Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3fa17a04-e9ab-3eb4-af65-3e6f18442c44.roa
File:                     3fa17a04-e9ab-3eb4-af65-3e6f18442c44.roa (raw, json)
Hash identifier:          CbKg6Jl55NUiQs7Z/fjKiOq17Zf9OULF3rKro/bnAww=
Subject key identifier:   E9:C7:4A:77:81:FC:2A:FD:78:02:60:E2:DC:24:4D:FE:0F:9E:1C:6E
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584A2C2008D16006B0213591B900
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3fa17a04-e9ab-3eb4-af65-3e6f18442c44.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     7018
IP address blocks:        199.69.0.0/16 maxlen: 16
                          199.70.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:08:d1:60:06:b0:21:35:91:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=8d678271-0800-48ea-b963-0eef64d345ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bd:27:9a:f5:35:89:95:b4:9c:61:97:5a:75:
                    cc:19:61:d8:41:25:8f:1a:41:c8:a5:7a:75:b6:a6:
                    25:8c:55:da:11:d6:bb:72:2b:70:bd:8d:2a:47:48:
                    56:cf:a3:0f:79:16:70:b8:14:9d:43:71:05:36:46:
                    e7:2f:50:bc:32:95:dc:6b:30:28:4e:48:b8:df:18:
                    a5:18:db:c8:de:b0:83:63:98:a0:b0:2f:99:03:95:
                    54:7f:36:40:ff:46:e9:c8:83:f0:a6:31:3a:cb:ce:
                    5a:14:6c:60:26:7f:29:6e:46:32:bf:7c:4c:da:7b:
                    f2:de:f6:2c:18:ff:de:32:fc:f0:52:94:c3:fd:1e:
                    d0:84:97:33:02:2d:9b:af:1f:ad:85:4e:fd:cd:24:
                    af:a8:60:4a:f3:a3:ac:c9:46:8b:dd:b4:38:f3:4a:
                    7d:97:ae:5d:49:a9:96:35:b9:14:7f:4c:8e:61:1c:
                    8d:7e:c1:8c:c8:90:86:f8:14:92:17:3b:a8:02:5b:
                    a3:d5:ef:92:d1:1d:a1:b1:f3:03:48:57:f4:c1:03:
                    62:02:54:87:77:9b:57:bc:74:ce:f8:50:a3:26:d5:
                    8c:ce:d4:57:7e:da:6a:7c:2d:31:1f:0f:65:35:79:
                    3e:39:5e:9a:dd:52:61:16:4a:2a:48:a2:dc:36:3c:
                    80:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C7:4A:77:81:FC:2A:FD:78:02:60:E2:DC:24:4D:FE:0F:9E:1C:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3fa17a04-e9ab-3eb4-af65-3e6f18442c44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.69.0.0-199.70.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d3:11:50:5f:8b:27:66:8a:52:f0:3f:0b:4e:e3:7a:0c:c4:
         91:9a:77:54:94:24:63:78:f5:bf:d8:66:39:5c:50:fb:5f:78:
         45:18:1a:da:cc:30:b7:20:33:90:79:1c:da:a9:43:f7:f6:84:
         53:bb:1f:27:0f:9f:fc:d4:b7:82:a1:86:14:00:ae:23:44:45:
         ae:88:2a:b9:a4:cf:5a:68:99:f4:35:e9:e0:ab:b6:19:37:0e:
         91:07:fb:ea:c8:55:c7:c4:46:a4:6a:29:04:4c:1a:0c:04:27:
         e4:18:67:0e:f4:fd:93:64:02:7a:c6:de:9d:59:36:26:98:93:
         6b:05:23:f7:da:fb:93:54:e5:3c:7a:c0:59:e6:e1:6f:4e:c4:
         a0:41:4e:db:99:6a:34:6e:54:94:e1:ea:48:c6:45:b1:da:d9:
         8e:ac:23:9b:9f:74:7a:e2:29:a2:85:6a:a1:e2:ab:59:22:d2:
         94:a5:f4:a7:a5:eb:53:7c:fb:29:6b:dc:a5:f8:b6:d1:c8:ec:
         84:c6:5e:aa:7d:a9:95:ae:f2:62:ea:85:15:20:4c:82:f4:66:
         b2:f7:b1:f4:0a:2a:4e:ce:cc:60:db:09:7c:4c:1a:ee:eb:c9:
         99:d0:e6:0f:dc:af:1a:78:88:94:2d:29:45:24:17:8a:c8:11:
         e4:e5:c4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:40:56 2025 by rpki-client