Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/af380cd9-c9a1-3809-8ede-6999c45a5c50.roa
File:                     af380cd9-c9a1-3809-8ede-6999c45a5c50.roa (raw, json)
Hash identifier:          LaxTSV7GhXfAVCkXN6bBlRPeTIpWhjyGieiskbq/E/Y=
Subject key identifier:   6C:70:A1:06:BB:10:A6:16:15:2A:F1:6B:FF:60:DB:DD:BC:C6:45:A7
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584AADF0FF6083C9514D16758E80
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/af380cd9-c9a1-3809-8ede-6999c45a5c50.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     19197
IP address blocks:        69.41.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:ff:60:83:c9:51:4d:16:75:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=3ada9b3f-4c56-4efd-b761-4141dd08c513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:ea:f8:89:86:7c:74:3f:94:ce:39:2f:d2:
                    59:d1:62:d8:90:10:f7:97:a1:b9:3b:77:1d:54:b6:
                    92:ea:87:23:29:fd:41:b1:ae:7f:dc:7d:9e:dd:0b:
                    03:e9:a1:bb:6a:c1:a9:62:ec:cf:10:37:1f:cd:f9:
                    34:56:ee:4a:b7:32:7d:47:74:9d:e1:f7:90:3a:6e:
                    03:8c:c3:66:6a:47:36:19:a7:d2:d2:1e:fa:bd:48:
                    3b:ec:9e:24:4c:dc:03:ab:22:4d:69:09:80:89:97:
                    7e:ef:b3:bb:41:01:45:19:04:9f:57:7b:14:a0:cc:
                    62:db:19:e5:08:33:a5:ed:2b:03:1e:d0:73:55:15:
                    88:8b:64:6f:e5:5f:58:c0:dd:09:19:e9:c0:32:2f:
                    ea:55:c6:09:d8:21:f9:1e:80:c2:e9:94:37:0c:dd:
                    70:4e:b9:08:bc:b0:fd:9d:aa:36:d1:90:84:aa:70:
                    29:06:5f:53:52:a1:db:8f:06:7b:51:27:5b:18:3d:
                    b6:fa:fd:64:31:8a:6a:5c:50:da:74:fd:30:ff:d0:
                    7c:fd:25:cb:e0:4e:21:80:9a:73:66:95:69:a0:70:
                    36:7b:77:12:cc:f6:a3:d9:dd:4a:c8:9f:6f:f4:eb:
                    22:5f:fb:e4:79:70:60:31:02:e3:76:62:c2:2b:83:
                    ae:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:70:A1:06:BB:10:A6:16:15:2A:F1:6B:FF:60:DB:DD:BC:C6:45:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/af380cd9-c9a1-3809-8ede-6999c45a5c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e8:f5:32:15:dc:e9:43:c3:a5:fe:33:f0:b6:c4:98:4d:12:
         9e:f9:c9:e7:32:6a:fa:e1:55:f2:08:a1:b9:1f:5f:51:c2:78:
         5d:1c:23:70:c2:71:14:d7:46:66:4b:6f:87:f9:22:44:67:c8:
         64:1b:ad:a8:c5:6c:5a:2f:92:d9:e0:5e:0e:80:3f:93:2d:06:
         1c:f8:90:69:f2:e4:66:fd:60:8a:28:28:59:00:f2:4e:fe:68:
         21:8a:0f:34:82:1e:f4:9e:3b:0d:78:ae:e3:3e:7e:38:3e:02:
         b0:b3:a7:00:18:7f:e8:20:ad:57:94:df:7a:b8:ba:71:5d:e3:
         7f:e8:99:9e:b6:be:bd:77:1a:b5:2e:23:50:36:37:af:e8:83:
         ed:2a:4e:36:3f:64:b6:d7:00:80:ac:24:66:5a:c1:0a:1f:cd:
         5c:f2:88:69:cb:85:22:a8:1d:03:f9:0c:4a:2c:6a:6b:6c:b3:
         4b:d0:a2:77:85:77:08:0e:01:7c:a9:12:e7:10:ea:2b:32:e8:
         91:e2:98:f1:48:27:db:8a:dc:8a:f1:d5:57:88:d7:ae:49:c3:
         2a:db:47:34:c9:94:00:7d:44:e0:7a:f9:1c:fd:4e:8a:ef:2e:
         1e:5d:60:68:f8:4a:48:eb:f5:04:12:9e:a9:66:c3:73:d6:11:
         40:a7:6a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:35:44 2025 by rpki-client