Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d634e86-be16-4d62-8fff-efb16bfb3187/ef64cea8-290d-36c2-a310-e05cf3b9d58e.roa
File:                     ef64cea8-290d-36c2-a310-e05cf3b9d58e.roa (raw, json)
Hash identifier:          AEJTspaoDySuQdCc0e7/uaE2d3iQga/pDP3cZQDmmiY=
Subject key identifier:   5E:A9:3C:20:A3:2D:F3:C0:84:54:F6:8A:19:DC:53:0A:28:1B:E8:DC
Certificate issuer:       /CN=9d634e86-be16-4d62-8fff-efb16bfb3187
Certificate serial:       010D0C9F4328584A90A0B5449A56E8AA2AA68DC0
Authority key identifier: C5:1F:6F:A1:F9:8F:08:90:DD:0A:B3:F6:D4:EB:CA:61:A2:B8:DA:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d634e86-be16-4d62-8fff-efb16bfb3187.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d634e86-be16-4d62-8fff-efb16bfb3187/ef64cea8-290d-36c2-a310-e05cf3b9d58e.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     397959
IP address blocks:        69.59.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d634e86-be16-4d62-8fff-efb16bfb3187/9d634e86-be16-4d62-8fff-efb16bfb3187.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d634e86-be16-4d62-8fff-efb16bfb3187/9d634e86-be16-4d62-8fff-efb16bfb3187.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d634e86-be16-4d62-8fff-efb16bfb3187.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b5:44:9a:56:e8:aa:2a:a6:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d634e86-be16-4d62-8fff-efb16bfb3187
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=4036d39f-0165-43b2-8c0f-aba8653b1ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0c:cc:d6:81:dd:4c:10:ef:62:40:4d:3e:bc:
                    9d:cd:32:6e:07:9b:27:06:ce:ba:14:c0:b5:9c:57:
                    62:45:9f:09:74:ce:f7:6a:53:d1:3b:6e:c4:8b:9f:
                    d1:16:96:84:b0:e9:86:11:40:ec:f2:13:d4:50:be:
                    5f:cb:11:9d:b0:a9:45:0c:32:fe:8d:49:b3:92:0f:
                    8c:f6:26:ea:5a:e7:26:ba:ca:7a:9b:fd:03:84:0e:
                    50:f0:b3:0e:d6:2b:ff:d1:07:75:1a:18:2a:74:b5:
                    5d:c1:fb:0b:de:7c:15:a3:32:dd:9c:3f:61:0d:a6:
                    b2:4e:94:b9:21:bb:50:63:8c:c3:d0:04:90:c6:34:
                    97:b0:58:33:a5:52:22:e0:68:90:fa:04:07:14:53:
                    04:82:2a:d4:72:77:e2:1d:fd:8b:5a:2a:15:fc:c2:
                    7a:a7:78:f5:c6:b6:a5:fe:f5:0f:bd:ef:53:14:bb:
                    32:60:5a:07:fd:74:a0:94:27:81:35:13:a5:c5:e2:
                    85:c9:78:f8:25:f3:d3:2e:57:ce:fe:59:6b:90:4c:
                    51:44:74:dc:92:27:6d:bf:c0:82:b1:dd:52:c8:37:
                    d2:17:0c:c1:ef:14:87:d5:7d:e2:af:01:68:27:a6:
                    85:0f:fc:f4:dd:27:fc:4c:e8:91:4c:d4:11:8e:8c:
                    3c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A9:3C:20:A3:2D:F3:C0:84:54:F6:8A:19:DC:53:0A:28:1B:E8:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d634e86-be16-4d62-8fff-efb16bfb3187/ef64cea8-290d-36c2-a310-e05cf3b9d58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d634e86-be16-4d62-8fff-efb16bfb3187/9d634e86-be16-4d62-8fff-efb16bfb3187.crl

            X509v3 Authority Key Identifier:
                keyid:C5:1F:6F:A1:F9:8F:08:90:DD:0A:B3:F6:D4:EB:CA:61:A2:B8:DA:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d634e86-be16-4d62-8fff-efb16bfb3187.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.59.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:cf:ad:76:a3:88:67:63:86:ac:fc:2d:e1:2c:cf:be:88:ce:
         40:e4:d0:ce:d6:eb:e6:f0:42:81:25:ce:52:82:d3:64:07:f7:
         e7:e3:94:b9:73:bb:d0:b8:5b:04:a0:74:eb:20:14:dc:d7:07:
         4b:0c:c6:06:9f:53:4a:44:8f:78:33:9d:8f:52:14:c7:bc:02:
         e3:95:1d:85:5e:77:f2:d8:dd:45:1f:c8:8e:6f:75:b4:9d:74:
         1e:07:20:87:3c:13:e5:71:2e:b1:5c:99:af:91:f8:4c:bf:dc:
         e2:62:2f:37:f1:78:7e:f0:0e:06:4f:60:67:73:58:4d:db:d3:
         ac:59:17:af:fd:78:53:0f:98:bc:62:64:4b:ed:5c:d3:a0:dc:
         e1:59:35:b6:08:f4:4b:ab:22:18:9a:11:a8:77:1b:67:1b:2a:
         90:21:db:f5:38:cf:bb:4c:b7:2b:90:d7:32:89:76:a1:7a:bf:
         59:9f:bb:0b:de:0a:d0:90:a0:0f:c4:ca:bd:16:25:a8:e6:4d:
         13:bb:77:f2:b4:56:22:50:d9:94:c4:b9:d4:48:13:dd:1b:e7:
         b4:d3:f7:b0:d5:ab:be:95:5c:ce:6e:18:ba:31:40:5d:bb:d1:
         1f:9f:ae:0d:32:69:ce:d5:25:bb:3b:70:0d:fe:84:67:6f:86:
         de:8b:d9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:25 2025 by rpki-client