Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/21f6a118-7a36-3daf-86a4-79d2584db80d.roa
File:                     21f6a118-7a36-3daf-86a4-79d2584db80d.roa (raw, json)
Hash identifier:          qUJXv7JbP8WOzpUeD7Zc+L/i5TTCE2POMGifLjb8ngU=
Subject key identifier:   CA:63:0F:73:4F:6E:DF:04:58:24:FD:E7:CC:B1:BE:A8:94:AF:06:B6
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584A34802422A17FB4C6E7FC5E80
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/21f6a118-7a36-3daf-86a4-79d2584db80d.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     23520
IP address blocks:        69.79.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:24:22:a1:7f:b4:c6:e7:fc:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=20dbd27f-f64f-4f60-9bb5-4eef12606a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d8:f3:4a:1d:0a:1b:cd:c1:95:13:a7:1a:9c:
                    ec:3f:30:46:fd:49:3d:00:ef:08:6b:e1:91:62:ad:
                    3c:0d:b2:12:88:0d:2e:6b:7c:dc:03:8a:7d:0a:9d:
                    80:7d:fd:77:2d:41:3d:67:6f:e4:2b:af:a6:4f:fb:
                    1b:88:da:4f:b2:71:b4:8a:1c:12:ff:ba:b4:6c:c9:
                    d6:f8:02:fd:64:ed:c0:da:71:5a:71:bb:6c:c5:fb:
                    cd:0d:a5:04:a5:42:0c:54:ab:70:9e:81:79:9a:c6:
                    c5:bb:6f:fe:88:15:51:0c:85:d4:27:8b:ce:7a:6c:
                    fb:8c:ac:96:02:5e:cb:24:a5:31:2f:a2:36:6c:5a:
                    79:37:0e:9e:40:b4:1b:0d:ee:f6:bd:94:3e:91:91:
                    94:5a:ec:11:50:cf:d1:b8:74:82:e7:ff:94:75:c0:
                    c5:73:83:e9:46:65:80:9e:52:4e:0a:dd:05:89:70:
                    38:f9:35:d7:51:02:9b:29:98:00:00:6a:63:cd:50:
                    3f:a1:a7:b1:2f:3f:15:11:e9:68:61:34:1b:ba:f3:
                    63:01:f7:81:90:ea:f0:5d:76:5a:d5:1b:95:04:37:
                    73:6f:4b:5c:ca:50:b8:ff:20:d1:4e:5f:fb:91:6c:
                    06:9c:91:a5:b6:4e:61:61:27:6c:0f:d4:83:8b:e1:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:63:0F:73:4F:6E:DF:04:58:24:FD:E7:CC:B1:BE:A8:94:AF:06:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/21f6a118-7a36-3daf-86a4-79d2584db80d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.79.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:87:5d:81:2d:4f:76:46:96:67:42:63:7c:3e:c7:cd:10:fb:
         75:ac:50:03:51:89:a9:58:70:e6:1e:9d:1e:9a:5b:31:03:07:
         8d:50:cd:53:9e:d2:c1:91:b7:04:bf:57:af:56:bc:1c:36:2b:
         3e:ee:c7:0b:fe:2c:0d:4b:8a:33:71:30:53:44:e0:15:9e:79:
         11:f8:9b:74:20:d5:ee:65:a3:20:73:35:6d:54:44:8b:11:cb:
         83:30:09:27:5b:3e:1d:d1:81:68:73:4f:65:e4:c4:7e:3b:d8:
         69:50:c3:d4:d4:21:4c:c3:2d:23:64:6e:e7:a5:f9:5a:2a:16:
         c4:be:f8:03:88:f9:d4:84:99:ee:88:da:80:82:3c:b1:c7:63:
         25:59:87:91:64:c4:1a:f9:df:f2:d1:ca:b4:be:df:7a:6a:ce:
         a7:d5:0e:ef:3f:ca:4a:a9:d2:54:8b:be:93:79:8a:65:5e:fa:
         71:f8:59:80:94:aa:80:08:6b:bc:41:fe:eb:7b:30:01:0e:08:
         2a:b9:01:db:10:74:f6:8f:18:37:09:30:8c:a7:1a:e1:68:b7:
         70:24:49:21:fb:5f:57:09:82:be:ef:f5:7f:0f:ef:e9:55:a0:
         19:6f:0c:1d:f8:e0:ab:8b:00:6d:f0:87:50:c7:a5:e5:e1:35:
         49:a8:65:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:21:31 2025 by rpki-client