Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7b55e8f7-8af2-3582-a7bf-08ee673f8872.roa
File:                     7b55e8f7-8af2-3582-a7bf-08ee673f8872.roa (raw, json)
Hash identifier:          glRGq/HbljIo0JV9FGIUISV2Dfo6IdqoOsHbscHpIik=
Subject key identifier:   E7:CE:19:28:C8:67:1A:04:3D:89:9C:1E:15:55:5D:AF:BE:18:45:B3
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584A2D85886EB17C4EACDF684E00
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7b55e8f7-8af2-3582-a7bf-08ee673f8872.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     13414
IP address blocks:        209.237.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:88:6e:b1:7c:4e:ac:df:68:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=168ff3ea-0e9a-489a-bab0-bc290cb7e11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:89:b6:24:ec:64:6a:7c:91:a1:7b:16:dc:42:
                    cf:04:9c:65:5c:03:7b:ae:12:10:2e:48:89:77:d5:
                    a1:d1:0d:a6:19:eb:a5:58:f9:d5:9d:60:c3:7c:ac:
                    4b:c9:e7:8b:1a:52:e8:d6:59:fe:f0:2a:51:6c:0f:
                    e6:70:b7:d0:04:23:fa:31:c1:c5:5b:f8:bc:3f:91:
                    78:f4:37:be:a2:d0:0e:ca:43:10:b2:3f:4d:7a:86:
                    22:bb:63:1f:20:d0:40:31:98:d1:f7:34:e6:65:a7:
                    3d:13:7d:e9:06:08:fe:22:cf:5c:5d:dc:1c:f5:94:
                    8f:b3:77:52:02:d4:5d:18:91:4f:3c:e6:d0:7c:9c:
                    c6:c6:49:ea:43:a9:c4:d0:36:15:9b:0a:86:4f:e2:
                    80:0b:78:69:d6:df:a7:e8:59:cb:ef:22:4c:ba:a9:
                    78:a7:41:3b:4e:b7:c6:28:94:c2:2a:66:01:a7:a0:
                    c4:8d:eb:b3:61:57:66:c3:0f:df:b9:5a:b2:d2:7f:
                    41:4a:3f:6e:24:4e:01:3f:6d:9c:f0:e1:61:3c:f4:
                    cd:f1:18:83:ff:b8:62:fd:67:bb:98:05:47:30:e8:
                    cd:63:b6:3f:7d:4f:5c:e4:8a:d3:cb:07:4a:6b:09:
                    5e:fc:50:24:3f:5b:1d:ed:fd:48:a6:ce:41:b8:35:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CE:19:28:C8:67:1A:04:3D:89:9C:1E:15:55:5D:AF:BE:18:45:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7b55e8f7-8af2-3582-a7bf-08ee673f8872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:be:c4:39:cf:ed:e6:3c:2b:a2:3d:99:62:5e:06:be:6f:1d:
         8d:49:f4:22:a6:94:24:30:4f:b3:a6:35:3b:ee:61:ee:d6:22:
         5a:ef:1f:5c:03:ea:9b:cb:dc:cc:ed:9f:e0:3e:b5:4c:7d:1d:
         f7:0f:52:ea:bb:5e:75:bf:3c:9c:43:6b:6f:f1:c1:c1:87:16:
         13:37:b3:5f:ea:77:a8:ef:d5:32:c0:a0:fc:b7:45:59:69:df:
         28:1f:b0:77:bb:a6:ea:0a:0a:96:f9:34:da:a0:78:e6:6e:df:
         0f:1b:5d:b6:2a:6f:b5:32:f9:d9:3f:6f:5a:32:55:19:ba:36:
         b3:67:21:94:ad:17:fc:19:bb:bb:7d:92:f9:70:9a:48:74:45:
         7c:4d:ef:ab:01:2f:54:b5:88:45:d9:9a:f7:13:2c:fc:4a:cc:
         d0:6c:64:bc:fa:d6:4b:86:78:bf:8d:06:b5:7c:b5:c5:3c:9f:
         78:92:6c:c6:91:1c:1a:c3:44:46:43:c6:a0:a4:d3:09:5e:b2:
         3f:66:45:2b:6c:ee:28:10:77:8d:55:e4:46:d8:e2:bf:4e:a7:
         c3:85:e1:d9:00:ab:3d:7a:49:52:f1:ea:87:5a:c3:8b:44:16:
         5e:fd:72:b4:d2:a5:9f:55:9d:ce:61:40:ad:f4:f6:ad:d1:29:
         cd:9d:a5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:46:52 2025 by rpki-client