Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/41b7ae61-8f36-3a2c-9a06-e4659677b722.roa
File:                     41b7ae61-8f36-3a2c-9a06-e4659677b722.roa (raw, json)
Hash identifier:          /zJY6zjHoMzl44qI3+O0Nk6/21TkUOX1+WQjBroWR7U=
Subject key identifier:   FE:A5:1B:B4:98:F9:43:0B:03:B0:0E:D6:E5:B5:63:83:29:87:39:9C
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FCD9AD127E325BC542380
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/41b7ae61-8f36-3a2c-9a06-e4659677b722.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        69.50.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:cd:9a:d1:27:e3:25:bc:54:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=0d9c0070-ff99-498c-8910-26971cf9964a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:24:af:c7:6c:59:fd:e1:f6:cb:7f:f2:37:0b:
                    d1:62:60:f0:22:23:9e:c3:18:07:6a:03:31:64:c7:
                    a9:7f:4a:53:02:c7:d2:28:a5:12:f3:5b:66:d0:05:
                    c6:d6:09:89:d0:d7:64:59:c8:89:f0:79:4f:35:4e:
                    60:fe:5c:6a:64:8a:d3:c0:82:99:bf:9e:08:c6:71:
                    67:70:f0:d9:48:e7:c1:1f:e2:9d:02:1e:83:e4:1d:
                    c1:8a:8a:2e:6b:04:06:4c:a2:bf:c6:11:0e:4b:05:
                    27:1e:0e:15:1f:34:a3:92:bc:1b:d7:d2:e4:01:17:
                    e4:a3:2e:86:61:39:19:55:93:aa:ce:de:43:55:23:
                    3f:ed:7c:4d:9f:98:c0:53:c0:1a:98:03:88:d4:24:
                    05:cc:ec:95:cc:e7:12:67:c7:0a:32:dd:84:a2:f5:
                    96:66:27:5e:a9:d6:07:28:21:10:27:06:20:cd:f0:
                    2a:40:a2:4f:c9:de:26:71:38:60:67:69:f9:a8:90:
                    b9:36:7c:83:bf:7e:bd:dc:17:88:68:73:37:09:54:
                    53:16:0e:d9:aa:a4:fc:19:33:5e:b9:60:40:a3:09:
                    6c:1f:7c:01:fe:d7:e0:d9:f8:99:22:c7:db:ce:be:
                    7c:7a:69:ef:52:33:8a:2c:d1:f8:a3:7a:85:a0:1c:
                    6a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A5:1B:B4:98:F9:43:0B:03:B0:0E:D6:E5:B5:63:83:29:87:39:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/41b7ae61-8f36-3a2c-9a06-e4659677b722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.50.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:fa:8b:ee:4e:68:87:d1:80:bc:8e:67:9e:f8:cf:20:d9:04:
         d0:37:7c:fe:17:14:91:86:68:74:ae:7a:64:3f:9e:32:28:26:
         19:5d:bf:1a:1a:9b:08:ed:3b:be:46:2a:c8:a3:60:8b:ed:9e:
         19:62:2c:9c:17:32:2f:48:78:dc:e1:e4:21:14:22:bf:72:6f:
         a3:83:20:2e:d5:ba:5c:69:ae:c2:f0:45:d7:b7:fa:b2:db:43:
         18:60:17:c3:7e:7e:ab:7d:b5:d3:62:c8:e3:c6:11:cd:60:5d:
         e4:ae:60:95:9b:33:24:86:1c:66:14:54:c0:f2:68:01:7a:53:
         b2:36:a3:13:f4:09:64:12:3f:65:09:2e:b2:44:ca:68:e1:96:
         e6:88:de:b6:19:fd:6b:3a:1d:1d:6f:5d:39:b7:d7:f2:e7:e2:
         e3:fc:53:68:0f:b2:7c:b7:9c:b2:34:96:20:a3:86:40:96:45:
         43:58:7a:6e:c5:41:8f:ee:44:7f:de:a5:1f:f5:12:a2:51:e8:
         cd:10:45:f5:5c:b5:57:cc:c2:9c:ec:93:25:81:6a:c6:49:06:
         7b:e1:17:0f:cb:af:af:7d:19:8e:00:d2:f2:16:65:3c:b2:73:
         f4:24:53:91:39:9e:67:04:60:98:01:96:d1:5d:29:ca:3a:16:
         af:88:6c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:49:00 2025 by rpki-client