Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a2241e64-ed32-3f3d-8b1e-19c73ebc633b.roa
File:                     a2241e64-ed32-3f3d-8b1e-19c73ebc633b.roa (raw, json)
Hash identifier:          J2v3qmlFJteEccnn7h72iTH0KYbbJxM4m1sR70mGRHg=
Subject key identifier:   3B:95:9F:C4:33:76:98:EB:39:97:AA:87:40:5E:DF:7F:04:F3:70:2E
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584A2ABADDDA8F0939DDC260FA00
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a2241e64-ed32-3f3d-8b1e-19c73ebc633b.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     11260
IP address blocks:        24.222.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:dd:da:8f:09:39:dd:c2:60:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=cd162134-1e8e-45e8-8cd4-c8aba6a07225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:6f:81:a5:8f:3a:47:ca:d1:af:7d:7a:fa:
                    10:d3:ec:42:00:7b:9b:84:e9:bb:1f:3f:e8:be:1f:
                    16:2b:a2:71:fb:80:79:bc:37:68:88:3f:79:fb:64:
                    2c:93:b2:eb:e1:bc:48:24:16:5e:08:2e:b4:d4:cf:
                    98:21:d5:b9:59:4b:55:27:73:1d:f4:8a:4d:e5:f8:
                    65:bb:80:33:af:28:c5:9e:04:63:a9:a1:17:45:38:
                    69:07:9b:f7:05:55:d5:ba:1a:c0:53:6c:c5:7a:be:
                    f7:93:d7:ab:36:1a:65:7b:9d:66:26:de:fa:25:c1:
                    1e:ff:af:10:76:a0:01:1d:52:72:bf:26:37:7e:83:
                    93:3c:d1:a2:81:6e:26:f8:05:2e:18:a5:81:91:bc:
                    b2:76:ec:42:cf:66:07:cc:e8:d7:ba:8a:d8:ad:52:
                    69:9e:45:c6:47:f5:9f:7f:4e:20:a5:88:16:9c:a1:
                    50:21:d8:91:a6:b2:39:b5:ed:d9:93:02:4e:cb:dc:
                    09:8f:02:6b:fc:22:4d:b6:37:c3:8d:93:b0:13:2e:
                    bd:43:99:86:7b:1b:4c:17:26:f3:48:a4:9c:55:e3:
                    e4:b7:5c:32:e6:7d:9a:81:93:c6:f3:56:1d:b3:16:
                    53:da:11:03:45:aa:17:4f:bb:7c:ce:39:f3:67:b4:
                    d6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:95:9F:C4:33:76:98:EB:39:97:AA:87:40:5E:DF:7F:04:F3:70:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a2241e64-ed32-3f3d-8b1e-19c73ebc633b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.222.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3b:54:39:a8:02:ce:65:1f:15:c4:2c:95:b4:43:22:04:79:
         72:95:8d:fa:a7:fb:d7:f4:51:31:13:73:23:2d:fa:b1:b1:8a:
         2c:46:c7:03:8c:c8:0a:7c:8d:65:2d:9d:bc:00:a8:d5:1b:b0:
         c2:8e:70:a8:6f:4a:a8:f6:a8:88:15:0e:dd:45:a6:f9:e1:2a:
         ba:b3:fd:53:35:6b:f0:36:c6:a3:d4:f2:c5:20:ed:b8:cd:17:
         16:73:52:13:4a:44:8e:d5:e8:ba:04:45:29:99:85:42:c8:bd:
         5e:d9:0f:8d:ee:b7:40:25:f4:0b:d2:82:07:44:ab:00:7f:a4:
         c2:3c:c2:ae:aa:37:cc:65:b0:8a:f9:c5:f4:7b:28:f0:3d:3b:
         a7:56:79:e7:47:f3:54:00:c1:b7:17:1d:6a:37:0b:98:68:3e:
         8e:6a:f4:5e:a1:b3:cc:11:f6:4b:35:e7:22:34:5d:fb:ec:e8:
         dd:78:8b:fd:39:59:9c:48:23:1f:ec:d6:b4:fb:7e:d8:21:e3:
         08:e7:07:c5:b0:eb:a1:d4:47:67:f9:3c:af:ac:50:39:45:8b:
         a3:41:8f:fe:d4:f5:7e:7c:35:eb:14:c9:26:be:95:59:f8:d4:
         c8:20:71:54:7f:a8:df:53:3b:86:8e:11:0d:1a:e6:92:c9:9e:
         e1:66:67:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:07 2025 by rpki-client