Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/39a3e4f5-2a34-34cd-b83f-424192f29baf.roa
File:                     39a3e4f5-2a34-34cd-b83f-424192f29baf.roa (raw, json)
Hash identifier:          J05uh4yfnMsmRUx9VZmNyFGgl3M0B4RjWuZVXLNxLKI=
Subject key identifier:   A5:F7:EF:70:04:5F:6E:12:F3:7C:DA:11:38:33:14:4D:53:9C:B1:5C
Certificate issuer:       /CN=6fceed53-754a-4a1a-9f77-5921f5f4dad2
Certificate serial:       010D0C9F4328584A3B7AF72EEFCB47176025BD00
Authority key identifier: 1C:E3:EB:27:BF:AE:95:55:E8:B5:7B:3C:20:DF:AE:93:9E:17:4D:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/39a3e4f5-2a34-34cd-b83f-424192f29baf.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     8075
IP address blocks:        69.84.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f7:2e:ef:cb:47:17:60:25:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fceed53-754a-4a1a-9f77-5921f5f4dad2
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=e598d4c4-12eb-48cc-83bf-0ec455ae4358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:cb:5a:7f:34:af:7e:0c:a0:03:52:cb:e3:
                    31:30:d3:b8:13:b4:57:36:94:aa:65:bf:fb:35:bd:
                    53:69:0b:02:fd:0c:69:2b:4c:1d:d7:ae:70:70:b1:
                    3f:2e:c2:7f:29:a8:f6:81:20:26:7a:9a:26:24:0d:
                    5f:d7:de:d9:f3:c9:95:e0:54:3e:1a:a5:24:39:f6:
                    f4:e4:2a:39:09:27:3b:a1:8d:0d:2d:7d:b6:cc:cf:
                    7b:07:46:7f:6d:c3:f3:05:43:0d:59:70:fe:d6:9d:
                    8c:2f:37:93:e8:ab:20:6f:8f:de:c6:0c:50:97:ef:
                    4e:66:57:42:c2:d0:47:fc:3a:4e:9f:c4:08:81:bd:
                    e2:a7:f6:48:12:a6:8d:98:45:a8:3c:de:60:75:b0:
                    dd:2d:82:81:84:ee:eb:75:ef:5f:8e:2f:5a:59:ce:
                    f2:d3:55:52:e1:b6:f2:25:3e:f9:02:3a:bb:b3:89:
                    69:4b:4c:10:fe:81:6e:f9:9a:d0:04:97:5d:67:d8:
                    58:e9:a6:7d:fc:c5:fc:51:66:84:34:3c:73:31:47:
                    b7:a5:b3:66:7e:6d:a9:04:24:8a:e4:97:12:4f:14:
                    43:72:95:6b:e1:ae:41:35:b0:d1:39:6a:68:ab:f6:
                    cb:11:c0:f4:50:17:a3:b6:97:4c:fb:56:aa:57:3c:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F7:EF:70:04:5F:6E:12:F3:7C:DA:11:38:33:14:4D:53:9C:B1:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/39a3e4f5-2a34-34cd-b83f-424192f29baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.crl

            X509v3 Authority Key Identifier:
                keyid:1C:E3:EB:27:BF:AE:95:55:E8:B5:7B:3C:20:DF:AE:93:9E:17:4D:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.84.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:92:26:f7:ef:71:57:df:98:88:d2:79:61:87:06:b4:ee:1b:
         3a:56:b7:47:fa:19:b3:61:99:86:2b:40:a5:4a:85:1f:0c:12:
         f3:0d:7b:68:62:1f:d6:5d:17:23:74:ee:a1:49:bd:6f:08:c2:
         66:a1:c5:01:a7:0e:4e:dc:b3:a0:6a:bc:93:35:bb:64:a3:71:
         81:66:48:c7:49:4f:75:99:3a:51:c1:50:87:4d:ce:23:a3:e8:
         6b:ca:4a:6d:7e:e7:7b:83:95:5f:64:c4:d2:90:c4:f1:39:35:
         e8:97:ea:28:fc:36:56:f6:ba:c1:62:64:4a:e3:f7:69:a4:74:
         27:c9:ad:db:6e:80:0d:84:1a:4a:da:d7:06:32:0e:29:59:1d:
         43:f5:c2:54:36:4b:c0:fd:a2:cf:d7:d5:b4:33:be:40:1b:68:
         4a:d9:2d:e0:d1:d7:74:f4:b6:42:a9:a0:da:7c:01:2f:4d:f3:
         55:aa:7c:ff:71:13:28:92:51:ce:8d:7c:56:a3:f5:1a:05:42:
         8b:05:45:16:71:e7:8d:99:9b:00:f7:31:78:28:88:73:b3:b7:
         ca:9d:1f:dc:30:5f:30:3d:05:54:cb:5e:bd:cd:4e:1a:10:53:
         45:53:98:14:52:74:5a:f7:2c:ec:a0:a1:c9:d9:1b:9c:0f:f6:
         ee:f8:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:16:15 2025 by rpki-client