Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/5fbc700e-9fc9-314d-b424-083af6f592c8.roa
File:                     5fbc700e-9fc9-314d-b424-083af6f592c8.roa (raw, json)
Hash identifier:          wdN1bO/WcJQVN6O0Y9U0bVGdLFw8U9rMuy+bH/y4srs=
Subject key identifier:   A2:D7:D8:92:60:4F:08:2F:31:54:2D:C7:F4:FC:15:2E:86:D0:F6:77
Certificate issuer:       /CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
Certificate serial:       010D0C9F4328584A0C055E04DED6840147668360
Authority key identifier: 5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/5fbc700e-9fc9-314d-b424-083af6f592c8.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     25637
IP address blocks:        69.165.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:5e:04:de:d6:84:01:47:66:83:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=49fdd0d7-fa1c-4820-9a19-8443d2d2597b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:67:35:ce:f2:bd:90:c5:c7:cc:68:2a:e3:
                    94:79:8c:ef:48:cb:51:dd:22:f7:41:ce:ff:b1:3b:
                    72:ca:09:2a:93:d7:68:5d:2c:c4:bd:55:ee:e9:f4:
                    a3:09:09:cf:7b:fd:cf:86:f3:b3:86:6e:27:62:b2:
                    20:1b:43:14:2a:3d:36:e6:53:c4:3f:95:42:d0:7f:
                    5e:29:14:7d:6e:00:8b:08:80:f7:5e:54:a6:6f:6f:
                    03:a2:af:e5:85:b1:f8:f6:ab:12:d0:af:e9:2b:cd:
                    21:0d:46:2a:3c:ea:6d:e7:47:2a:d9:81:48:76:4c:
                    18:4c:f6:19:b7:80:47:b1:e0:db:b3:39:82:61:10:
                    cc:18:52:8f:5c:2f:f1:04:9d:41:2d:12:db:b4:71:
                    8f:8c:8d:ca:09:8e:a6:22:6e:11:78:84:b5:67:30:
                    66:11:ce:da:3a:96:cd:2a:72:e2:0b:d5:c0:72:9f:
                    02:a8:f9:ad:08:ae:8f:a7:b1:45:fa:b4:a0:0f:78:
                    d0:88:9f:76:a5:b1:3d:83:0e:61:2c:4b:d0:44:4a:
                    14:0a:5e:a7:0f:e9:e0:4f:85:4f:21:af:75:fd:bd:
                    cc:24:16:bf:36:1b:ee:be:bc:81:77:04:21:0b:8c:
                    d4:3f:08:7e:8c:6c:17:0f:d0:4e:5d:83:3b:1d:97:
                    62:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D7:D8:92:60:4F:08:2F:31:54:2D:C7:F4:FC:15:2E:86:D0:F6:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/5fbc700e-9fc9-314d-b424-083af6f592c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl

            X509v3 Authority Key Identifier:
                keyid:5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:34:70:88:8c:ac:6d:d0:ac:5d:d6:ba:49:8e:29:d9:17:95:
         3e:83:23:89:2c:6c:74:41:7b:4e:5e:88:1f:42:25:9e:70:3d:
         e0:b2:b0:43:c1:75:3c:3f:e6:28:66:a0:89:ee:73:d6:b6:b8:
         2b:7e:e2:c4:b8:dd:b3:aa:d8:e7:c1:35:30:89:15:30:59:b8:
         82:d7:14:74:53:65:2e:92:95:07:09:55:97:8e:cb:76:3a:d2:
         2a:48:41:d5:53:a3:57:b2:16:dd:4d:20:74:2c:52:30:2a:aa:
         49:24:d0:2b:d4:58:5e:89:3f:4f:60:e1:6e:2a:4e:de:53:0b:
         6c:6c:59:dd:62:20:a9:5b:66:64:a8:42:cc:c5:23:a5:42:fc:
         f1:38:d3:ca:88:82:02:f0:34:84:8f:0e:1c:e4:74:14:0d:bb:
         fe:9d:7b:0d:48:cc:4c:7e:8e:5b:45:11:1e:98:33:74:86:e4:
         56:40:21:40:a6:95:5a:2c:7a:28:ca:3b:c2:b3:b7:25:da:37:
         d9:95:a6:cb:dd:04:be:26:9d:38:64:60:11:6e:39:de:51:ab:
         dd:fa:54:be:f1:c0:1a:59:fa:34:b6:61:c8:70:78:b0:94:c7:
         51:6d:c5:97:cf:f6:ad:0a:51:f7:56:0b:26:58:0d:58:64:4e:
         52:b2:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:52 2025 by rpki-client