Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/3e68afed-22af-3d7e-a55b-cec0ac760603.roa
File:                     3e68afed-22af-3d7e-a55b-cec0ac760603.roa (raw, json)
Hash identifier:          6QIpMM6SEaCHyNTgk/+47G4EgFcrFty5yYsz4fc35Io=
Subject key identifier:   08:07:C6:AE:B8:78:4E:D9:1E:45:C6:E2:C3:64:61:38:89:14:3B:37
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285849A4B9F6732EA61DD2E388BC00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/3e68afed-22af-3d7e-a55b-cec0ac760603.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     14813
IP address blocks:        69.80.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:b9:f6:73:2e:a6:1d:d2:e3:88:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=feb21655-f579-40e9-be6c-31323dc6f34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:46:39:ee:55:1d:68:ba:10:ed:6f:ca:c1:eb:
                    89:11:eb:b1:7d:25:ca:7a:b3:6d:bb:23:0a:f4:8f:
                    78:da:35:70:92:d3:38:ff:5f:fd:98:e2:f9:d5:9b:
                    ed:2f:76:27:ea:fc:09:a4:d5:a9:4f:fc:80:18:f3:
                    05:55:dd:bd:4f:1e:b7:44:6c:41:9d:04:ff:ce:80:
                    d4:69:c8:5e:c3:07:98:0b:83:f9:0d:aa:6e:cc:cf:
                    18:80:f8:30:30:99:14:18:07:a4:38:dc:f6:77:ae:
                    ad:64:12:07:11:82:15:ab:7f:4a:f4:85:50:05:9c:
                    8f:03:c7:c7:ff:f7:c1:af:9c:ff:e9:26:a1:d5:78:
                    85:60:51:ba:15:8b:8a:fe:04:45:c0:04:07:84:04:
                    9d:9a:cc:8a:34:4e:5b:91:76:04:73:99:51:54:db:
                    16:83:80:1e:7e:ee:14:6f:44:64:69:8e:b7:8e:91:
                    dd:35:e3:88:14:1c:d2:35:9a:d1:84:db:6d:ec:fb:
                    0b:10:97:56:e9:42:d9:0d:2b:09:6a:f8:65:c2:b8:
                    7f:65:d0:02:33:fb:4a:2a:22:ce:2e:81:d4:7b:43:
                    b3:7e:4d:dd:37:89:43:99:82:67:98:75:3e:6f:1d:
                    dd:24:ce:a6:62:64:f6:d4:7e:59:b0:fc:70:75:e6:
                    8c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:07:C6:AE:B8:78:4E:D9:1E:45:C6:E2:C3:64:61:38:89:14:3B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/3e68afed-22af-3d7e-a55b-cec0ac760603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f1:ac:be:db:b9:a2:d5:af:35:1a:6e:e1:f2:46:4b:70:fe:
         45:f4:dd:a4:e2:54:24:ed:cc:d3:1b:df:fd:5d:4b:cd:20:8b:
         fc:1f:49:b3:22:93:dc:b7:4d:0b:e1:e7:cc:39:2a:ee:1b:df:
         14:d3:ef:33:7d:da:08:30:c7:04:62:cd:82:b1:2f:40:8d:f1:
         c7:ce:7a:2e:be:98:ee:62:26:60:58:16:85:78:47:fc:f9:84:
         6e:d2:ec:87:94:48:0e:bf:fa:e4:3a:4c:b6:9d:bc:65:59:cc:
         bb:b6:e6:38:35:51:3a:ec:bf:3e:a4:1e:15:f3:a9:ea:35:cf:
         c0:20:51:e7:56:bb:8a:ef:03:e9:01:13:91:8f:bb:91:a3:cb:
         84:a1:0f:f0:61:66:c3:2d:cf:69:e6:1d:ed:0b:23:fb:2c:00:
         b8:2a:8c:73:0c:b4:7b:b6:ab:c7:d9:92:74:31:3a:e1:3a:ed:
         cc:8c:6a:f9:3d:6e:b9:ca:e7:e6:63:7e:56:0a:40:82:37:89:
         af:dc:01:80:20:c0:59:45:70:b8:a5:8d:8e:1e:31:e7:7e:c3:
         6e:db:61:d8:bd:0e:99:38:18:7d:0f:7e:8a:30:94:bc:c3:98:
         eb:46:6c:1c:bc:b1:40:2a:a9:28:57:e7:76:c6:07:0e:d1:40:
         51:ed:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:55:34 2025 by rpki-client