Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6f5cc258-037e-3511-a200-441a9f12cacd.roa
File:                     6f5cc258-037e-3511-a200-441a9f12cacd.roa (raw, json)
Hash identifier:          lKijBhIptckJ9KUuY9NxGV5bf9Iy6WLsWV8bJTWArAA=
Subject key identifier:   67:F6:96:8B:13:93:0D:58:0E:D1:A0:07:A9:3E:7B:26:77:1A:CF:F4
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849B9A9FFAB4E09A1DFC944BD00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6f5cc258-037e-3511-a200-441a9f12cacd.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     397422
IP address blocks:        69.1.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a9:ff:ab:4e:09:a1:df:c9:44:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=68e08783-4f1e-406b-af75-3ff240d88c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:23:3c:a2:e6:70:fb:be:dd:3e:3a:ae:13:
                    c3:25:15:e1:24:dd:57:52:a6:3c:7d:15:30:3f:58:
                    5b:92:9f:b5:23:0b:9a:f2:4e:ec:e8:61:b7:9b:ce:
                    1f:c3:86:9a:3b:51:28:c8:3e:c4:85:e8:2d:62:e7:
                    da:dc:b2:ca:30:7a:b8:19:70:e0:31:b3:a7:1f:94:
                    ca:1c:a5:81:2e:79:a0:8b:8d:25:33:ba:e0:20:71:
                    cd:38:92:36:d1:56:aa:b4:d3:1e:d9:3b:c5:4c:d3:
                    aa:d7:26:d4:8f:31:ad:fc:fc:6f:0e:69:e3:ed:bb:
                    63:83:db:78:93:bb:02:f7:44:4e:4f:b7:4c:48:45:
                    3b:b9:53:0d:7c:4d:17:67:fb:5b:67:bd:10:2e:76:
                    58:51:0c:f9:fe:ff:df:c8:20:10:df:f7:f8:58:92:
                    5e:58:22:3c:8e:2a:6e:f8:6e:18:ea:70:32:8c:d0:
                    ee:6c:8b:89:82:59:46:67:61:13:75:50:ba:a3:f5:
                    97:08:79:fb:79:0d:34:c7:a0:0b:24:05:02:a5:27:
                    55:65:8f:0a:4f:c8:35:11:d6:34:c1:1e:9f:8a:13:
                    45:09:b4:8d:cd:19:fd:25:f4:c0:28:26:d0:17:15:
                    a2:2d:f3:51:50:57:00:06:4a:aa:4c:0a:e8:d2:cc:
                    49:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F6:96:8B:13:93:0D:58:0E:D1:A0:07:A9:3E:7B:26:77:1A:CF:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6f5cc258-037e-3511-a200-441a9f12cacd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:40:aa:a0:5d:96:dd:80:8e:be:53:52:4d:e6:f4:27:98:2e:
         0b:43:85:36:da:f2:6f:58:00:6d:f0:71:b9:eb:50:6f:2e:80:
         ad:26:85:99:f3:8d:ab:ba:77:25:55:e3:17:06:42:9c:37:b4:
         8b:33:40:73:4c:95:d8:c7:58:bf:98:cc:39:2c:aa:f7:af:21:
         60:6c:ca:2f:1e:01:85:00:ff:c6:87:f5:9e:3f:ab:4a:69:2b:
         3d:c6:22:36:07:88:a2:05:62:ff:ca:d4:e6:b4:ae:3c:36:c0:
         6d:a3:52:ef:52:d3:7a:6f:d5:03:6f:23:ec:1c:d8:bf:a6:0c:
         3c:3b:d9:2c:26:20:5b:5e:44:27:f2:01:cb:d6:c5:01:be:dc:
         06:86:09:13:94:8e:16:e9:5c:29:06:01:1d:74:6d:e5:4e:75:
         42:22:76:ba:bf:13:f6:3f:75:73:72:ef:1e:ce:47:d7:85:c7:
         6e:8a:58:6b:9c:33:d3:c7:82:77:52:7d:67:ce:28:82:6d:a5:
         57:40:f7:ab:1b:f6:18:09:0f:be:e0:59:d7:f6:c8:12:a0:2c:
         2c:d7:b7:53:6a:0f:d4:c7:84:6b:8c:f7:ad:30:79:5d:0d:39:
         e0:46:fd:b6:7e:eb:73:b3:cc:20:22:74:79:9e:dd:50:5d:8e:
         8f:c6:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:09:08 2025 by rpki-client