Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/384f41e3-98f6-3cea-90f5-3d87e9fdd616.roa
File:                     384f41e3-98f6-3cea-90f5-3d87e9fdd616.roa (raw, json)
Hash identifier:          uyFaGSxzFObgKpGQ2ZAWmd8vzuoa6/FZ8a4y1PNLhDI=
Subject key identifier:   B6:97:A3:52:04:0E:F6:BD:D6:58:C8:BE:CB:FB:61:DE:78:B9:60:F0
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FCD8DCC527DA3D205FFC0
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/384f41e3-98f6-3cea-90f5-3d87e9fdd616.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        69.50.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:cd:8d:cc:52:7d:a3:d2:05:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=a5638477-7378-4c1e-9196-ecf664e4f118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:0e:20:81:2d:0e:1c:3f:e2:b0:91:cc:1c:
                    f1:4c:c0:33:17:04:70:52:5b:ef:eb:57:27:81:2a:
                    ff:c9:38:07:2a:28:e6:74:89:b1:e9:c7:c9:5a:8d:
                    1e:5b:45:e4:30:f8:ac:56:73:bf:0b:52:64:c7:e6:
                    48:e6:9e:7c:12:ad:c8:8b:eb:83:a8:f4:4d:c6:cc:
                    e0:cc:7d:83:f1:76:0e:ae:56:01:9c:27:31:96:b2:
                    94:97:29:5f:30:53:23:a3:ae:38:21:23:06:43:1b:
                    dd:82:92:ce:41:37:e5:c9:8d:40:07:6e:38:87:90:
                    c2:b0:5b:55:a9:cb:97:3f:be:f0:37:d5:7e:eb:1c:
                    cb:45:3f:31:2a:1b:e4:66:25:8b:26:23:9c:51:80:
                    4e:b7:c1:7c:f2:88:1d:b1:38:27:2a:1f:5c:97:75:
                    0b:32:49:51:f3:af:62:5a:24:2e:bb:42:3e:8d:8a:
                    3a:f9:5b:51:e2:19:26:3c:ee:fe:df:71:aa:85:81:
                    d5:84:2a:e3:7a:dc:63:e2:cb:13:5c:de:ce:d0:dc:
                    9e:ef:24:dc:15:6e:6a:d4:eb:14:56:1b:cd:72:cf:
                    f4:61:c1:80:f9:37:3d:1c:41:56:70:77:89:1e:f8:
                    f6:c6:e6:7e:3b:05:99:3a:41:c0:b8:9c:1f:04:59:
                    f1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:97:A3:52:04:0E:F6:BD:D6:58:C8:BE:CB:FB:61:DE:78:B9:60:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/384f41e3-98f6-3cea-90f5-3d87e9fdd616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.50.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:6b:0a:af:fb:8f:13:21:54:5b:28:81:7c:14:fc:8d:8e:01:
         57:ff:a9:b4:f2:3d:d3:61:03:32:70:14:e2:0b:5e:c8:60:de:
         e7:30:cb:6a:a4:46:18:38:de:a6:20:98:01:3b:55:3b:f7:49:
         87:0f:f8:c9:40:cc:4e:46:e2:79:8c:1f:ea:69:0f:bf:ef:3c:
         e3:c3:d2:e6:1f:70:80:89:66:20:a2:f0:b1:64:cd:14:36:c4:
         ec:f9:05:44:c8:2b:91:27:82:0f:a5:9d:5e:c7:14:1e:ff:66:
         7e:73:51:aa:37:08:17:d1:dc:ed:12:a1:1d:10:80:9e:a8:92:
         7e:ef:d1:9a:85:5d:ba:72:46:0d:ee:31:88:b3:b8:d3:39:ed:
         8f:77:a1:21:1f:bf:d3:48:43:cf:59:77:88:11:01:10:05:35:
         06:9d:d7:c7:6e:76:f5:c9:f6:16:14:04:43:9c:4a:32:dd:2f:
         42:39:45:42:67:01:7e:60:db:af:40:1d:1a:73:53:00:af:f8:
         2d:9f:df:13:13:ac:93:7d:8b:d8:54:d3:04:5a:20:4e:73:54:
         21:75:38:fd:7f:63:4b:b0:1e:cb:55:b5:14:e3:39:4e:46:30:
         5e:b8:94:b3:71:4a:bb:5a:6c:3d:66:4e:2f:3a:bf:62:4f:6a:
         5b:00:c2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:36:47 2025 by rpki-client