Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/3fe0a894-81ce-3b08-9bf0-1f115c079b60.roa
File:                     3fe0a894-81ce-3b08-9bf0-1f115c079b60.roa (raw, json)
Hash identifier:          vSa8e5624J+Ge4zTPa1ep3U8yN66JZp9POsqZxiRwuQ=
Subject key identifier:   8C:F8:6E:F5:01:A7:99:B2:CD:6F:44:F6:F4:BA:0E:AA:6F:74:48:5B
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F4328584AA1621D0BE2E21D314736CF00
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/3fe0a894-81ce-3b08-9bf0-1f115c079b60.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     8075
IP address blocks:        69.52.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:1d:0b:e2:e2:1d:31:47:36:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=23c7ef25-b12d-4463-8b61-89db3f762172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:6a:5a:ec:29:eb:ea:92:0f:2c:6a:66:35:
                    f8:69:89:e1:78:5c:6f:88:7b:e9:14:6b:ba:48:68:
                    a3:91:b5:3a:91:f6:7a:b7:ae:d5:79:21:f4:00:8c:
                    87:8b:7e:28:44:55:e1:10:79:98:46:3d:94:91:a8:
                    7b:58:6f:1d:2d:58:15:b5:ef:a6:37:be:0a:b2:92:
                    66:c3:6c:2f:47:7c:fc:23:ac:a5:c3:41:70:c4:0a:
                    12:69:78:2a:a2:9b:6a:e0:98:01:e7:69:ac:6a:aa:
                    e0:61:07:a8:ef:53:d4:6f:14:a9:51:10:e8:46:f5:
                    62:38:c9:00:26:98:e9:b4:8c:68:52:90:b6:cb:5b:
                    f7:36:b0:c2:18:67:a6:b3:1c:8a:95:d3:62:24:15:
                    49:a4:a6:70:d8:c6:30:3a:21:12:4f:24:7e:37:9d:
                    6f:21:a9:11:c8:65:21:e1:31:d7:4a:71:f9:a6:97:
                    02:ba:36:31:45:21:cb:7f:ae:b5:54:33:9d:cd:0a:
                    f5:e2:5d:ab:e8:cb:16:92:d2:a8:ea:55:af:0b:43:
                    05:f7:9c:0c:94:26:6b:78:be:64:c5:fa:4f:36:b6:
                    94:6f:67:e6:7a:93:ec:c0:51:06:a0:a9:c4:b3:35:
                    22:c6:c6:bf:17:78:99:e8:92:b9:64:38:97:88:28:
                    b6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F8:6E:F5:01:A7:99:B2:CD:6F:44:F6:F4:BA:0E:AA:6F:74:48:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/3fe0a894-81ce-3b08-9bf0-1f115c079b60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:83:5a:d1:43:d9:31:f4:38:36:fb:68:95:50:b8:4b:df:3b:
         30:47:7b:1a:98:be:05:b4:07:60:89:75:b0:3a:cb:f5:c8:df:
         eb:fd:ec:8f:ae:f9:c5:aa:13:50:57:73:c1:79:a0:a4:32:a1:
         90:01:cc:32:c0:40:ef:65:46:d6:15:ed:77:c9:fe:7d:52:46:
         45:7b:77:35:d0:4d:e9:5a:3f:9f:08:74:52:73:3c:4a:5e:ab:
         07:b3:ef:3b:e9:93:40:79:00:b8:a0:92:ba:12:49:9f:29:16:
         6a:8e:d6:e6:21:71:04:9d:ae:d3:3e:dc:37:25:3d:60:19:c5:
         c4:0a:83:4f:3f:4f:d8:a6:95:82:39:b6:31:6b:45:6e:1c:d3:
         4e:31:7f:3b:2e:28:1e:7c:d4:2b:6b:db:a8:8c:00:3f:b1:5a:
         05:76:5e:3f:bf:0c:1d:69:e8:24:c7:89:70:09:d4:f1:c2:96:
         88:5e:7d:f7:fb:0e:c0:9a:fb:80:97:48:1d:95:15:70:31:97:
         9b:46:6b:44:ee:75:7f:bb:25:37:f9:5d:75:cf:46:06:a3:65:
         47:d1:06:01:39:87:64:92:13:58:c2:ed:52:10:49:71:c5:06:
         c9:44:6b:b6:da:bc:39:68:95:b6:9d:7c:0f:e3:b3:22:ae:9e:
         ef:51:b4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:20:14 2025 by rpki-client