Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fe5b8a8a-dd17-3ba1-a4e3-33f9c74a134b.roa
File:                     fe5b8a8a-dd17-3ba1-a4e3-33f9c74a134b.roa (raw, json)
Hash identifier:          +hFzcCGxb5zrxgOisDMX51R/SA1oCyGKzgSAILHOack=
Subject key identifier:   D0:77:2B:8B:CF:50:99:98:E6:C1:00:E8:39:A2:26:D8:C0:55:F8:59
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F43285849E22525B7DD2586371A920F00
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fe5b8a8a-dd17-3ba1-a4e3-33f9c74a134b.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     398006
IP address blocks:        24.222.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:25:b7:dd:25:86:37:1a:92:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=611c435e-75f3-43aa-a1c1-60e0a60784ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:8e:10:df:bd:18:68:e3:d4:f9:22:f9:a0:
                    29:c3:18:9e:88:bb:96:59:71:ea:95:f0:07:49:1f:
                    37:ff:cd:69:79:a2:77:43:53:8f:e0:5a:f7:d8:9c:
                    2d:b4:c2:d8:96:15:5b:6e:f7:60:7a:1e:48:a3:a5:
                    e2:60:6f:a9:12:bd:af:c2:83:d9:db:1e:8d:c4:0c:
                    22:e0:28:d8:9a:87:f9:e7:ac:ab:96:a8:e7:5e:0b:
                    dd:d0:51:a7:41:f4:ce:37:7c:cc:78:dd:d0:4e:0a:
                    aa:1c:53:36:ed:d2:a3:ec:29:79:ab:38:ab:d0:4c:
                    a6:19:1d:ff:81:7a:eb:06:79:d1:ae:8f:17:55:68:
                    2a:88:b0:0d:c8:c2:ee:69:fa:1d:ec:a1:0b:6d:5e:
                    f5:99:d9:03:cf:37:c6:96:ea:4a:42:2f:79:fc:91:
                    84:a3:f5:6c:8e:df:95:b2:0c:19:32:27:57:a3:39:
                    4f:f9:34:c4:dc:94:82:13:05:39:75:05:2b:85:6b:
                    ab:e4:b4:8a:91:df:f0:5c:69:4f:8f:ae:77:bd:a5:
                    0e:0d:95:1c:c3:ee:3b:f4:2c:02:ed:80:63:ea:ca:
                    1a:3d:ac:fe:a7:d7:be:14:ec:3b:2d:d3:db:54:36:
                    e0:44:96:49:c8:aa:ac:6d:c9:f7:81:7b:fa:b4:f1:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:77:2B:8B:CF:50:99:98:E6:C1:00:E8:39:A2:26:D8:C0:55:F8:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fe5b8a8a-dd17-3ba1-a4e3-33f9c74a134b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.222.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a3:46:41:56:57:55:97:0e:b8:33:e9:1a:f9:de:df:21:19:
         42:43:f9:1c:7e:9c:05:cd:8a:d1:04:27:91:35:fa:1a:08:cf:
         08:ce:23:84:fa:34:e5:fb:02:a8:0a:4a:c7:8c:17:78:83:85:
         f8:44:88:9e:8e:9f:59:af:7f:38:b8:7c:64:ab:55:3f:e2:16:
         2b:47:94:42:95:49:e5:74:70:b2:4a:e5:8a:9b:ec:8d:4d:c5:
         c0:70:5e:31:3c:c2:f3:9e:1b:25:a6:b1:1e:23:e7:e9:d8:af:
         d6:20:ff:2d:1f:e8:c1:2e:87:64:98:33:00:63:c0:0d:35:6e:
         13:a9:b5:eb:f4:ee:07:0d:9c:9b:d0:6e:4d:b0:54:0d:a4:a8:
         dc:13:61:45:77:be:9f:c0:bd:4c:d0:44:91:ac:3b:76:f8:2c:
         7c:d4:7d:bf:7a:d7:ec:4c:89:2a:b2:8e:ba:67:e0:8b:b5:e9:
         6f:db:8a:ea:c0:b0:bd:91:b7:2f:d3:2c:39:2c:d2:e5:d7:c1:
         b6:23:83:e8:9e:91:6e:08:75:a3:85:5a:32:af:30:5f:c5:14:
         e2:3c:8c:ac:aa:19:f4:8d:30:32:dc:9c:cb:16:74:d9:5f:17:
         f8:47:0c:e5:98:2e:0c:86:20:f4:b4:b3:9b:d6:d7:cd:6a:27:
         57:e3:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:42:03 2025 by rpki-client