Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/41b7ae61-8f36-3a2c-9a06-e4659677b722.roa
File:                     41b7ae61-8f36-3a2c-9a06-e4659677b722.roa (raw, json)
Hash identifier:          8xizwW5z6e0HmMx+uNATDJxnktWuBz2KUAYrUNQb2cM=
Subject key identifier:   16:0C:C9:DF:01:1A:9C:1A:38:96:1A:76:27:A9:CA:DA:30:30:3A:D4
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4BA5A6406BB2B59884A380
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/41b7ae61-8f36-3a2c-9a06-e4659677b722.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        69.50.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a5:a6:40:6b:b2:b5:98:84:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=f3a07454-07fb-4b3b-a8d5-3b67aeb53de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:ef:5c:4a:2b:ea:64:ca:f8:f0:2c:02:1f:
                    5f:f5:0e:32:ce:5e:df:fa:f1:c0:84:08:49:34:21:
                    6d:33:18:51:ae:cf:d1:55:87:87:e4:de:b4:48:66:
                    c2:cd:2a:f7:f6:9a:83:af:24:b1:14:85:9a:68:32:
                    ef:dc:9b:95:53:2a:d6:34:92:30:f5:71:1c:71:ea:
                    d0:04:18:2b:a1:c5:32:80:43:a7:17:de:ce:cc:a8:
                    53:54:2a:67:72:43:67:bb:e5:32:6d:3e:3b:ce:b0:
                    be:54:a2:4b:10:67:47:a3:10:b6:ed:ee:67:52:f6:
                    9a:41:c9:0b:f6:eb:83:aa:de:fa:bc:d2:f0:9a:9c:
                    9b:63:4b:8e:18:3f:17:c8:83:65:5d:34:09:63:66:
                    4c:a2:e8:34:7d:5e:27:aa:83:5b:00:a0:c9:a4:64:
                    14:0c:16:58:69:c2:67:2c:b0:bc:b6:12:e5:82:5f:
                    1c:50:d2:e3:b8:7f:05:eb:d6:87:e2:65:55:02:16:
                    f0:69:45:57:0e:39:87:c2:a3:df:d3:fe:a0:10:96:
                    74:17:eb:f2:b6:06:e3:cd:f0:a7:60:80:d8:19:20:
                    27:7d:81:c5:0b:ad:f6:eb:75:92:51:ab:ee:6a:60:
                    31:a5:84:2e:c3:b6:72:6c:a8:e6:8f:fd:18:71:33:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0C:C9:DF:01:1A:9C:1A:38:96:1A:76:27:A9:CA:DA:30:30:3A:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/41b7ae61-8f36-3a2c-9a06-e4659677b722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.50.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:79:95:0d:0f:15:2c:01:36:f4:c2:48:1c:ff:2b:23:ed:ab:
         3a:42:4a:74:bb:ef:73:67:87:c8:a3:d4:03:82:ac:1e:03:cc:
         cc:b4:51:30:d1:20:80:eb:37:16:14:f1:7e:01:37:58:56:a6:
         50:49:0b:e2:c5:d4:7e:78:86:c8:b7:a3:81:5d:91:c0:05:d4:
         d5:7b:a4:83:d1:ad:77:f9:0b:67:22:a3:8f:de:46:0c:3a:f2:
         98:c1:ca:b0:7e:b5:4f:17:a8:b1:14:1d:6f:51:1c:8e:68:38:
         db:df:fa:b1:b3:b0:79:1c:5e:4c:7d:b3:3a:91:d2:69:04:f7:
         18:fb:79:d0:30:4d:bd:f1:cf:ef:67:21:a7:b7:d4:c4:ea:c9:
         eb:f4:29:c4:80:c7:5e:2b:39:d5:ef:e9:c6:2b:8e:26:5f:1a:
         42:98:d8:91:1f:96:9b:75:dd:a5:c7:d5:76:9d:16:79:67:61:
         20:b7:2c:4b:a9:52:1c:70:d0:2a:99:b1:fc:f4:b9:73:06:47:
         e7:a4:df:ad:b4:55:53:8b:52:88:ed:1b:d0:aa:3c:b6:b1:b9:
         4f:e0:7b:e7:f4:7d:b4:c2:6d:84:c6:05:9f:9d:88:a3:8a:ed:
         49:5b:e0:45:27:35:24:8f:9e:5a:1a:72:92:67:4b:bf:15:26:
         19:58:92:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:30:33 2025 by rpki-client