Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa
File:                     0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa (raw, json)
Hash identifier:          9Hjti1O3lPvisbU5JdIhEYFDQGAZrJ9NJN3IiEQxsvQ=
Subject key identifier:   94:26:28:27:76:A5:0B:5E:6E:BE:CB:49:C5:F1:5A:99:D6:3D:A2:D3
Certificate issuer:       /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial:       010D0C9F43285849E7BA7EF17B34E1A1C62F2E00
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     11659
IP address blocks:        169.147.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:7e:f1:7b:34:e1:a1:c6:2f:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=81cd901d-0abe-4392-89b2-25b4ddae1de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bd:4c:21:e1:34:79:ca:e7:6c:d0:4c:64:44:
                    b2:ab:76:78:a5:7c:4a:57:78:74:69:0e:02:95:d6:
                    17:e4:43:2e:e4:97:3b:ea:8e:c1:99:ed:3a:74:31:
                    93:13:4f:5e:b5:3e:a4:3f:33:79:96:41:bc:3d:7b:
                    16:e3:2c:05:01:af:d4:9d:5a:a4:e4:e5:32:12:ea:
                    26:eb:04:06:8b:66:5e:5c:c6:98:21:58:bb:aa:bd:
                    a9:e8:e2:cc:f0:35:91:4e:70:0d:35:af:35:66:8c:
                    c0:ce:fe:6a:dc:86:1f:e4:b3:d9:53:d2:af:25:e8:
                    34:08:b7:58:47:a4:0c:ca:e9:6e:22:2a:5f:ee:c3:
                    69:10:6d:a7:97:bf:f5:da:8c:d2:f6:cf:ef:4b:4e:
                    28:4e:20:f7:ce:ac:84:8d:5e:12:b7:77:8d:7e:b5:
                    fc:b9:cc:9e:73:1a:a3:91:84:50:9f:91:30:9e:3c:
                    d5:a0:67:46:81:44:37:50:04:ff:ae:8a:cf:4e:12:
                    84:eb:2d:68:0f:cc:7e:80:74:9c:41:dc:0b:d5:cf:
                    2a:32:23:1b:61:83:0d:e5:6c:73:00:f1:20:c3:a3:
                    29:e8:91:1d:8c:f8:14:63:42:09:80:fd:ea:f4:c6:
                    c9:9b:01:2b:07:25:44:c7:f3:37:9f:b1:21:7b:5d:
                    df:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:26:28:27:76:A5:0B:5E:6E:BE:CB:49:C5:F1:5A:99:D6:3D:A2:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl

            X509v3 Authority Key Identifier:
                keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.147.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:71:1d:58:28:46:63:b3:90:98:c7:6d:cc:09:58:7d:9f:6f:
         e4:4d:84:2f:54:f4:42:55:79:4f:d9:53:a2:c7:60:bf:f5:87:
         f3:79:2a:e6:33:62:c8:2f:cf:f8:a9:28:1c:87:40:05:98:1a:
         7f:63:1c:21:e6:a7:5b:22:7b:eb:13:c1:e5:da:1a:34:15:20:
         34:2d:67:4d:3e:dd:e7:cb:e7:84:ba:5e:ec:5a:99:84:fc:45:
         10:95:78:e6:ca:72:05:74:4e:c6:85:a9:45:84:90:6d:f5:c7:
         9c:ec:ff:f5:2d:fc:81:11:d2:0a:d4:de:60:92:39:8d:5b:bf:
         3f:c8:9e:0e:c9:8c:cc:39:a4:d0:ae:d0:47:14:56:ea:34:a0:
         02:c9:5a:92:5c:16:bb:e5:eb:04:02:10:50:6a:0e:18:b8:4f:
         40:75:81:74:07:7b:e6:46:3f:fb:cd:c0:40:6e:56:59:4a:d5:
         ed:64:42:34:d0:25:b8:f0:d9:61:0f:8b:df:13:c6:65:83:a4:
         39:df:74:c0:b5:85:eb:3c:25:a4:c0:50:1b:2a:bb:69:e5:e0:
         ae:cd:81:0a:d0:24:8b:bd:36:73:9f:86:60:1a:66:c6:f6:d0:
         24:1e:42:44:c9:a3:6b:6f:69:ab:52:ee:d5:05:96:f3:88:93:
         ce:7f:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:41:25 2025 by rpki-client