Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa
File:                     606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa (raw, json)
Hash identifier:          NpBwtZ55ZTKyRes2LjTviqkdCzZGbPqbCztBCXtA27A=
Subject key identifier:   9E:F2:6B:87:C7:C5:BD:B5:C7:CA:FD:27:B3:0D:9B:06:A4:1E:31:22
Certificate issuer:       /CN=2e356a8c-d37d-4efc-986d-251de18075cc
Certificate serial:       010D0C9F4328584A07D52C00E65093386F66B935
Authority key identifier: EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     14543
IP address blocks:        69.84.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:2c:00:e6:50:93:38:6f:66:b9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e356a8c-d37d-4efc-986d-251de18075cc
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=cbaf146a-e98a-4474-ab58-869e466f65c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:88:5f:db:00:12:aa:4e:ca:f1:a6:3f:90:95:
                    15:a4:2c:75:a0:a7:9d:14:4b:22:8b:01:7e:8d:5d:
                    ad:f2:6c:6f:ed:4e:eb:94:cc:36:da:81:fa:f1:a0:
                    91:3e:3b:2a:59:d7:40:97:22:1f:99:3a:bb:df:d4:
                    0c:91:39:a7:97:aa:0b:3a:4a:7f:3e:ce:ab:18:15:
                    a6:78:3b:7a:16:31:c5:07:33:c6:55:c0:6a:21:59:
                    3d:ff:55:1e:2e:05:69:2f:3d:aa:f0:2f:bc:4a:4e:
                    41:ee:53:0a:05:18:54:74:8f:73:2d:2b:d2:b5:f0:
                    da:a8:a9:71:19:a1:c9:f8:d4:b6:06:f7:08:e6:50:
                    75:85:8b:e0:38:8c:1d:bc:d4:76:c0:b3:98:9d:23:
                    c8:cc:41:b1:e6:a4:b8:3b:3d:3a:62:d7:18:99:1f:
                    e5:a4:89:52:21:c9:ed:56:54:d6:d5:e3:fd:8d:f0:
                    52:8e:8e:5c:56:17:09:42:52:39:cf:40:14:6b:0a:
                    87:65:e7:25:a0:cc:22:a5:d8:30:f5:4b:81:7d:55:
                    10:2f:8b:e1:82:78:3a:24:77:45:12:cd:57:3e:90:
                    9e:89:cc:86:44:9c:28:18:2b:1a:2a:ef:3e:2a:48:
                    29:21:16:9a:9e:de:d4:ca:bc:14:a8:36:83:1e:06:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F2:6B:87:C7:C5:BD:B5:C7:CA:FD:27:B3:0D:9B:06:A4:1E:31:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl

            X509v3 Authority Key Identifier:
                keyid:EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.84.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3f:cc:5d:5c:f3:7d:01:36:cc:32:82:a9:71:70:48:f3:8e:
         9a:89:e0:d8:5d:11:97:d4:8e:aa:c4:13:58:8f:ed:bf:3d:59:
         3b:2c:df:4a:81:4d:94:3b:78:a4:9a:f8:ab:1a:3a:33:43:87:
         5b:39:bd:3b:6c:5d:6d:c5:0b:bf:16:e8:e9:a2:ea:31:17:0c:
         cc:3c:99:fa:2b:dc:c9:c2:84:d6:b7:f7:bf:96:3a:ef:e9:7c:
         71:2f:00:84:da:01:c1:7f:5e:12:c9:6d:05:58:e7:d3:a7:33:
         b2:34:01:09:00:6d:81:e9:3d:1f:b0:7f:9b:b0:d8:11:25:05:
         b9:f2:d5:6e:9d:61:b2:19:3c:2c:89:de:d8:89:ed:de:d2:93:
         9f:10:df:ea:ee:26:ff:67:6a:f1:31:17:10:a6:be:ce:6f:67:
         43:6a:4e:02:28:3a:4c:f4:8e:81:b9:0a:ec:ae:1f:44:fd:68:
         04:e1:d1:98:ad:82:8c:c5:a2:1b:78:b1:dd:90:69:1e:a9:ca:
         b7:6c:b7:62:4a:09:6f:9e:fb:09:09:a5:05:54:db:cf:48:4b:
         e7:56:8f:a6:1c:61:4b:29:00:5b:c7:04:b0:27:32:88:26:d1:
         74:c7:bd:ff:5e:85:78:f4:60:de:7e:0a:69:89:8c:3f:3a:50:
         b1:c4:8f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:49 2025 by rpki-client