Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42027eea-f518-38da-a8a8-97e9aca956d3.roa
File:                     42027eea-f518-38da-a8a8-97e9aca956d3.roa (raw, json)
Hash identifier:          i1ioH0Vpyz21RBjuOTQLBjwRnQEhstE6EcuKERzFDGc=
Subject key identifier:   ED:DF:93:FC:B7:A6:B0:64:6F:2B:08:33:E7:C2:4A:54:DC:3E:10:28
Certificate issuer:       /CN=cb3c1858-774e-412f-8f35-dbceb0979782
Certificate serial:       010D0C9F4328584AA160E1760660FEE4A0F3C700
Authority key identifier: B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42027eea-f518-38da-a8a8-97e9aca956d3.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     23118
IP address blocks:        69.36.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:e1:76:06:60:fe:e4:a0:f3:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3c1858-774e-412f-8f35-dbceb0979782
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=b1ed933b-107c-48f1-aac5-33713325073e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:95:f9:a1:6a:74:1f:e8:2c:81:36:ba:35:be:
                    6a:1b:87:01:60:63:a5:70:37:76:00:9f:cd:aa:c4:
                    17:8f:8b:29:dc:6e:15:cb:76:73:09:04:14:42:d6:
                    fe:c2:ea:3c:22:10:d5:8a:f1:5c:a6:35:d3:f4:16:
                    77:59:7d:a4:2f:3b:2e:18:36:3d:46:da:5d:3c:99:
                    4d:49:f8:3e:17:6e:19:ab:6e:1e:79:b3:d7:0d:52:
                    51:56:48:0f:c7:4f:0c:6d:eb:e4:bb:32:de:8e:c5:
                    1d:d4:61:a5:d2:35:97:09:ae:ab:e3:f1:11:52:74:
                    a1:ac:15:be:51:84:11:8e:e0:f8:bc:a1:c7:f5:9e:
                    31:6f:7a:9e:31:b8:c1:84:39:6f:60:e4:db:ed:82:
                    82:77:74:3c:0f:68:b8:5b:5a:92:8e:e7:48:6a:46:
                    e5:6e:78:39:e6:d9:78:74:c2:73:26:0b:d1:9b:f8:
                    b5:4e:36:46:1d:ad:e1:b7:22:f1:d7:ba:a0:b8:df:
                    c2:4b:bc:f9:1a:d4:b8:6f:d3:3a:77:b3:6d:2e:c3:
                    28:0a:da:09:c6:cf:87:76:7d:9e:68:07:d8:48:00:
                    86:58:ea:3a:86:ed:97:be:f5:0c:2c:af:99:2d:cd:
                    3a:b6:60:52:15:5d:ad:be:32:23:4c:7d:5c:a4:d1:
                    8f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DF:93:FC:B7:A6:B0:64:6F:2B:08:33:E7:C2:4A:54:DC:3E:10:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42027eea-f518-38da-a8a8-97e9aca956d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl

            X509v3 Authority Key Identifier:
                keyid:B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:fb:cf:e6:41:de:c2:77:f2:fd:bd:e2:b5:d7:ac:63:f4:81:
         31:bf:db:34:f4:ed:b7:25:fc:1d:c1:62:7a:09:93:16:e1:ba:
         d1:27:cc:36:d2:35:9b:d1:f8:4a:4f:71:14:64:e1:88:ab:e2:
         84:da:e4:a8:f5:1e:78:7e:ea:30:80:cc:6d:33:94:87:29:46:
         cd:86:01:8f:a8:16:4a:b3:36:1b:e6:2a:9f:c5:39:25:f8:41:
         31:db:f2:7b:8d:64:78:81:c2:09:d8:d8:fb:6f:d7:91:48:2b:
         6a:11:5d:4b:fd:d1:f1:db:53:72:bc:d1:d0:6a:fc:00:8e:3d:
         c6:52:04:41:82:63:e2:09:c2:79:0a:25:64:c0:76:0a:23:3d:
         62:07:1c:64:58:e2:ba:a0:51:20:6b:9d:c8:2b:6d:94:a6:22:
         77:64:a5:14:7a:05:1b:a4:85:f1:0d:bc:60:75:57:ef:62:c2:
         87:fa:10:f0:60:01:91:e1:a3:a1:d5:ef:52:19:71:98:70:eb:
         6c:5b:7a:bc:ad:a4:da:a0:02:ea:d3:94:a5:76:ea:43:a1:cc:
         fb:44:18:7d:7f:19:5e:d0:9c:e4:d9:ff:fb:05:58:db:80:03:
         49:85:8a:cb:60:12:57:8d:a2:35:5b:67:5d:37:37:96:f4:e3:
         3a:ab:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:16:35 2025 by rpki-client