Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa
File:                     8658f928-bb2e-351c-baa0-b043397f7b78.roa (raw, json)
Hash identifier:          BsGngke71gZoqCgto9z06PvgQWPjfeMiscqwhs8v81Q=
Subject key identifier:   D8:9B:DE:F9:7F:BC:D2:43:65:FB:55:D9:E1:E2:B3:76:5C:B1:22:5B
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584A2C20141331DB787A534C2900
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     13414
IP address blocks:        209.237.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:14:13:31:db:78:7a:53:4c:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=0ae0707c-ea05-4c1d-b87d-ca9adf518ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:06:58:cb:d8:4a:5d:4f:c5:92:92:65:f2:
                    5b:b2:65:f7:fb:da:1c:64:60:2e:b6:1d:72:a1:96:
                    18:5b:df:da:b3:1d:d5:b6:78:a6:8b:4c:2f:70:ba:
                    a1:a3:08:97:eb:9b:52:c7:46:43:af:4d:6d:a8:c1:
                    9e:22:4f:64:36:6d:59:9a:57:8b:07:86:a5:5c:db:
                    31:b7:3e:fb:98:25:ca:64:94:80:8e:0d:9d:33:4b:
                    8e:27:ed:8f:df:8f:af:8f:74:35:ad:1e:f9:b3:34:
                    9a:a3:97:cc:5a:90:4c:c0:bb:47:94:1d:72:d3:3b:
                    cb:0c:a8:f7:d8:14:54:6c:be:be:78:a2:86:98:46:
                    b4:17:8e:0f:56:c1:a7:4f:fa:5a:39:ee:ea:a1:cb:
                    20:f3:b7:54:5d:b6:33:77:a5:7a:68:21:91:66:4c:
                    06:9f:82:c8:ea:ac:a8:43:89:a0:3e:23:19:a9:a8:
                    d3:c9:6d:76:fa:4e:fd:9a:b6:98:e0:f7:2a:04:a5:
                    e4:cd:43:77:e9:11:9d:52:f0:25:fe:aa:9d:89:d0:
                    eb:14:63:a0:15:01:42:fc:3f:ef:70:7c:ce:25:47:
                    08:7e:3f:08:75:b3:c2:ea:0c:91:cb:6f:a7:8d:1c:
                    60:20:53:42:6c:49:86:6a:47:be:9a:1f:36:9a:62:
                    6e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9B:DE:F9:7F:BC:D2:43:65:FB:55:D9:E1:E2:B3:76:5C:B1:22:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:85:94:42:26:d2:89:5c:e2:e1:52:9f:ce:f0:7f:4c:1c:47:
         13:f2:43:42:5b:91:73:3f:80:e8:ea:cf:de:4e:ba:f6:be:fc:
         06:01:85:8a:fe:58:f9:ea:19:3c:13:02:59:bd:3b:9d:be:84:
         f1:a9:2d:f4:4e:f0:40:96:6f:5d:d9:ac:27:e0:18:39:0c:55:
         ce:64:ac:b8:75:35:bd:57:ed:c0:55:5c:26:d4:a4:de:9a:a6:
         3e:42:48:1f:ae:96:ba:00:d0:3b:73:98:7e:46:d5:ad:91:ce:
         ec:f9:35:a1:9e:de:05:b1:45:fe:7b:a6:38:24:bb:32:26:4b:
         3e:94:01:25:91:3c:c3:7f:e6:aa:e5:72:0f:03:91:de:cc:36:
         66:59:3f:dd:5d:3c:12:6b:3d:6f:73:47:dc:12:2a:48:4c:88:
         e5:46:11:6e:0e:ac:e5:35:42:8a:2d:13:4e:d5:de:00:cb:3d:
         c2:6a:4e:16:11:e9:e6:76:a0:74:a4:23:67:3b:d5:fe:04:46:
         e8:db:9f:7a:84:b4:dd:0a:1d:5c:33:cf:ca:aa:8f:3d:8d:5d:
         be:ca:63:9d:d0:94:0a:6b:65:db:ba:10:63:72:9a:7a:75:99:
         61:cb:23:86:8e:44:73:bb:cb:94:b5:0a:36:8c:81:33:ff:c9:
         7f:79:5d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:00:39 2025 by rpki-client