Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa
File:                     fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa (raw, json)
Hash identifier:          jM/O72DTfNHwa90MVAWF2P3Ezy7ZQgWpt+dPBqCHJvM=
Subject key identifier:   23:11:F8:F4:96:32:15:44:CA:0C:DC:43:A4:9B:49:90:25:E5:20:3D
Certificate issuer:       /CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
Certificate serial:       010D0C9F432858499294A4937AD4B7A773D1EC00
Authority key identifier: 87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     26404
IP address blocks:        69.42.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:a4:93:7a:d4:b7:a7:73:d1:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=a13fd32e-1a58-40be-bbe2-b4310ecf5c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:83:31:5b:ce:6f:81:8c:51:7a:de:03:5b:
                    32:53:64:c2:17:74:fd:e6:02:91:6b:a9:88:45:0e:
                    a0:2a:43:7c:7e:42:c3:8a:41:4c:ce:a5:3c:bf:22:
                    85:c6:81:60:be:29:80:56:f0:c9:61:4f:74:70:97:
                    96:9d:6b:45:8a:f2:b5:07:57:62:67:8d:51:68:bd:
                    54:ea:94:6b:b9:ee:c9:50:5b:bd:35:a1:4f:fd:5e:
                    74:d7:6c:f3:69:99:e7:32:63:b0:69:2e:68:d5:3d:
                    0a:40:c3:36:73:4a:74:2a:71:12:ba:54:2e:83:dc:
                    c1:75:8e:2a:17:cf:8e:8e:88:1b:43:ca:3c:c4:f8:
                    fb:4f:dd:b3:43:91:23:b2:90:5f:a9:b6:75:91:0d:
                    22:b7:36:5c:67:2a:1a:79:23:95:02:aa:64:2c:5d:
                    7f:df:10:1c:98:7e:cd:79:ac:01:21:9f:68:fd:a2:
                    02:fb:d1:a6:5c:05:1a:68:28:f2:05:a4:58:93:d5:
                    cb:c0:8a:3b:4b:98:ad:ee:40:b7:1a:74:c3:2a:c1:
                    82:42:53:66:ee:9f:ea:f0:74:d6:98:4e:f1:a1:51:
                    3d:d8:d1:c2:76:b1:cf:a0:de:14:cf:5b:28:76:46:
                    d3:2b:24:8c:a5:38:8d:70:5b:43:86:e2:9c:fb:35:
                    a6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:11:F8:F4:96:32:15:44:CA:0C:DC:43:A4:9B:49:90:25:E5:20:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl

            X509v3 Authority Key Identifier:
                keyid:87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:81:66:cd:dc:4e:03:f3:19:b7:bf:54:e4:b7:d0:0c:d6:1a:
         01:00:d7:19:0d:34:ce:70:04:de:0d:42:cb:ea:f9:30:e0:5c:
         53:c8:34:9c:67:a4:e4:bb:a6:8c:32:57:12:96:4c:86:62:77:
         4b:b7:48:3d:7e:93:c8:6a:42:f6:c1:6d:d3:11:fa:20:4b:a0:
         88:d1:9b:75:6d:85:1a:cf:cf:80:6e:b9:24:eb:b2:ed:f2:57:
         5a:9e:3b:ec:4c:bc:5f:83:4a:56:30:81:bd:a0:08:16:51:fb:
         ff:50:2b:4b:3f:65:2b:b3:a4:6e:da:aa:08:2d:aa:36:e8:f3:
         2c:e7:a2:bc:46:7e:ca:d3:1d:fd:ef:24:7e:ed:1f:14:1f:7f:
         37:37:3a:09:4f:89:b6:30:b6:f7:b1:3a:0c:33:c9:50:a5:cd:
         ec:d4:0c:58:93:68:2a:bc:52:c0:a8:cc:31:e7:01:df:02:ad:
         07:94:64:eb:85:a4:12:79:7b:81:6f:95:67:15:1d:8b:8c:ce:
         7e:99:1a:00:8d:b3:ee:6e:17:de:07:57:cb:a7:ea:1b:a8:6c:
         a5:17:2a:d0:7b:de:a1:38:32:4b:9f:d7:f1:28:72:34:dc:30:
         4e:2d:25:2f:bb:56:64:0d:37:08:fb:7b:80:08:df:c4:f9:1a:
         e7:ab:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:11:00 2025 by rpki-client