Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/63d1916f-33cf-3e03-9275-06b7b78c5e18.roa
File:                     63d1916f-33cf-3e03-9275-06b7b78c5e18.roa (raw, json)
Hash identifier:          5YRo1QHUDxrLWvyZquJRLgG2onVGra0itPOAXE+Dcis=
Subject key identifier:   84:03:84:55:4A:48:F4:E9:BF:D1:0C:55:8B:2E:64:3C:8C:D6:37:06
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584A189548BE0E7196A4C6B6D030
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/63d1916f-33cf-3e03-9275-06b7b78c5e18.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     11260
IP address blocks:        142.67.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:48:be:0e:71:96:a4:c6:b6:d0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=a58be295-cd5b-41d0-a857-13489edaeb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1f:ed:cd:8f:45:55:53:47:ea:9c:a0:c7:23:
                    ec:98:2a:fc:b5:3c:f9:71:23:a6:7f:fc:74:ec:44:
                    33:5a:fe:a0:f9:6e:54:a7:fd:95:30:ab:35:4e:55:
                    ed:82:38:32:45:ab:f3:87:0d:75:e6:06:f0:a5:53:
                    4c:45:3d:fd:08:03:ea:65:f2:40:f5:84:79:1c:73:
                    b7:23:7e:c1:b3:18:9d:4f:47:10:a7:ec:ab:38:22:
                    c8:59:d6:09:10:13:84:06:6c:58:18:b2:fe:e5:f2:
                    bc:7f:c0:01:34:e1:75:af:2d:4f:2e:39:1a:37:ba:
                    dc:29:d2:44:6c:db:99:06:0b:b5:3a:98:16:58:8d:
                    f9:1a:08:0d:dd:cc:fd:b9:fb:ca:3c:86:df:09:3a:
                    eb:2c:50:3e:22:ee:52:d5:df:47:95:9b:bb:7a:50:
                    db:4d:8c:6a:79:5a:c7:8e:af:ef:bf:b7:dc:76:78:
                    50:f3:21:ae:11:ab:00:79:c6:89:8d:b5:5c:be:ce:
                    ea:81:21:02:69:99:2d:55:bd:d2:54:ad:f3:b9:70:
                    19:b2:2c:8e:a7:38:a0:8d:d7:1d:97:16:33:0b:a4:
                    ab:78:1b:b9:61:84:94:00:69:44:e2:54:89:ef:6f:
                    5c:58:6e:3d:e8:41:da:34:57:d6:30:ad:3c:96:c8:
                    70:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:03:84:55:4A:48:F4:E9:BF:D1:0C:55:8B:2E:64:3C:8C:D6:37:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/63d1916f-33cf-3e03-9275-06b7b78c5e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.67.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:4c:94:0e:18:d7:65:e4:36:5f:f8:42:d0:4e:6c:ab:85:17:
         7d:98:6f:dc:4e:64:15:fe:e6:ba:11:ce:81:83:8e:64:36:bb:
         c5:9b:d8:5b:05:b1:b8:60:51:91:f4:9a:ae:e2:7f:f3:3c:dd:
         6d:a5:2c:f5:1d:5b:f6:46:f1:41:b6:1a:42:fe:10:9d:dd:e8:
         b3:0a:17:e2:48:c3:d6:21:32:8e:5a:17:42:01:02:a4:a6:5e:
         e5:0c:5f:71:da:28:e5:e7:48:fa:88:c1:a1:c1:94:b9:50:bc:
         d7:c5:f3:62:58:b5:84:62:0d:f7:df:f9:13:37:40:6c:0b:e4:
         b0:d9:39:71:fa:d8:18:7c:5f:89:de:db:1d:ca:c6:ce:d1:19:
         a9:d0:a1:d0:d9:80:d9:df:46:98:e1:da:30:b6:2d:e4:08:b2:
         7e:7e:07:b6:f4:77:fc:ad:62:df:8b:6d:1c:1f:6d:a4:ab:e4:
         ec:4d:03:d1:c1:1b:8f:db:f0:0a:52:dc:44:55:58:ed:5c:4e:
         84:16:a5:f9:af:8c:38:4d:7b:b9:cc:2d:41:b1:11:a8:7b:aa:
         e1:40:72:2b:46:cf:1c:59:7c:0b:14:59:57:59:f4:d4:f1:c9:
         9a:99:44:3c:38:8e:d8:02:c3:64:f9:8f:7e:95:7c:41:64:d3:
         2a:3f:cc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:13:14 2025 by rpki-client