Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d9088f97-08bc-3e77-b907-58112fed375c.roa
File:                     d9088f97-08bc-3e77-b907-58112fed375c.roa (raw, json)
Hash identifier:          /Eul/Iqag07QzaBIsvM5hqc/A4CZXMwnToayhk/jwsg=
Subject key identifier:   99:A4:69:BB:50:6C:D7:DD:35:26:31:73:9D:03:4A:DE:4A:94:F5:21
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285849A4B9F6B17D3F289D8011DEC0
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d9088f97-08bc-3e77-b907-58112fed375c.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     14813
IP address blocks:        69.80.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:b9:f6:b1:7d:3f:28:9d:80:11:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=bf73e49c-b4a4-4b49-8e7b-fbbab956d056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:90:1a:c0:4b:91:9c:f9:c5:88:8f:8e:be:d9:
                    f9:9b:bf:55:32:c5:ab:45:95:2d:d0:05:43:1c:3b:
                    13:4b:7c:19:a5:4a:63:47:63:09:a2:ec:1c:12:c4:
                    cf:7a:47:99:44:9e:75:cb:51:58:48:78:66:6f:02:
                    e5:f9:55:f4:75:48:1b:bb:e1:88:d9:a5:6f:18:de:
                    dc:c8:8d:d5:49:b7:e6:4c:8f:3a:86:5b:03:92:d8:
                    2f:a1:57:62:6b:76:19:a5:73:59:72:1f:d6:d6:5c:
                    75:2f:73:c8:71:37:85:a3:de:2a:63:30:8c:11:da:
                    be:9f:7a:ad:dd:3a:5c:f4:36:f1:70:89:26:a1:f2:
                    5e:2c:36:ea:5d:42:88:b0:85:64:9f:ca:4d:87:e1:
                    5b:71:f4:55:4e:39:b1:60:e5:f4:d2:cd:73:c6:9c:
                    6f:a5:73:0c:35:c9:12:4d:1a:4a:66:c3:1f:9c:e6:
                    8c:2c:7f:31:ab:b0:2f:7a:e9:68:78:74:35:2a:37:
                    1e:ce:65:ae:eb:a6:c2:a0:f8:8f:d8:eb:c7:31:d8:
                    3b:76:28:6b:94:0c:16:78:66:e4:81:72:40:e5:af:
                    15:c6:c8:47:ba:0c:ab:0e:5e:6e:6c:4a:45:02:89:
                    25:5a:4c:69:04:dc:94:52:6b:7a:7b:de:b8:ec:b5:
                    25:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A4:69:BB:50:6C:D7:DD:35:26:31:73:9D:03:4A:DE:4A:94:F5:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d9088f97-08bc-3e77-b907-58112fed375c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8b:36:6b:d8:f2:e8:85:90:cf:6a:d5:0e:23:59:c7:0a:68:
         0f:e1:96:84:b4:cf:e7:15:bc:78:4e:18:b9:55:3f:53:ea:87:
         8f:f6:b1:f2:4c:ce:25:9c:3c:c6:17:d4:19:24:fc:ce:8b:a7:
         6a:e0:d6:aa:ec:34:40:22:34:0c:0f:33:81:d2:63:9b:a3:44:
         49:a4:b2:3a:c8:8b:69:10:5e:b4:9f:ee:ef:4a:15:4f:9b:f1:
         76:c8:1c:7e:b9:e3:12:30:34:c7:70:2f:b6:de:11:c5:3a:93:
         64:96:3c:49:95:c2:fa:16:c4:c5:e7:46:58:e2:14:f7:74:4a:
         ae:7c:64:d0:8f:d8:0c:1a:92:8f:24:72:b1:a7:28:55:c4:c2:
         1e:90:a3:90:aa:e8:db:e5:c4:d4:62:f7:70:3e:98:12:ad:c2:
         aa:50:f1:70:56:c9:f0:5e:70:73:88:5f:43:74:38:77:5e:22:
         0c:1d:6f:f1:f3:8c:38:73:45:42:8e:8b:63:31:af:c8:10:c9:
         4c:3c:42:3a:d4:d6:5e:a9:4c:e5:f0:ab:91:fe:76:86:bc:4d:
         87:ba:77:81:de:c5:7b:68:62:e4:8f:eb:02:22:f5:11:c6:cd:
         e8:a1:ba:c4:79:82:33:b1:aa:7b:2e:b6:d1:3a:62:59:05:42:
         d8:f9:ee:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufaxfT8onYAR3sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
YmY3M2U0OWMtYjRhNC00YjQ5LThlN2ItZmJiYWI5NTZkMDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZAawEuRnPnFiI+Ovtn5m79VMsWrRZUt0AVD
HDsTS3wZpUpjR2MJouwcEsTPekeZRJ51y1FYSHhmbwLl+VX0dUgbu+GI2aVvGN7c
yI3VSbfmTI86hlsDktgvoVdia3YZpXNZch/W1lx1L3PIcTeFo94qYzCMEdq+n3qt
3Tpc9DbxcIkmofJeLDbqXUKIsIVkn8pNh+FbcfRVTjmxYOX00s1zxpxvpXMMNckS
TRpKZsMfnOaMLH8xq7AveuloeHQ1KjcezmWu66bCoPiP2OvHMdg7dihrlAwWeGbk
gXJA5a8VxshHugyrDl5ubEpFAoklWkxpBNyUUmt6e9647LUlSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmkabtQbNfdNSYxc50DSt5KlPUhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvZDkwODhmOTctMDhiYy0z
ZTc3LWI5MDctNTgxMTJmZWQzNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARVAzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2LNmvY8uiFkM9q1Q4jWccKaA/hloS0z+cVvHhOGLlVP1Pqh4/2sfJM
ziWcPMYX1Bkk/M6Lp2rg1qrsNEAiNAwPM4HSY5ujREmksjrIi2kQXrSf7u9KFU+b
8XbIHH654xIwNMdwL7beEcU6k2SWPEmVwvoWxMXnRljiFPd0Sq58ZNCP2Awako8k
crGnKFXEwh6Qo5Cq6NvlxNRi93A+mBKtwqpQ8XBWyfBecHOIX0N0OHdeIgwdb/Hz
jDhzRUKOi2Mxr8gQyUw8QjrU1l6pTOXwq5H+doa8TYe6d4HexXtoYuSP6wIi9RHG
zeihusR5gjOxqnsuttE6YlkFQtj57gE=
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:59:52 2025 by rpki-client