Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/c2f05c51-d0a5-3532-af78-fa537d2c3f1e.roa
File:                     c2f05c51-d0a5-3532-af78-fa537d2c3f1e.roa (raw, json)
Hash identifier:          mxkXXNe1lioO3/MYMHnq8BlvmBOkjrkge/DZwVe/f6Y=
Subject key identifier:   CE:01:2E:AD:2C:5D:FB:24:9F:96:35:36:43:0F:6C:B4:BA:48:8C:95
Certificate issuer:       /CN=5587bc0d-775f-4b49-89c0-0d12d8bddc05
Certificate serial:       010D0C9F4328584A2ABAEA985E0169D798969340
Authority key identifier: CA:F0:6F:96:E2:6B:1D:87:C6:FA:5F:BD:41:58:09:13:18:4F:3E:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/c2f05c51-d0a5-3532-af78-fa537d2c3f1e.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     0
IP address blocks:        69.58.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:ea:98:5e:01:69:d7:98:96:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5587bc0d-775f-4b49-89c0-0d12d8bddc05
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=8997bbb0-64c8-4a4e-8700-bc1faf4f3d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c8:4c:b5:c8:cd:5b:4a:f6:86:2d:3c:9a:74:
                    f0:81:88:be:05:6c:8f:aa:59:b0:c6:ee:f3:ae:5f:
                    54:18:d6:13:4c:4c:5f:67:23:85:47:38:52:e8:cc:
                    d2:0e:d3:4e:ad:dc:b8:78:6e:9e:3a:88:65:56:26:
                    40:91:03:da:5e:fd:a3:a8:d3:92:0b:04:2e:99:33:
                    b8:11:fa:8a:b8:f8:63:9c:c9:4d:3f:10:eb:0e:24:
                    1e:e7:26:5d:7f:4a:53:3b:ec:f5:f3:a6:f0:de:d5:
                    3a:d4:21:51:82:5d:b0:75:f7:3e:d8:01:8a:09:aa:
                    d4:5b:b3:2b:57:f0:69:7e:4c:bc:0f:82:06:e9:70:
                    1e:db:01:14:51:a4:09:86:72:ee:f8:4c:01:9d:90:
                    c2:64:19:7d:92:bd:48:d5:18:84:3d:99:2f:a5:b0:
                    4f:15:fe:ab:a6:b3:5b:42:11:19:92:a3:e4:bd:21:
                    6e:e0:e9:3a:f5:52:a0:91:91:7a:46:ca:69:67:fd:
                    62:b2:f9:4c:01:6c:8e:13:8d:38:60:67:0c:d3:8e:
                    30:5d:e3:67:73:37:c3:07:32:65:98:b1:af:93:6b:
                    eb:71:49:48:21:60:b5:5f:39:e0:cb:18:4a:a8:26:
                    54:7c:54:f3:9e:65:7e:c7:eb:73:bc:18:3b:4a:0c:
                    74:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:01:2E:AD:2C:5D:FB:24:9F:96:35:36:43:0F:6C:B4:BA:48:8C:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/c2f05c51-d0a5-3532-af78-fa537d2c3f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.crl

            X509v3 Authority Key Identifier:
                keyid:CA:F0:6F:96:E2:6B:1D:87:C6:FA:5F:BD:41:58:09:13:18:4F:3E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:5b:2d:4e:51:67:7f:d3:7e:21:a7:09:b3:f1:67:67:04:1a:
         1b:76:95:35:5e:57:cc:ce:74:f7:00:10:3d:bc:ac:63:9f:fc:
         cb:53:48:58:ca:7c:cc:69:47:c2:6f:7e:28:73:54:67:e5:a2:
         70:4b:0c:8b:f9:d9:6e:c0:cf:5b:4e:50:cb:03:2a:dd:2d:0a:
         22:a8:61:be:2e:6e:7e:7f:c1:cc:30:2c:df:e7:ce:0b:a1:40:
         07:1b:9e:20:83:b6:a5:3b:77:83:f2:ef:68:93:d6:63:a3:5b:
         24:90:29:49:fe:62:43:78:52:cb:6f:c3:73:a5:79:9b:13:d4:
         9c:d0:cf:ca:a5:c6:ab:59:13:f0:29:b0:1a:c5:23:60:36:6e:
         8d:d3:b9:2c:30:c0:58:a7:a0:53:3b:d2:d6:60:84:e1:a4:ed:
         1a:56:f2:6c:3a:6f:57:4a:df:94:45:f7:25:51:9e:ab:e2:a8:
         7b:0d:29:2d:ad:93:a4:26:86:ab:5d:e7:37:bc:ed:d5:0d:35:
         a6:2d:03:06:53:c5:2a:55:f5:1d:df:74:05:60:69:9a:ab:1c:
         0a:99:1b:57:27:77:90:6b:ee:c7:1c:6b:67:19:ad:9a:26:1a:
         2c:0e:d7:77:c4:cb:13:96:c9:d7:1c:d3:f2:37:70:b3:cb:ec:
         92:42:a7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:40:18 2025 by rpki-client