Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/c6501d02-0da5-3db3-be2e-a09bafb44444.roa
File:                     c6501d02-0da5-3db3-be2e-a09bafb44444.roa (raw, json)
Hash identifier:          S0fvqbaDu5gMjU90ZxKltD9HPAbCJtxMZP01nQG6MNE=
Subject key identifier:   6E:9B:C3:5C:14:3C:4F:5E:0E:0A:2F:A7:D7:4E:84:BD:A4:20:4E:83
Certificate issuer:       /CN=20326331-2c67-41aa-8ed3-7667815d240c
Certificate serial:       010D0C9F4328584B970CCEE3F1D4845F6E32C480
Authority key identifier: CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/c6501d02-0da5-3db3-be2e-a09bafb44444.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        69.56.24.0/21 maxlen: 21
                          69.56.32.0/23 maxlen: 23
                          69.56.34.0/23 maxlen: 23
                          69.56.36.0/24 maxlen: 24
                          69.56.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:ce:e3:f1:d4:84:5f:6e:32:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20326331-2c67-41aa-8ed3-7667815d240c
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=2353d46c-af58-49cb-bed0-da3687609bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:30:7b:0f:ef:eb:39:a2:74:76:77:3b:0d:
                    84:3f:9c:e1:23:e9:cf:7b:d7:f4:46:b4:e5:c6:80:
                    fe:31:1c:ed:d0:95:de:d5:08:27:f6:d0:59:28:61:
                    ab:8d:55:e7:bc:58:09:af:85:a5:38:b5:36:95:03:
                    0c:65:44:95:92:be:2b:a5:51:4f:98:c3:83:a0:e5:
                    12:5b:c5:c5:5a:fe:5c:f4:29:e1:b0:45:c1:fd:ea:
                    35:a0:79:fa:50:6e:9e:e5:b3:70:41:19:e2:f5:25:
                    17:88:a7:04:10:04:0c:8d:ca:8c:3a:32:2e:6e:3d:
                    ca:92:a3:ed:50:84:6c:75:d9:4d:17:ea:8a:ff:0e:
                    2c:c3:2f:d9:97:fb:8a:86:4c:34:b9:19:48:fe:97:
                    30:3c:11:e3:89:ca:e7:e3:43:51:30:ba:dc:fa:b0:
                    c4:af:6a:80:37:5b:9b:f9:10:ab:f4:85:bc:b5:6f:
                    13:84:d0:50:c7:96:d4:a5:a0:9e:02:c7:2d:e5:4e:
                    5b:b5:b4:2b:9c:12:16:a2:ec:2e:90:b0:86:a5:de:
                    ce:11:47:9c:53:55:93:e9:5e:74:a6:89:ad:a2:4c:
                    67:e8:1b:01:7f:dd:aa:74:4d:76:bf:d8:ed:29:24:
                    a1:a8:51:12:5d:d1:fb:2e:9d:48:ca:d2:08:56:eb:
                    29:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9B:C3:5C:14:3C:4F:5E:0E:0A:2F:A7:D7:4E:84:BD:A4:20:4E:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/c6501d02-0da5-3db3-be2e-a09bafb44444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.crl

            X509v3 Authority Key Identifier:
                keyid:CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.56.24.0-69.56.36.255
                  69.56.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8f:4c:b6:08:98:04:1c:c2:36:f6:f0:3d:32:55:3d:30:de:
         f1:d9:23:00:e9:21:c7:94:66:37:76:7e:62:57:47:62:98:cf:
         31:81:7b:b3:22:3a:1e:52:30:10:fd:7c:0a:70:00:fa:d6:ef:
         be:1e:9e:41:6c:79:c1:71:33:a7:07:94:9b:e4:b0:61:da:b7:
         d1:e8:e9:98:87:5b:3e:8c:05:38:17:91:a5:83:44:0c:2d:e0:
         47:57:6f:67:7e:df:e1:0f:46:03:e8:06:86:65:df:bc:01:78:
         08:2e:b5:e7:f3:7a:13:f2:1f:b5:9a:eb:57:0b:d0:f6:73:fa:
         f8:f2:6e:f4:dd:b0:20:33:c1:4a:7e:df:e8:25:2c:03:56:86:
         8f:47:40:55:d5:14:c8:e3:bd:29:7c:3f:2d:be:f6:a4:d3:5b:
         08:2f:3e:e4:d5:22:e8:6b:82:ce:21:dc:c4:2a:92:92:d7:37:
         64:f7:bc:c2:c3:a8:93:4a:2d:4e:9a:16:bc:e9:e7:43:bd:94:
         76:f0:4b:cb:19:25:3f:7d:f8:e6:ed:a0:8f:e7:a4:8b:d0:c8:
         50:da:44:8c:25:ff:5e:b9:64:14:ba:a3:64:9c:97:82:e9:f1:
         01:d2:52:8c:cf:f1:0a:b4:ae:7f:1b:9c:07:54:1c:22:4c:0e:
         20:1a:98:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:46:14 2025 by rpki-client