Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/b2801328-0ae2-37ae-8299-e11c2e4c5d13.roa
File:                     b2801328-0ae2-37ae-8299-e11c2e4c5d13.roa (raw, json)
Hash identifier:          j1CrATtL5rGdcOcaXtuKNv2W1XD0BJspmTyB5GqK/IU=
Subject key identifier:   FC:C2:2A:DE:1F:0C:EF:A5:B1:05:CB:6C:CA:01:8C:35:02:CD:F8:76
Certificate issuer:       /CN=2cb23841-08c5-41c8-81c9-076b288743e8
Certificate serial:       010D0C9F4328584A5CFB327A5CCA5CBD487FFB00
Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/b2801328-0ae2-37ae-8299-e11c2e4c5d13.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     26918
IP address blocks:        69.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:32:7a:5c:ca:5c:bd:48:7f:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=34c9076a-aaf9-4a9b-893c-95274e6145a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ae:ef:fd:84:a4:58:d9:eb:1e:1d:10:3d:e9:
                    26:89:82:a0:b2:07:f8:a9:6d:4c:30:dd:3f:89:ed:
                    3e:e5:9b:78:a9:ff:13:6c:05:6b:a8:5a:72:9c:cf:
                    f3:17:f0:66:cd:14:43:f9:f0:54:8b:1b:89:00:cf:
                    52:88:7e:c8:fb:71:cf:8d:21:ef:be:a1:f9:85:0c:
                    61:ac:e0:a1:a3:eb:dc:e3:ff:88:35:a2:69:91:63:
                    04:5b:dd:d0:72:75:a7:c4:a7:63:7d:86:a0:bb:59:
                    14:ab:a9:45:65:2a:59:84:af:e9:a9:12:ac:52:81:
                    7e:f2:37:33:e8:1c:78:9a:e3:f4:8b:a9:e7:ad:7e:
                    28:3e:fc:aa:9c:cb:4e:e5:21:2d:0c:48:cc:59:21:
                    9f:66:f4:5e:8b:a0:da:f9:50:8e:0e:8b:fe:f3:39:
                    f9:af:83:83:17:84:25:4f:69:0f:db:62:86:60:1d:
                    92:c0:9b:d7:ae:86:6b:92:df:df:b9:5b:c4:79:64:
                    32:33:a1:a3:c5:a9:d0:46:64:19:17:db:64:65:69:
                    38:1f:e9:48:a7:e6:17:ce:77:80:e9:3f:97:52:31:
                    be:52:ce:3c:c4:29:99:db:b6:66:e2:da:a8:20:72:
                    f5:98:d6:f6:16:5d:40:8a:e4:9c:21:00:8a:d0:13:
                    f5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C2:2A:DE:1F:0C:EF:A5:B1:05:CB:6C:CA:01:8C:35:02:CD:F8:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/b2801328-0ae2-37ae-8299-e11c2e4c5d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl

            X509v3 Authority Key Identifier:
                keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:0c:db:ac:74:f5:40:a9:a7:c2:7f:36:f4:5e:b9:3f:42:12:
         16:96:cc:18:56:55:28:62:96:a4:d2:b6:77:62:34:3b:fe:95:
         9f:65:79:68:6e:ad:b6:d9:49:78:5f:aa:60:83:6c:b7:de:ba:
         61:5e:14:64:df:05:ce:d1:04:01:cb:f8:91:37:2f:3c:d7:bf:
         93:54:ef:74:53:be:69:f7:67:1f:97:ad:18:bc:7f:12:ee:0c:
         68:4c:0f:41:29:6d:68:2f:99:99:c1:af:d7:89:79:5f:67:8a:
         41:af:22:d8:28:77:4e:86:32:bb:17:51:a5:b5:d9:40:3c:2f:
         79:e9:ec:57:53:4a:c1:aa:e5:75:6e:5b:9a:c6:5a:3f:4e:f6:
         03:af:09:60:fb:da:92:b8:07:14:a3:8d:75:8a:48:75:fa:33:
         99:ca:4d:57:66:e0:0c:51:1d:ae:0d:1f:a5:6f:f0:61:95:81:
         11:50:9d:8d:c7:b4:98:c7:e3:f0:a8:f0:1d:74:f0:32:8d:cb:
         c7:69:d8:6f:d3:1c:17:fe:cb:9b:55:26:9a:9b:57:2c:70:9f:
         76:a6:d9:a8:bd:82:b4:b0:3b:f9:83:3a:03:1d:5b:3a:d8:fa:
         e4:22:5c:cc:8e:e7:9c:11:43:a0:41:ae:15:ed:a6:28:eb:84:
         2e:4d:ae:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:43:26 2025 by rpki-client