Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/c1e82061-430f-3634-8fdd-4c1148cb79a6.roa
File:                     c1e82061-430f-3634-8fdd-4c1148cb79a6.roa (raw, json)
Hash identifier:          gpWeDLKcAWpGUPCK4JUA9GMU+oTxZHVtWLGYbj0/TvA=
Subject key identifier:   99:4F:BC:4A:53:5F:59:C1:6F:FD:DB:BE:45:23:53:3A:75:3A:C6:96
Certificate issuer:       /CN=6e10601c-e280-4510-9d84-b6d2b02b8446
Certificate serial:       010D0C9F432858498CFF06408ED729315B6EB880
Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/c1e82061-430f-3634-8fdd-4c1148cb79a6.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     393397
IP address blocks:        69.72.96.0/19 maxlen: 19
                          156.146.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:06:40:8e:d7:29:31:5b:6e:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=1a4840cb-84ce-4784-bf91-949e1480853f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:72:8b:9f:36:ad:df:9f:cd:25:0c:2a:a9:59:
                    89:d6:3a:ae:fd:54:bb:3d:f9:d0:ad:cf:c1:89:5b:
                    f0:bf:eb:cb:15:e6:70:19:1a:d0:70:33:a3:1a:26:
                    22:24:8f:22:e9:3e:f2:96:57:18:3b:70:fa:fd:26:
                    56:55:75:d8:25:07:83:c2:8d:9a:37:01:dd:ba:27:
                    4c:7b:7f:5d:9f:c2:aa:6a:dc:33:77:51:93:34:81:
                    f6:5b:a9:d8:39:b2:3d:b4:64:94:c3:27:ed:3c:62:
                    fc:06:1a:bf:16:35:5b:55:3e:2b:44:8b:d6:40:04:
                    2f:f9:89:02:03:3d:30:ff:c4:b2:79:be:06:92:32:
                    4a:57:1c:0a:d8:ba:74:0d:6a:d5:55:54:fb:dc:30:
                    2c:64:db:29:d5:65:01:b3:cf:1b:6b:92:8c:0b:ba:
                    cd:5c:51:50:c2:e8:6b:04:a0:2a:1f:73:48:89:59:
                    13:78:b3:f3:a3:82:2c:bc:bc:ca:49:31:76:00:c0:
                    f3:5e:09:95:ce:d7:48:68:48:29:9b:b0:90:61:33:
                    aa:cd:98:41:7b:28:4f:3f:c2:0c:4a:01:7f:aa:a3:
                    c8:ff:f4:07:69:4d:86:fb:6b:3c:fb:ad:ff:cf:3c:
                    d4:ae:02:cf:77:ac:5f:20:dd:ba:b0:d6:72:99:c0:
                    c5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4F:BC:4A:53:5F:59:C1:6F:FD:DB:BE:45:23:53:3A:75:3A:C6:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/c1e82061-430f-3634-8fdd-4c1148cb79a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl

            X509v3 Authority Key Identifier:
                keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.96.0/19
                  156.146.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:01:60:c5:c7:f1:e2:2b:c7:b0:d5:f7:0c:32:58:ee:f1:1d:
         4b:28:9f:15:46:53:3f:43:de:33:42:49:27:0f:76:fc:8f:db:
         b6:3e:6c:de:67:9d:ab:1f:89:5b:bc:05:ba:29:e7:74:1c:ab:
         4e:f9:c1:d2:0b:d0:bf:e2:e0:61:80:76:56:16:21:75:86:a5:
         b8:1b:1a:a8:25:8f:a9:5a:ff:ad:37:e6:98:fd:df:f0:8d:73:
         69:a6:65:74:6e:3a:c6:e2:79:ad:96:56:89:37:1b:24:31:f1:
         98:f6:f2:1a:66:83:b6:ae:eb:82:10:e4:fd:ba:a6:f2:ba:78:
         15:3f:c0:30:a6:a9:1a:60:c7:9f:e8:d4:0f:98:2a:26:6b:3b:
         1d:04:a1:a1:64:ea:8e:e3:ab:65:ba:ad:2f:44:eb:2d:20:55:
         ed:8f:ea:70:b5:31:aa:a2:2f:c0:c9:ac:45:90:5b:95:83:09:
         2d:ce:6e:b5:e8:91:d5:f3:dd:9e:42:e3:3d:b3:d3:e7:d5:28:
         cd:22:05:f9:13:bf:8c:c8:d4:a3:cc:ef:e3:51:38:de:8b:0e:
         f9:11:df:9f:d9:f1:52:e5:0a:83:03:e2:a7:f3:ad:c9:d9:3e:
         67:9a:9e:a2:84:28:1e:19:a1:ef:16:cd:23:be:92:3a:e2:65:
         3b:be:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:11:52 2025 by rpki-client