Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/57aff851-18b2-3c97-924b-1cbb9ef8f281.roa
File:                     57aff851-18b2-3c97-924b-1cbb9ef8f281.roa (raw, json)
Hash identifier:          7Z981a7eHrNu0NtgjFDzAXroJMJpGeFfqfAzIztgOyQ=
Subject key identifier:   39:12:DF:94:E9:57:E3:F4:08:10:CF:2C:F2:B3:0B:4E:4E:5F:CD:CD
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4B98DD05B6D1C693C7CC80
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/57aff851-18b2-3c97-924b-1cbb9ef8f281.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        69.50.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:98:dd:05:b6:d1:c6:93:c7:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=476ae765-98e5-4f46-b3ac-65c8f14f332c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:09:cd:72:19:ba:69:05:1c:e6:a0:51:16:2b:
                    61:d6:c0:03:c7:de:9b:fa:6c:0f:ec:58:91:2c:b2:
                    17:14:29:b5:4c:b2:da:57:f3:35:bd:43:88:7a:58:
                    27:cc:ff:f6:9e:7f:38:bd:62:8c:df:b9:23:52:be:
                    bc:46:13:67:31:10:ed:80:7f:e4:b0:02:8e:49:c1:
                    30:ef:71:38:4f:33:1a:f4:2a:67:61:5c:e0:ba:35:
                    ca:eb:46:24:9e:49:ba:22:15:e9:3c:a1:f4:c5:c1:
                    61:aa:8c:03:3d:9e:09:f4:51:1c:a7:02:62:23:0f:
                    2f:6b:de:f1:28:47:fe:1a:86:60:88:bf:a4:20:a2:
                    e7:af:b4:9a:2a:d0:9c:d6:bb:91:85:de:4e:64:98:
                    4f:c9:18:1b:3c:e9:8f:78:b9:2c:c6:45:3c:60:9c:
                    8d:a9:db:8b:d6:04:f6:c2:c2:ac:16:18:75:8e:0e:
                    b5:66:63:da:2a:46:87:a6:97:25:a2:9f:82:9b:52:
                    0c:67:ca:10:10:96:12:b6:56:f4:b2:65:a4:84:b4:
                    aa:c7:c2:a0:65:6b:7f:6e:20:87:8d:25:22:4f:f4:
                    8a:f5:ad:f8:39:cb:df:ab:99:02:cd:61:d6:a9:d1:
                    1b:f6:9e:3d:53:4f:b3:db:97:f9:dd:50:75:17:c9:
                    a9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:12:DF:94:E9:57:E3:F4:08:10:CF:2C:F2:B3:0B:4E:4E:5F:CD:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/57aff851-18b2-3c97-924b-1cbb9ef8f281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.50.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:86:6c:70:44:0f:5d:28:a7:c0:47:5d:9e:7d:3b:ff:dd:59:
         fd:4a:d3:fb:6d:f4:ec:c5:a1:c3:54:f8:63:ca:67:6e:20:eb:
         a7:51:c6:08:0d:fe:58:9f:53:29:b4:0f:c5:ba:66:86:47:a6:
         a6:ca:41:ba:4c:29:90:25:08:c1:77:5d:8d:2a:48:a8:8c:a1:
         3f:9b:d8:77:1d:85:df:60:38:e7:82:88:53:36:39:e6:f2:d2:
         51:56:29:5b:a7:0e:b2:04:41:f3:ab:a4:24:4a:ce:76:94:82:
         28:d5:90:b8:9f:07:b7:3f:23:49:e2:09:4c:ea:5c:d3:21:67:
         75:70:67:86:2b:51:2a:94:43:ff:f6:28:eb:ea:85:3c:e6:b7:
         72:14:d4:e6:f9:12:01:79:c5:92:9b:14:bc:4d:90:2a:27:91:
         51:29:42:0e:d8:1b:fb:82:dc:ba:4f:81:dc:16:02:48:ae:08:
         3e:49:fc:1f:e1:6a:66:2a:33:39:57:03:33:e8:7e:36:a0:a9:
         a4:52:04:93:65:49:44:ab:95:70:6a:36:17:ee:9c:d4:60:76:
         f6:8d:88:20:3c:00:f5:cb:c8:cf:36:8d:8b:60:ba:b8:78:46:
         64:1a:c7:d5:b5:61:23:1c:e5:e4:d2:92:96:1e:f7:b1:c7:43:
         88:55:06:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:50:19 2025 by rpki-client