Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa
File:                     a687c46a-89db-380a-b337-cdc67c4ee430.roa (raw, json)
Hash identifier:          8O7OrofUiY/P66CTDVHt0nSQl7KHroBpvJGs48cYTHE=
Subject key identifier:   91:C0:22:D3:99:FD:7F:6A:BA:19:AB:8D:3C:D8:F0:4E:A4:FD:41:1C
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A857600D3C5CF9B37C8111BC0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     25961
IP address blocks:        69.1.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:76:00:d3:c5:cf:9b:37:c8:11:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=0a862b2d-4b40-4bd8-9fbc-708bded61bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e6:ac:05:8f:7d:59:79:35:20:32:e1:0b:65:
                    a7:71:29:07:0e:fd:cb:ab:e2:5c:11:55:58:61:1d:
                    b0:81:4a:0c:11:92:4d:cc:cd:05:1e:a1:72:8e:5e:
                    23:d6:b8:19:02:8c:38:9f:10:d5:b2:0e:a6:5d:f1:
                    7d:02:ef:c7:c3:96:52:06:a5:e3:eb:b3:5b:a7:dc:
                    9d:b1:52:57:71:2c:f9:5f:9f:b1:a5:cd:f0:a6:e3:
                    06:fc:7b:79:80:ab:50:20:ba:90:ba:14:02:73:e7:
                    1a:10:3e:c0:14:52:dc:df:a8:4f:60:f8:ba:3b:a7:
                    41:8b:db:8a:4e:8e:15:f0:00:6e:8a:83:f3:07:fe:
                    50:7d:8a:a0:24:e5:be:91:86:28:ad:47:4e:fc:54:
                    6a:9f:02:cb:b7:84:86:72:1a:c1:5b:74:65:ab:ef:
                    f8:d5:94:52:14:0c:88:98:33:23:82:b4:06:9b:81:
                    23:9d:c5:60:24:fc:f8:17:d1:c2:01:1d:c2:60:7d:
                    59:db:cf:a1:2c:f5:e3:da:f4:67:d3:df:68:74:a3:
                    32:ee:9f:64:a0:07:8f:8f:11:17:08:0f:2e:42:e4:
                    47:69:8e:78:d9:00:a4:e1:05:cb:cc:7b:5c:8d:f9:
                    86:de:e9:be:f6:e4:b9:4a:d8:ec:cd:93:ce:90:a2:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C0:22:D3:99:FD:7F:6A:BA:19:AB:8D:3C:D8:F0:4E:A4:FD:41:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f3:d0:32:05:bb:b7:3f:6d:68:dd:da:a5:c5:90:c3:7e:55:
         f7:a9:f3:e1:ba:32:4e:78:0c:f3:8e:e1:33:0f:00:a9:9d:a9:
         89:b8:94:95:10:2e:46:0b:8a:39:21:57:22:63:18:62:30:d0:
         fd:ce:20:f3:5d:53:5b:f9:7c:69:55:5f:a6:06:a3:64:5e:4a:
         e1:21:92:91:d2:4b:0b:c3:09:1a:99:b2:b3:36:94:c8:b6:0c:
         e5:dc:bf:ab:b3:de:30:1a:ff:5f:3b:e5:f2:58:61:af:36:1c:
         f6:a7:9a:6d:27:4e:7f:0b:79:bf:dc:cc:94:74:3c:a7:1a:93:
         d7:73:81:eb:ee:16:55:eb:63:f8:8a:3c:91:ad:9e:12:52:2d:
         93:c9:71:db:dd:b4:d5:9b:36:e8:f5:31:0f:8c:64:59:3e:90:
         10:2f:fd:79:1d:9e:03:1c:cb:2f:2a:30:d6:d0:05:67:f8:6c:
         c5:96:6f:e2:d6:7b:9b:d6:4c:a2:b8:e5:a3:92:39:a9:1e:34:
         99:a0:1e:57:cc:c1:d1:79:a6:39:cc:7b:66:1e:95:62:73:e8:
         4f:0c:65:ee:64:d2:50:12:9e:0e:e5:d9:76:0a:cb:d8:d8:fc:
         97:96:06:96:06:e1:58:ac:78:45:63:57:d7:77:58:f4:98:d9:
         85:bc:1d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:41:30 2025 by rpki-client