Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1bccb8f9-e6d9-316a-a866-cd6d8b5c8035.roa
File:                     1bccb8f9-e6d9-316a-a866-cd6d8b5c8035.roa (raw, json)
Hash identifier:          wckwU28RFfGtlxk5x+8eXErJbfGuksjzqil+fdReqs0=
Subject key identifier:   EE:7E:45:85:1B:30:95:D3:CE:59:23:13:DD:07:C2:DA:43:1D:61:35
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A90A0B872DC0597727C60CA00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1bccb8f9-e6d9-316a-a866-cd6d8b5c8035.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     13692
IP address blocks:        69.1.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b8:72:dc:05:97:72:7c:60:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=5a3e43d6-63f5-4eba-8033-64545f74393f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:79:4d:56:ee:05:73:05:5b:dd:98:4c:77:4a:
                    7d:d0:09:57:dc:2c:72:06:79:d7:83:40:28:2b:bb:
                    89:03:48:0d:03:8d:8e:ab:2f:d6:3a:a7:ca:f1:3d:
                    47:62:05:7c:28:1b:5c:15:34:fb:f3:0c:87:77:82:
                    0f:75:25:31:25:77:06:8e:ae:7b:b8:75:ea:fd:38:
                    6a:88:e0:58:68:f4:e7:86:96:51:db:de:9e:1c:14:
                    6c:6d:03:e7:6e:6f:c4:46:f9:15:18:5b:46:03:1c:
                    a4:3d:78:b0:61:ee:a4:40:ab:7d:7f:91:f4:ad:f9:
                    2c:f7:54:e6:93:7d:93:b9:11:a5:a6:b3:ba:d2:f8:
                    40:69:5d:96:2e:67:c3:0b:37:1b:6f:cd:7b:fd:15:
                    49:9b:b6:1e:d0:b4:47:5a:0f:2a:2b:93:e8:32:39:
                    1d:63:bd:4e:a9:ee:70:76:80:87:89:fd:d1:49:cd:
                    37:35:1d:89:d8:03:01:ae:3f:b2:60:8d:5f:62:63:
                    10:54:eb:6a:ea:83:93:b0:01:d1:c3:5f:cb:45:59:
                    b5:fd:81:63:7a:7e:48:0d:f1:16:b0:83:c4:57:58:
                    22:ba:95:e4:f2:c8:a7:5d:ce:b1:e7:1a:85:60:c5:
                    70:66:96:db:62:08:95:8f:4b:e0:11:3c:23:31:67:
                    4b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7E:45:85:1B:30:95:D3:CE:59:23:13:DD:07:C2:DA:43:1D:61:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1bccb8f9-e6d9-316a-a866-cd6d8b5c8035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:99:6b:98:13:6b:4e:db:db:80:0b:52:f3:a4:76:f0:2c:af:
         49:f1:95:ba:72:1b:7d:54:76:80:da:c9:05:0b:8d:8c:02:4f:
         17:9e:46:6c:76:6c:78:84:24:2f:1f:78:f2:18:52:c1:cc:45:
         ae:41:e4:f2:05:1f:2e:13:23:5b:75:89:3a:9b:ad:b5:20:2f:
         30:88:eb:2c:1f:bf:8d:fa:86:0a:98:ae:0a:d5:4e:86:2e:e6:
         3c:d9:48:ae:6e:ea:d2:fd:bb:1d:13:53:3f:42:23:0b:bb:9b:
         0c:a4:e7:ac:5e:b0:54:81:51:65:da:85:b4:40:53:76:11:01:
         6c:ac:48:e5:92:f4:20:c6:50:18:9b:02:a6:ca:82:d2:03:9b:
         99:95:b0:05:29:79:f8:25:d0:f5:6d:9d:a1:91:eb:d9:67:6d:
         69:c5:42:d8:1a:bb:84:a4:04:1f:64:41:fb:d2:cd:6a:5d:34:
         3f:52:04:26:70:ac:25:d1:ac:af:8e:27:2d:66:59:cc:69:7d:
         37:aa:a7:07:72:22:5e:02:18:5b:f6:29:7b:f4:c9:d5:7c:a7:
         31:67:66:3c:60:44:7f:db:b2:27:50:e3:3f:84:54:a4:f5:8e:
         f9:d2:7f:6c:df:f4:30:6f:09:1a:a2:29:af:38:ce:82:fd:57:
         63:b5:d5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:45:04 2025 by rpki-client