:6b:40:34:42:
         8b:43:3e:2d:e5:23:f3:80:93:6c:d7:f1:7f:71:71:e8:77:e7:
         55:75:ff:6e:62:84:41:02:5a:6b:e0:c1:61:19:24:8e:53:b7:
         38:38:4f:d8:bc:a7:2d:88:6d:d1:eb:3b:bd:d9:34:76:72:82:
         2c:b1:a5:46:8c:d7:73:4e:a7:3f:ba:4e:16:51:a3:ae:7a:6f:
         8e:f9:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:55 2025 by rpki-client