Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/eda5bfd5-d3a1-3be2-b50d-84700c9d7e68.roa
File:                     eda5bfd5-d3a1-3be2-b50d-84700c9d7e68.roa (raw, json)
Hash identifier:          Deywxm1+4JPbQYrXAU+NkKF0JSlY2WT9vos+91h97io=
Subject key identifier:   B9:DE:A5:90:B2:7A:FD:C5:DD:E5:EE:B4:B8:FD:3F:D2:12:21:17:1F
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584A1F90268CD10C7C159113FA80
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/eda5bfd5-d3a1-3be2-b50d-84700c9d7e68.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     212374
IP address blocks:        69.168.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:26:8c:d1:0c:7c:15:91:13:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=7dde9f82-c59c-4651-8a25-03a0d629f6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e9:84:9c:ad:e3:ce:ab:d8:95:12:2b:97:54:
                    66:16:91:cd:ac:7b:17:c3:16:9c:c9:9b:38:82:d7:
                    62:cd:ba:74:9a:fa:68:f1:45:ad:90:83:ca:b6:93:
                    46:5f:d5:b7:ea:da:2a:49:93:6b:ff:27:41:65:76:
                    77:d8:c5:a4:f3:03:b6:a6:89:11:24:16:87:33:1c:
                    98:c4:99:d3:d4:4d:f6:2d:a2:99:61:39:79:79:2b:
                    ef:c0:af:5c:eb:f8:6c:86:28:97:dc:6e:ea:b5:5e:
                    62:09:0e:51:aa:63:87:70:c6:81:41:6c:84:18:d0:
                    b1:a4:db:dc:de:24:bc:23:9a:f9:c8:d9:68:0f:3c:
                    a9:98:4f:be:43:d5:39:6d:9b:02:ac:c7:8d:e5:d3:
                    cd:e1:e3:63:1e:9c:74:cd:5a:d0:2e:6b:1d:a6:e7:
                    70:47:89:6a:b7:5c:cf:2a:9a:f9:73:c1:47:ec:00:
                    b3:f7:4b:20:7b:ab:c2:3d:a5:5f:c0:42:94:9b:9c:
                    34:4e:be:cd:d6:b1:c2:db:2d:c3:c1:27:16:49:d3:
                    62:44:d1:1f:43:99:4b:48:f4:86:e3:1e:a0:cc:ee:
                    bf:c0:ff:29:f1:47:28:18:25:1d:52:a1:92:fb:14:
                    f1:d1:44:5d:c8:12:99:7c:6b:ca:24:5d:89:d0:4f:
                    93:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DE:A5:90:B2:7A:FD:C5:DD:E5:EE:B4:B8:FD:3F:D2:12:21:17:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/eda5bfd5-d3a1-3be2-b50d-84700c9d7e68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:67:22:7b:e9:db:54:39:07:35:75:58:d5:c9:cf:68:64:6b:
         12:c3:26:75:ee:d7:de:62:bc:70:b1:13:1e:fa:6a:b6:5d:89:
         7d:c3:58:04:5a:a0:5d:b3:0f:d6:b2:76:63:e3:81:fe:82:55:
         b8:e3:55:b9:af:e3:8d:44:9c:6a:a1:c9:0a:9a:b3:d6:27:4d:
         e3:30:9f:ee:76:5e:83:66:27:cb:e3:ee:db:59:89:76:88:7a:
         6a:aa:ef:08:12:9f:fd:67:9e:33:80:74:7f:5f:53:5f:31:de:
         43:14:39:ad:32:b4:4b:f2:1a:36:cd:fb:04:17:67:85:43:70:
         fc:9c:16:57:4a:03:3b:da:d1:1f:e3:41:5a:8d:d4:cd:44:53:
         08:dd:86:58:dd:71:25:e5:89:7f:b7:95:27:d1:f4:ea:37:a1:
         f1:30:72:1e:d3:f5:6b:6f:63:cd:ce:58:cc:77:9a:b2:6c:62:
         82:95:b3:07:c6:03:e0:af:fc:55:27:0b:6d:1b:f9:fc:66:13:
         40:c8:71:38:dd:33:f5:13:2f:ea:cb:58:57:78:f9:fb:18:7f:
         7c:a5:6d:e6:c2:85:d0:02:33:d9:5b:a9:09:bc:f5:28:3b:a1:
         ab:0f:34:53:9d:db:cb:32:aa:c6:98:99:60:f8:29:f3:e8:ce:
         24:bf:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:42:26 2025 by rpki-client