Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/158c2c47-6aff-33c7-92b4-1e7faa79dfa3.roa
File:                     158c2c47-6aff-33c7-92b4-1e7faa79dfa3.roa (raw, json)
Hash identifier:          kwgHY292WoxPBIgcpiFHG1tmcHkkqd4hx6toUZlcQPM=
Subject key identifier:   32:E9:EA:54:EF:09:7F:E1:AD:8F:EA:00:0E:BB:1B:C3:3F:22:65:F1
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584A348023D2EEF11B6DB1DE1800
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/158c2c47-6aff-33c7-92b4-1e7faa79dfa3.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     23520
IP address blocks:        69.79.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:23:d2:ee:f1:1b:6d:b1:de:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=1b0208e1-32cc-4387-917b-7e9d63a69483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:62:ac:9b:9a:17:2a:dd:d9:3b:e9:a1:bb:
                    83:a0:e3:9c:cf:26:3a:11:b6:56:50:06:4f:06:e6:
                    82:dd:bb:fe:fd:cb:66:12:9c:ec:f1:ee:e3:0a:92:
                    57:20:97:27:13:67:08:99:45:84:ee:d1:fc:7f:db:
                    e4:0c:f4:34:37:77:e3:b3:2a:cf:ed:1b:83:54:31:
                    bf:2d:56:fc:cb:e2:21:40:f3:40:b0:05:74:cf:f3:
                    d0:8b:5c:db:d0:98:c1:ab:9f:ec:f8:d5:0e:78:16:
                    e3:b1:ae:f4:bc:5a:44:2d:4d:cd:8a:d7:38:cb:47:
                    bf:82:56:50:8b:62:0e:c4:d9:7c:aa:e6:f0:60:cc:
                    0b:a9:25:c9:30:c3:a4:35:5a:67:8b:33:d5:19:7f:
                    dc:64:3c:f8:80:6a:17:34:96:21:40:78:91:28:a7:
                    92:ea:65:e5:d6:cd:9d:5e:29:96:3c:1d:ed:54:7b:
                    5d:07:47:5a:0f:03:cb:3b:92:78:21:5b:6d:b6:7e:
                    18:5b:63:bd:7b:f6:d8:b5:da:c5:e6:77:e1:6b:9d:
                    5a:25:b8:2f:c0:cb:a0:e2:ae:79:ad:79:e3:92:99:
                    42:04:2e:6b:9a:44:f0:be:0a:39:f5:57:57:56:35:
                    ed:9b:98:a1:ff:c7:94:bf:a3:ed:b7:45:59:30:7d:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E9:EA:54:EF:09:7F:E1:AD:8F:EA:00:0E:BB:1B:C3:3F:22:65:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/158c2c47-6aff-33c7-92b4-1e7faa79dfa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.79.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:69:cd:92:18:62:58:bd:ab:c5:53:95:a6:68:a9:36:31:93:
         2e:38:af:22:d7:5c:21:8c:ca:a1:85:5c:52:98:4d:10:f8:e9:
         c3:0c:32:8a:f6:37:72:75:a1:29:50:47:e9:be:fa:14:5f:d6:
         e9:99:fc:44:28:3f:39:9d:ff:0b:c1:d1:79:b1:61:6b:86:14:
         0f:2b:1d:22:9c:2e:64:7f:b1:fe:83:ea:6d:3a:23:50:d8:e8:
         49:1c:f4:fa:0c:f7:a8:c0:5a:9e:b2:e3:7a:a9:e2:3d:da:d6:
         6c:d2:8a:39:08:65:ca:e7:2b:17:92:86:e8:a9:09:c9:73:c7:
         82:e4:58:be:cf:7a:f7:94:7b:45:50:04:68:e0:04:d8:2c:02:
         05:f6:d9:b2:9c:45:be:02:54:a4:90:b9:61:8e:65:10:7d:2f:
         04:b6:01:51:18:8f:8a:c1:e2:a5:26:62:f4:71:ec:ff:2c:57:
         a0:be:a6:47:04:99:c2:ff:18:30:a4:bf:2f:ef:31:f6:fb:5f:
         e3:9b:e0:7e:24:3f:8f:1f:ad:cc:b0:ee:e6:a6:75:0a:da:19:
         1e:b6:df:de:da:83:68:00:c8:bb:ef:99:ef:4e:69:9c:d9:cb:
         db:6d:1e:7b:13:0b:b0:8e:63:6b:a7:1f:62:05:46:77:29:77:
         dd:7b:65:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:02:19 2025 by rpki-client