Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a5e507b0-52b1-3ee9-83b4-0b8bb9c12868.roa
File:                     a5e507b0-52b1-3ee9-83b4-0b8bb9c12868.roa (raw, json)
Hash identifier:          25uoC4KqkSZ/xYzr035HtWv9DBK7WFKTp9/bPosOm/k=
Subject key identifier:   58:62:28:FF:1D:52:4E:9B:D6:F5:9B:05:28:C3:4D:79:33:CC:96:26
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285849A4B9F7235942D1413CBCDD00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a5e507b0-52b1-3ee9-83b4-0b8bb9c12868.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     14813
IP address blocks:        69.80.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:b9:f7:23:59:42:d1:41:3c:bc:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=99892be3-10c0-4814-a407-0dcbfd15e503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:14:19:62:f3:2a:3b:c7:48:65:87:6e:68:
                    9b:04:f5:34:52:45:98:19:ed:74:b5:69:d4:f3:9b:
                    fc:1f:2a:4f:e8:98:1a:6e:40:35:ef:e9:5e:f1:f5:
                    56:75:c0:5e:e7:90:e6:1c:a6:f9:52:32:87:ad:a5:
                    cb:b3:07:ff:6d:e5:5d:f9:3b:d7:4d:f2:37:62:96:
                    fb:f6:a9:c7:74:da:68:e0:a2:32:1e:b7:91:91:0b:
                    be:83:db:f5:09:75:8f:9f:96:eb:80:ee:07:2b:41:
                    31:60:fa:2f:cd:a9:e0:63:28:30:6b:19:2f:d0:9d:
                    ba:70:27:bf:52:e6:4e:a0:3d:da:e3:91:c7:ea:4e:
                    f8:88:42:44:c5:c8:d0:c0:e9:b0:b0:9c:0b:3c:ff:
                    53:ea:d3:01:3f:0f:a6:d1:7b:d1:90:10:00:94:f9:
                    5d:c3:3e:6e:fa:b0:33:54:e2:93:68:1e:27:55:63:
                    32:07:d9:d2:3c:34:1f:79:40:16:1b:b2:28:61:b6:
                    65:15:17:f1:3a:a0:01:00:b6:b8:32:dd:90:a1:02:
                    20:ac:6b:01:3e:07:62:bf:47:51:ef:df:2b:29:31:
                    40:bb:38:14:55:6d:fd:a2:28:aa:ea:de:e6:e6:4e:
                    ed:fb:fe:89:20:f4:7a:90:80:06:4e:b0:e4:4c:aa:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:62:28:FF:1D:52:4E:9B:D6:F5:9B:05:28:C3:4D:79:33:CC:96:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a5e507b0-52b1-3ee9-83b4-0b8bb9c12868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1c:70:25:2d:c5:c8:e2:7c:06:ed:c1:3d:74:5e:15:bc:28:
         30:1a:bc:98:80:30:56:2d:4a:a2:b0:88:87:71:72:9f:e6:ff:
         e9:3b:03:d2:d2:b5:db:53:b9:60:84:f4:38:35:a8:5c:a0:c3:
         f7:77:3c:26:f4:6e:c4:ac:e2:b0:e9:cf:99:83:b1:dc:d4:cc:
         a6:84:e7:81:e7:e4:d5:1e:8b:bf:88:49:15:77:b7:1e:42:2b:
         3c:a6:93:71:55:e3:4c:87:8a:c9:cf:12:8d:be:d7:37:e8:c0:
         5f:ab:fd:59:34:f9:66:7b:a8:3e:7c:91:a0:01:d8:b9:76:e8:
         3d:04:c9:8b:46:dc:90:48:b6:34:7a:42:ac:8d:db:ee:18:a9:
         d9:83:e9:4d:27:ae:e4:30:05:ab:68:88:39:91:63:1e:10:91:
         e0:0b:c5:bb:c7:01:8c:37:67:8c:a2:53:8d:19:aa:b5:80:71:
         34:71:e5:1b:95:bb:47:07:fa:cb:bc:7f:17:8b:60:66:c5:79:
         86:f8:8f:b3:a9:9d:95:9c:ea:75:e8:9a:8f:e7:da:4f:55:36:
         30:95:45:9c:6b:9b:bf:e5:e1:36:56:af:4d:73:85:1d:c0:22:
         0d:84:5d:c6:d2:e0:14:fb:25:01:23:f5:a7:5b:4b:39:59:55:
         a9:41:98:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:54:38 2025 by rpki-client