Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/6894d667-04f7-3615-92d1-658a28f85528.roa
File:                     6894d667-04f7-3615-92d1-658a28f85528.roa (raw, json)
Hash identifier:          2qj2DLvJPnG9vqmwgzj96AKDRYd/8JGzsgBveLFZHRo=
Subject key identifier:   A6:B6:DC:99:76:B8:E8:00:8B:02:96:A7:C7:54:83:FD:46:3A:76:89
Certificate issuer:       /CN=7478c754-137f-4ef1-a8b5-aa954253fb79
Certificate serial:       010D0C9F4328584AADF1201BC0F2B40C13502040
Authority key identifier: E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/6894d667-04f7-3615-92d1-658a28f85528.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     18474
IP address blocks:        69.42.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:20:1b:c0:f2:b4:0c:13:50:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7478c754-137f-4ef1-a8b5-aa954253fb79
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=a7187cd4-2904-4af3-8fb6-28073514bb1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:58:71:cf:1f:a6:9b:b6:8f:d2:27:5a:f3:1f:
                    bb:eb:ad:98:23:07:5f:ef:29:53:05:18:4d:c0:74:
                    f9:5a:e8:4a:f1:27:80:51:81:e2:8c:02:3b:8b:8e:
                    67:45:f4:1a:82:49:83:28:ae:47:74:5a:c4:f0:6f:
                    72:a0:cb:8b:0e:69:03:67:b9:dc:72:5b:de:20:b2:
                    b9:03:7e:69:ac:3a:d2:3c:e4:82:8a:03:37:93:06:
                    92:39:cf:b3:9d:06:bf:c3:90:3b:4e:ab:d1:94:b4:
                    da:01:fc:10:c0:3b:fd:9b:c6:e6:d2:ce:80:9f:5d:
                    2e:e0:06:9d:11:30:bf:14:d1:4b:d1:e7:6e:5c:e0:
                    2e:23:ce:5b:f6:73:6b:81:61:30:48:aa:01:cd:be:
                    f5:7c:f4:18:69:76:d8:9d:bb:30:ab:49:3e:52:fb:
                    68:76:2f:b0:fc:2c:df:cf:37:ab:bf:ab:4d:eb:19:
                    50:4c:83:57:eb:25:bb:f7:9c:62:f7:a9:5d:9b:38:
                    18:88:7c:fc:e6:3e:b3:36:03:e9:ec:1a:62:f4:1a:
                    75:d2:0e:bf:41:ea:9d:69:24:ed:71:98:2f:3d:08:
                    f4:8c:0f:ad:e4:25:34:4f:02:e5:02:18:47:f7:c4:
                    7b:4b:21:5b:07:17:8e:a5:1f:ef:e7:30:bb:9e:e1:
                    03:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B6:DC:99:76:B8:E8:00:8B:02:96:A7:C7:54:83:FD:46:3A:76:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/6894d667-04f7-3615-92d1-658a28f85528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:8b:aa:e9:9f:96:5f:b9:93:19:17:5a:07:54:af:6e:7f:e2:
         1c:18:81:23:75:b0:89:f5:9a:22:26:23:6a:16:0e:cd:b6:ff:
         1c:88:98:a4:db:fc:2e:ee:d1:d5:d8:03:7e:3e:73:34:cb:af:
         03:05:ff:94:35:12:da:32:72:6d:cd:14:56:8c:eb:d8:85:60:
         bd:02:e6:af:57:6c:1f:8c:6c:1c:fe:5f:c4:bf:cc:0e:08:ea:
         bb:c2:1f:86:64:62:37:42:b1:b4:f7:3a:e0:85:aa:8d:be:4f:
         1f:e0:97:e1:8b:8a:ff:64:e9:56:66:b1:06:3e:fe:89:34:6d:
         1c:92:eb:83:0a:a3:5b:76:e2:52:1a:4e:2c:2b:89:0e:76:e9:
         4a:1d:0d:de:87:c9:1e:ca:a9:2b:33:d7:15:c2:31:50:43:49:
         ec:22:7d:5c:94:a3:16:db:64:8c:26:dd:8a:d0:05:ec:ae:ff:
         21:e5:9b:ea:bc:5a:3b:5c:62:2f:78:25:2b:91:21:50:13:e5:
         af:86:66:45:83:ce:a2:64:04:5a:05:25:7e:52:6e:91:c2:e9:
         6c:fc:93:2d:84:9d:91:f1:ac:61:e9:41:40:6b:76:5e:eb:fa:
         92:a3:bf:20:73:c7:c0:63:dc:0a:d3:bc:57:9c:2c:81:e6:7d:
         c3:5a:b8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:01 2025 by rpki-client