Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9/ee4fb3a3-98b6-30b2-aecc-0686bae28fa0.roa
File:                     ee4fb3a3-98b6-30b2-aecc-0686bae28fa0.roa (raw, json)
Hash identifier:          i2aQ1p4JCZd5sRZYskYHu6bu4m6+Re7aWGz8l7xncMk=
Subject key identifier:   B4:55:D7:83:4A:FA:CE:9C:98:F1:2E:F8:EE:D7:4F:C3:24:2A:E6:FA
Certificate issuer:       /CN=1182705b-334d-49d0-b332-ccac8ae609a9
Certificate serial:       010D0C9F4328584A268AB854F8465BC77389F710
Authority key identifier: 1D:F9:61:8E:5D:70:16:03:E9:F4:96:A1:D5:B9:26:C6:65:53:4D:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9/ee4fb3a3-98b6-30b2-aecc-0686bae28fa0.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     12214
IP address blocks:        69.46.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9/1182705b-334d-49d0-b332-ccac8ae609a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9/1182705b-334d-49d0-b332-ccac8ae609a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:b8:54:f8:46:5b:c7:73:89:f7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1182705b-334d-49d0-b332-ccac8ae609a9
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=8e8305e8-b5eb-4aa5-888f-e5e8c119408d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:93:49:14:8e:ed:57:c1:b7:ad:fe:3c:a7:
                    dc:4e:ad:87:05:cb:7f:fe:6e:c9:36:9a:35:73:ab:
                    72:33:6b:64:1b:5a:e9:bb:fa:a0:4d:e7:9d:50:46:
                    b4:fb:86:f8:a8:9e:55:77:61:a2:a0:7b:54:4a:b0:
                    2d:b0:f5:3b:15:a1:35:f8:20:56:ba:cc:84:79:67:
                    9e:99:cd:2a:e3:60:07:67:5e:1c:9c:41:d7:eb:0b:
                    c5:37:f7:33:d1:c0:0b:45:d7:47:06:b9:db:51:0f:
                    d9:75:1b:64:45:5d:73:35:e6:5f:d5:83:46:cc:d5:
                    79:30:f0:fb:c0:80:f9:1a:bb:b9:0a:9e:49:18:86:
                    c6:87:33:39:5a:66:69:8a:29:ec:db:62:c5:25:22:
                    01:a2:dc:ca:ba:64:48:ab:9e:bb:cd:00:98:b0:49:
                    41:66:d4:bd:8b:d4:08:c8:f9:0a:c8:e6:fa:8d:ba:
                    9a:f8:da:a4:f3:f5:45:c2:c7:c5:c6:51:fc:61:e6:
                    38:9a:a1:e5:4a:e0:c1:e8:39:ed:e0:a0:db:2a:eb:
                    0a:d9:9a:a1:31:77:9e:56:91:49:fb:3d:75:8a:61:
                    1e:18:f1:fa:b4:dd:97:4a:9e:f1:b5:02:85:57:51:
                    c5:25:c8:62:d0:e0:d4:e5:04:12:4e:a0:87:a2:b1:
                    4f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:55:D7:83:4A:FA:CE:9C:98:F1:2E:F8:EE:D7:4F:C3:24:2A:E6:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9/ee4fb3a3-98b6-30b2-aecc-0686bae28fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9/1182705b-334d-49d0-b332-ccac8ae609a9.crl

            X509v3 Authority Key Identifier:
                keyid:1D:F9:61:8E:5D:70:16:03:E9:F4:96:A1:D5:B9:26:C6:65:53:4D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.46.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e3:c6:3a:e9:90:14:33:2f:7b:66:d2:13:c8:6c:dc:4f:b1:
         6a:55:d0:19:b9:78:0d:54:c8:95:b7:c4:2f:c2:46:50:e7:85:
         72:c5:61:0f:13:69:12:06:f8:65:11:d9:5d:bd:bd:81:40:83:
         ab:e3:22:a6:f1:09:6d:6b:0c:12:0c:f2:65:de:eb:af:ce:f9:
         5c:55:97:76:d8:e3:63:eb:56:7c:c1:1e:8a:9c:7f:36:3f:38:
         fa:7d:51:98:42:d0:ae:12:99:94:f6:6a:47:33:2b:f1:21:aa:
         22:54:c7:14:9f:1b:dd:7d:07:ff:c4:15:dd:fa:e6:c2:f4:67:
         32:f4:19:52:f6:b2:a7:5c:50:eb:6f:13:c7:dd:92:8c:9a:20:
         c4:02:2a:0b:63:5e:9f:8b:6f:41:b5:38:f5:3c:df:0f:3f:a9:
         fe:4c:b7:8d:1f:9c:0d:52:88:04:ec:0a:92:02:f2:10:a3:6d:
         b1:1d:36:fa:b8:18:23:54:00:fe:ca:22:48:df:26:42:2a:8e:
         07:c2:04:79:ff:b2:8d:21:e4:83:f8:d6:10:d2:96:15:eb:b3:
         7b:3f:3d:5e:57:d6:79:6a:8a:d5:ca:3c:a6:19:b4:e4:38:bd:
         1b:6d:e1:00:7f:51:e4:96:bd:95:5b:b8:4e:24:0e:bf:4f:d3:
         ea:d8:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:38 2025 by rpki-client