Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/728a07be-35f9-32b8-a947-4c03fbfddac4.roa
File:                     728a07be-35f9-32b8-a947-4c03fbfddac4.roa (raw, json)
Hash identifier:          H0NY89eyMdpzIbcaGwWyjEXwEN+RNaUdsaNjnYMXW5Q=
Subject key identifier:   A8:98:72:81:85:BF:51:70:21:E2:0B:67:A7:A8:C4:46:28:5F:C8:72
Certificate issuer:       /CN=9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50
Certificate serial:       010D0C9F432858498769BAF67EF5016F57147100
Authority key identifier: 29:D8:39:BC:8F:B6:00:7C:FB:EB:42:7D:25:FD:CB:C4:A5:92:1C:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/728a07be-35f9-32b8-a947-4c03fbfddac4.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        69.196.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:ba:f6:7e:f5:01:6f:57:14:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=a8ac2561-4b23-4124-bfae-5d5c14faa807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:60:40:02:9a:57:9d:0c:d7:26:9d:6c:bd:b7:
                    1e:cb:a4:12:c1:54:c8:b0:31:a3:14:79:03:03:44:
                    5d:9d:1e:00:37:99:fd:e9:e5:2c:ac:4e:7d:84:2a:
                    fd:ea:98:96:58:b5:cf:0d:3d:de:f4:b5:72:71:87:
                    af:3a:7a:e8:ae:c5:6e:00:ee:af:ec:1b:16:33:00:
                    8c:65:95:0f:68:e1:83:63:fc:25:1b:79:77:c2:8b:
                    ee:6f:17:c3:2d:56:4d:cd:c0:d2:8c:17:fe:90:85:
                    8e:a3:c6:c1:21:1d:86:e4:db:b8:cc:23:bf:38:4b:
                    bb:cb:e7:57:70:78:5e:61:d1:dc:74:c0:ff:42:45:
                    12:57:17:17:c9:1f:80:ad:02:06:88:44:bd:27:35:
                    49:7a:be:d8:e8:36:af:0e:27:75:43:60:fc:cc:1e:
                    c2:0f:60:da:b7:50:77:01:97:f7:94:68:27:f5:f7:
                    d0:40:4d:9e:68:7e:e6:22:ec:77:18:b3:39:52:eb:
                    d0:b0:75:f8:06:b5:7c:c3:2b:da:a8:8d:d6:e1:61:
                    3f:91:66:48:7b:6f:1c:b3:25:53:16:7c:8e:f6:a3:
                    62:79:f0:cf:9e:91:02:5b:43:fd:89:4b:aa:eb:cd:
                    c4:5b:fd:5a:f4:3b:3b:f4:c7:62:9f:e7:9d:00:96:
                    e5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:98:72:81:85:BF:51:70:21:E2:0B:67:A7:A8:C4:46:28:5F:C8:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/728a07be-35f9-32b8-a947-4c03fbfddac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.crl

            X509v3 Authority Key Identifier:
                keyid:29:D8:39:BC:8F:B6:00:7C:FB:EB:42:7D:25:FD:CB:C4:A5:92:1C:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.196.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:e2:18:fe:7c:05:d9:82:45:83:85:21:ef:90:19:6c:3c:b0:
         a7:8a:61:8f:4e:d6:7e:37:d8:82:23:74:1e:f5:16:75:ee:47:
         13:b3:0d:03:32:ff:ed:fd:02:e1:b9:a3:e3:37:9f:d3:aa:8f:
         08:ac:64:b0:47:69:ea:01:c1:ef:cd:c1:48:54:33:81:f1:3f:
         c2:84:56:e2:23:61:d1:63:c9:18:22:89:95:52:7f:d0:90:20:
         fd:42:d4:e6:d2:c4:96:67:b5:31:6d:b8:58:46:b2:e9:e7:e9:
         00:41:b9:78:2b:0e:cd:17:f3:64:2a:1b:99:ba:e7:74:1d:2e:
         cf:43:fa:dc:31:d1:33:be:05:4c:74:37:c7:6f:a4:26:79:90:
         53:83:a3:42:93:e1:5f:15:6b:f1:c4:18:37:1e:74:43:9e:e1:
         60:1f:c2:d8:db:7a:6b:f9:68:9d:1a:5b:3a:0a:82:0d:6b:c1:
         84:92:10:4e:ac:a6:2e:d0:93:9c:d6:8a:d9:83:a4:82:17:08:
         b1:f9:ad:12:85:31:66:1e:27:3f:a6:42:61:73:4e:17:3e:13:
         b2:55:f0:90:8a:a3:3c:fd:c7:28:56:3f:01:5e:89:11:3b:a7:
         36:78:ce:97:19:ef:29:73:5d:b5:4f:09:59:e9:c6:8d:9a:7a:
         a5:d6:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:15:49 2025 by rpki-client