Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e031cad5-5929-3d6a-8e03-7ee4dd3f2c65.roa
File:                     e031cad5-5929-3d6a-8e03-7ee4dd3f2c65.roa (raw, json)
Hash identifier:          ItvhurT0anan4e8J6uZPRQgYToln7FAcVPMiwWnL9cE=
Subject key identifier:   B0:C6:8E:53:B8:54:1B:F7:1A:35:A4:C3:94:D6:D9:1B:69:52:A3:CE
Certificate issuer:       /CN=e2213668-8973-4471-a19a-d7e8374ada63
Certificate serial:       010D0C9F4328584AB91BA1AD2C839208E2222480
Authority key identifier: C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e031cad5-5929-3d6a-8e03-7ee4dd3f2c65.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        69.64.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a1:ad:2c:83:92:08:e2:22:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=524c5ec9-ad87-4a3b-a3d6-63ea59992a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7c:ed:9c:7f:be:48:e1:03:0c:84:b1:e7:19:
                    2c:75:e3:4a:35:3d:04:79:c7:c4:09:1d:6a:3d:54:
                    86:aa:d2:6d:b1:06:f7:45:a8:34:2d:2f:04:aa:cd:
                    e9:d7:94:db:34:dd:51:4f:5b:3b:b8:1d:02:ea:41:
                    ad:2b:cf:13:a5:d3:7b:4b:10:ae:1a:b4:3b:26:3e:
                    f1:ef:4a:c0:4b:46:5e:55:50:f9:39:46:e8:b8:de:
                    6a:74:7e:6b:4b:ba:cd:03:55:c8:d5:2d:0f:ee:45:
                    0a:19:33:c9:84:91:28:2f:06:9c:82:7a:c0:9a:ef:
                    bc:e4:f9:3b:f7:13:7d:9d:0a:fa:1b:aa:9b:14:59:
                    bf:31:97:9f:2d:df:dd:ef:e4:26:f5:a4:d7:75:c0:
                    2a:b5:fe:27:90:c4:35:05:a7:cf:58:0b:a7:22:26:
                    f6:95:97:44:55:ce:c5:29:91:36:33:98:a8:fd:7b:
                    34:93:4d:69:18:b8:28:d5:6d:f8:63:58:cf:7c:e1:
                    58:3b:a5:ae:49:35:70:27:b9:9c:1c:f1:8b:22:70:
                    c0:98:fe:16:9f:41:2b:11:f5:b1:92:a2:b1:91:aa:
                    b3:ee:a4:2f:db:b2:c6:15:6a:a1:f4:9a:d1:fc:fa:
                    fa:fc:71:33:16:94:6c:b8:54:ca:cc:f6:9a:96:cd:
                    29:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C6:8E:53:B8:54:1B:F7:1A:35:A4:C3:94:D6:D9:1B:69:52:A3:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e031cad5-5929-3d6a-8e03-7ee4dd3f2c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl

            X509v3 Authority Key Identifier:
                keyid:C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:c3:b3:8a:21:03:e4:e3:85:7f:5b:63:31:5f:52:28:93:02:
         c4:e6:9e:d6:e5:94:a2:7c:0d:3b:e2:6f:20:7a:6e:43:8d:18:
         fc:99:fa:fb:52:24:7d:9d:b1:a4:4a:ec:e5:be:82:bf:78:64:
         b2:f4:aa:ba:ea:de:bb:2f:01:88:09:80:c6:78:d7:87:95:a5:
         c3:dc:1b:9d:a3:af:cd:d3:04:ba:f3:41:f1:91:e2:5d:85:06:
         cf:1d:96:56:df:87:1b:12:d2:1a:ab:f9:96:77:05:e9:21:d1:
         e3:aa:d3:98:72:59:61:10:fd:6a:38:fb:e4:eb:3e:57:ed:33:
         62:2e:3c:5b:c5:bd:c6:b6:6d:de:98:30:7b:32:69:da:e0:37:
         6c:7f:63:b5:5c:18:1a:ef:cf:66:b3:50:07:30:b5:f9:d1:5b:
         86:b7:22:eb:8f:f4:97:33:b4:78:70:cf:6e:05:2c:b6:a9:6a:
         bc:cc:c1:bf:19:fe:b2:8f:7a:89:e8:91:4c:a9:31:da:54:ef:
         bc:e6:c4:e9:61:50:e3:cf:3c:e0:b4:92:a7:4a:3f:5f:0b:99:
         be:23:be:d3:f7:e5:67:be:f6:0f:a1:79:0c:32:83:5d:20:20:
         7a:f3:13:a6:db:df:2a:31:04:83:ed:a2:f0:d6:8d:35:65:e9:
         12:8f:95:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:27:23 2025 by rpki-client