Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/72285003-2342-35e0-8c5e-615711593847.roa
File:                     72285003-2342-35e0-8c5e-615711593847.roa (raw, json)
Hash identifier:          l7wI4CV74//I9d1drJ3Rvt0JuUsldvu0S0yv30DL6YM=
Subject key identifier:   3E:BA:9C:7B:36:F3:CA:EC:16:B5:71:A5:2E:E6:04:0C:1C:52:68:FF
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A90A0B865D927B6E77A551180
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/72285003-2342-35e0-8c5e-615711593847.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     13692
IP address blocks:        69.1.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b8:65:d9:27:b6:e7:7a:55:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=3466a66f-7006-4323-b469-1768abdef6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7f:39:ab:5d:fa:a5:e0:e8:b3:97:55:69:9d:
                    83:28:ff:d6:f5:f7:c3:b3:82:c4:7c:69:47:79:12:
                    13:87:e4:b5:36:86:b1:b0:8d:75:4e:06:9d:37:0e:
                    25:5f:e8:34:af:9f:12:b3:75:c8:ac:26:27:db:d7:
                    92:ce:97:d7:7a:65:ac:15:ee:8b:10:d2:fe:f9:ee:
                    01:42:e3:e6:99:92:21:0c:3c:31:50:8a:7d:92:41:
                    29:8f:ad:40:30:8e:e6:f8:16:66:4e:1f:b9:4a:a9:
                    d2:83:df:ab:bc:63:bd:75:60:64:76:44:3c:21:7f:
                    dd:bd:52:d5:74:84:81:7c:e2:d0:95:04:37:af:13:
                    c3:8f:80:38:33:e8:f0:77:bd:e8:88:07:b7:b4:49:
                    b1:ea:87:5e:9a:05:72:e3:76:50:9a:e9:0a:12:e1:
                    0d:ca:9a:da:75:2a:e4:7b:7e:db:40:9d:19:49:62:
                    61:c0:65:a8:bd:79:85:0b:86:43:6a:6c:09:4e:eb:
                    cc:93:da:d7:84:77:db:65:5f:a2:dc:02:c3:7f:46:
                    ee:0c:2a:f6:bd:0c:10:39:8a:d8:89:29:cb:cf:ef:
                    2c:2f:bf:31:3c:f3:d0:42:4c:e2:ef:1d:ac:7a:3d:
                    2b:20:b0:d8:70:ef:21:b0:cf:d7:57:7f:04:86:00:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BA:9C:7B:36:F3:CA:EC:16:B5:71:A5:2E:E6:04:0C:1C:52:68:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/72285003-2342-35e0-8c5e-615711593847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a6:94:8b:68:4e:75:c9:f9:4b:c9:5a:f7:08:e8:9a:33:67:
         fa:d8:6c:99:e8:50:a6:7f:15:4b:76:1b:b6:a0:80:29:24:fd:
         f5:2e:29:73:f8:65:21:e8:fd:9c:94:68:16:cf:05:b8:9b:12:
         92:bc:61:1a:73:8c:a8:0c:91:00:0b:8a:4e:9b:82:e1:1e:74:
         48:e4:a0:8e:81:7a:6e:b5:53:68:25:ab:50:e3:fc:ec:ed:30:
         e9:12:1b:93:a5:a8:bc:93:eb:e0:de:21:e1:1d:f4:ed:00:58:
         ce:21:15:3f:f3:fc:ce:30:aa:32:68:6e:4f:fb:30:79:07:88:
         88:24:80:aa:92:cc:ce:80:75:38:0c:04:13:79:1e:7c:80:14:
         bd:0b:b5:62:9e:eb:38:29:0d:5d:6f:b5:a8:64:62:7f:7c:cc:
         79:db:b4:55:32:21:24:7b:8a:ed:1b:18:61:40:db:c8:3e:54:
         bd:18:82:9b:ec:69:78:94:5f:bf:55:24:3c:17:35:5a:6f:32:
         5d:7f:76:78:5d:67:e5:73:46:d2:28:4b:ee:c9:58:28:03:d8:
         6d:0f:f3:8e:e1:91:f5:96:de:c2:58:c6:d8:04:e8:1f:65:5c:
         fc:5c:76:f0:f4:78:45:8c:40:7f:2b:19:9b:06:49:0e:a8:39:
         4f:d6:c1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:07:14 2025 by rpki-client