Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/958996f6-abea-3a9b-b1ae-4a3f1a0dbe47.roa
File:                     958996f6-abea-3a9b-b1ae-4a3f1a0dbe47.roa (raw, json)
Hash identifier:          J59cf6afxxJjCr5A5/OEuz06Qryd4jJGvdHXQcb4C8s=
Subject key identifier:   05:A4:FA:A0:0C:92:4A:08:E0:14:43:A8:C5:B0:E4:87:A7:44:5C:56
Certificate issuer:       /CN=e5a67b98-1c41-438b-b404-8142d67c6476
Certificate serial:       010D0C9F43285849C904E6C823A0820E215AC4A0
Authority key identifier: 81:9F:D1:6B:26:3D:DA:D3:70:D4:D5:AF:2D:CA:CC:8B:B0:B3:CC:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/958996f6-abea-3a9b-b1ae-4a3f1a0dbe47.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        192.69.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e6:c8:23:a0:82:0e:21:5a:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a67b98-1c41-438b-b404-8142d67c6476
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=d58a6436-fbeb-4f53-b035-2ad20f71637d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:63:e4:fb:ce:06:72:87:84:64:c3:2a:a5:32:
                    e0:cf:e3:91:bb:19:73:14:34:0e:2f:0e:69:57:b9:
                    7a:07:4f:d1:e3:48:33:9d:a0:b3:a1:1a:4f:7e:ee:
                    d1:b9:f5:f7:f2:c4:37:bb:46:59:6e:02:cb:c1:d6:
                    49:1e:32:55:c3:db:6d:90:da:79:c6:04:a0:6e:ae:
                    81:54:d9:f8:7f:57:39:2b:a0:8f:55:aa:ef:c7:61:
                    c0:54:d7:60:ab:6e:88:60:e5:8a:ad:77:09:f5:db:
                    86:71:27:44:4c:69:63:d9:2c:3e:1f:91:3b:35:a7:
                    ea:36:20:1f:5b:35:fb:6e:fc:e0:11:67:64:f6:ae:
                    72:d7:95:92:c7:f4:90:43:92:62:01:bf:98:5a:c7:
                    2b:ed:01:24:a7:1b:d0:7c:a6:56:f0:61:80:35:27:
                    69:10:a9:37:a9:6a:83:aa:9b:6d:a8:46:d7:72:c0:
                    bb:9c:9e:c6:a2:ae:87:36:3e:fa:ab:8c:6c:ba:99:
                    19:43:46:bd:8e:04:e8:68:bc:cd:f5:aa:30:aa:81:
                    9a:4f:5c:df:3f:66:f0:2c:5d:9f:0d:6f:07:b2:f3:
                    3b:13:76:da:39:5d:3b:78:8b:f9:60:bd:59:b3:ff:
                    5a:5a:cb:de:6a:1d:bf:c4:bb:a4:f3:12:4b:77:fb:
                    11:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A4:FA:A0:0C:92:4A:08:E0:14:43:A8:C5:B0:E4:87:A7:44:5C:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/958996f6-abea-3a9b-b1ae-4a3f1a0dbe47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.crl

            X509v3 Authority Key Identifier:
                keyid:81:9F:D1:6B:26:3D:DA:D3:70:D4:D5:AF:2D:CA:CC:8B:B0:B3:CC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f8:25:ad:61:f2:c5:57:d6:ce:49:21:29:7b:4b:69:6f:04:
         c9:37:a3:e7:75:2e:11:02:44:05:e3:f7:8f:81:0c:6f:e2:a4:
         bd:08:65:c2:e2:8d:d6:23:cf:a6:98:55:37:6b:ec:e0:1a:dc:
         41:6a:43:e9:f3:d1:d4:44:00:a6:84:3e:45:d4:49:0b:e8:1e:
         ac:21:be:1d:78:ba:5f:2f:37:78:2a:a7:e7:55:da:e1:a3:db:
         80:e2:18:dc:f3:76:2a:0a:27:4e:f8:7c:38:1a:84:56:39:63:
         f5:e1:e3:ed:e9:cf:a2:48:9a:24:67:58:b3:39:04:52:a3:22:
         28:1c:4e:b8:7c:1b:2d:42:3b:99:69:d5:c1:6a:03:e2:94:01:
         1c:ef:21:0b:4e:b0:3a:63:13:a1:ab:d9:b9:59:17:5a:c8:92:
         06:fe:99:62:79:08:15:c0:9b:70:46:b9:27:c0:3f:1c:d8:31:
         d3:a6:ed:73:8c:4a:6c:43:76:81:92:32:ea:ee:49:2f:34:6d:
         36:8b:21:f4:b1:13:b5:85:d1:22:07:0e:8c:55:8b:a6:63:e0:
         18:1c:67:c2:1e:df:00:6f:96:de:20:c3:56:04:e1:e3:d9:2d:
         bb:50:b1:18:72:88:24:17:ce:a2:3c:2d:c3:ef:05:6d:1e:49:
         80:9e:d8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:26:11 2025 by rpki-client