Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de/6f776677-52b3-3969-896b-a6725e9810b8.roa
File:                     6f776677-52b3-3969-896b-a6725e9810b8.roa (raw, json)
Hash identifier:          Sp1yt9gb6VwwhAtxme6+1mWWGtUqpWZkdpf7binUgno=
Subject key identifier:   93:F6:65:B0:3E:58:13:F9:D4:6F:EB:B2:2A:BF:59:7C:30:DF:BF:C7
Certificate issuer:       /CN=7c4e1acf-ba7c-4e3b-906f-1adfd49a92de
Certificate serial:       010D0C9F4328584A2ABADCB996FD881662A087D8
Authority key identifier: B4:A7:4E:33:70:B7:74:2F:2E:96:FC:5C:98:73:09:91:F4:18:9F:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de/6f776677-52b3-3969-896b-a6725e9810b8.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     17
IP address blocks:        69.51.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:dc:b9:96:fd:88:16:62:a0:87:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4e1acf-ba7c-4e3b-906f-1adfd49a92de
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=ea5ce1b8-c0e7-4e48-a721-a64a45ce5105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:f9:3d:5f:31:f4:40:3e:2a:43:d9:e3:8d:
                    3d:c1:7e:20:17:33:ff:58:7d:73:12:57:42:f7:a8:
                    8e:7d:ef:24:00:71:d7:eb:38:08:a1:9d:d9:ab:ed:
                    9e:6d:54:b6:9a:6b:b7:a0:11:18:3e:4c:aa:59:03:
                    52:ee:c3:e8:a1:93:34:3d:ad:4a:78:26:db:7c:94:
                    f4:90:f2:18:c0:f0:78:75:57:5f:ed:68:d3:7b:df:
                    2e:d6:34:7b:4b:2d:b7:04:13:78:93:80:0c:27:8b:
                    9b:ae:09:15:2b:80:27:62:d2:82:9f:0d:70:13:f2:
                    aa:29:07:51:76:7a:dd:c3:f5:95:ce:ba:78:81:46:
                    84:70:8f:b1:57:66:6d:c5:15:be:31:93:3c:2b:38:
                    01:c0:c9:cb:92:ed:d8:ab:17:3f:0b:96:0d:66:d9:
                    35:5e:45:9e:bd:2e:c9:e6:e8:94:80:e2:82:e1:1c:
                    27:17:e0:7f:f7:c3:aa:f3:55:0e:38:25:f9:5f:3c:
                    a7:d6:c5:f2:40:79:b3:b3:da:c0:43:31:4d:e5:da:
                    bf:12:57:63:97:12:1f:31:47:67:1f:31:5a:c6:fc:
                    ad:f8:83:16:b2:04:53:f7:9f:32:13:85:9e:15:e1:
                    77:bf:bb:2d:cf:6b:84:d3:29:7e:39:31:21:1b:eb:
                    fe:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F6:65:B0:3E:58:13:F9:D4:6F:EB:B2:2A:BF:59:7C:30:DF:BF:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de/6f776677-52b3-3969-896b-a6725e9810b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A7:4E:33:70:B7:74:2F:2E:96:FC:5C:98:73:09:91:F4:18:9F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ab:de:38:68:54:4e:88:06:b0:a3:d5:ed:ad:83:f2:a1:77:
         05:6b:d7:5e:8a:52:5f:91:3e:6a:68:6d:c1:34:ad:ab:0e:05:
         70:b3:ec:dc:97:95:68:e9:f9:bb:13:f6:c4:89:aa:43:cf:ae:
         f9:25:44:a5:26:36:6e:ac:51:a4:c6:95:4b:5d:7f:28:21:90:
         57:54:32:c6:b1:24:b7:9c:a8:93:06:ce:6a:18:e1:1a:39:01:
         5a:73:1f:01:b5:d2:e1:30:20:15:6f:aa:57:90:7c:d8:a8:79:
         06:a2:9c:ee:f1:e4:d7:56:21:0b:45:dd:b5:99:42:16:53:3a:
         c3:d7:ad:72:1b:fb:77:f1:7b:af:53:7e:1c:92:a0:a5:8d:b6:
         84:3f:0d:cc:8b:fb:d3:11:4d:ad:41:a3:7c:1e:0a:89:46:f2:
         02:3b:e9:f1:a7:c2:a0:43:83:4c:ae:83:d4:6b:8b:90:a3:5f:
         ee:d1:96:3d:a7:15:52:8c:e8:d8:b0:4d:ba:a1:ff:60:1d:7a:
         61:9f:a9:f8:9c:40:22:a9:bc:71:0d:e1:ac:84:b9:fa:c7:83:
         e3:55:ff:76:8e:12:41:3a:f1:7c:9a:f5:53:13:52:dd:55:3b:
         c4:45:b2:e4:06:84:fe:7a:01:49:8f:17:96:04:25:6b:db:25:
         79:15:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:51 2025 by rpki-client