Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/2201e5ec-ffcf-3315-94bf-de14f6a87f80.roa
File:                     2201e5ec-ffcf-3315-94bf-de14f6a87f80.roa (raw, json)
Hash identifier:          esVpHLbHofUyjE5l7LWNtMVLSu1fNNZTig+spAJzBUk=
Subject key identifier:   49:F2:C6:78:C6:F3:08:AE:16:FC:A8:D9:AD:59:60:D6:13:0F:D1:89
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584A49706C2C2C43FF31638013B0
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/2201e5ec-ffcf-3315-94bf-de14f6a87f80.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     13720
IP address blocks:        69.174.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:6c:2c:2c:43:ff:31:63:80:13:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=1a7bdb67-5215-47c4-bab1-f045e50f4a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:80:8e:fa:f4:50:1d:64:9e:65:ee:8d:59:
                    2c:fb:56:7d:96:02:f3:8d:95:6b:96:41:a9:9e:8c:
                    88:47:bf:28:5d:dd:b0:d3:ee:04:9b:32:a8:09:1c:
                    a3:c3:a5:5a:53:af:aa:d5:5b:17:31:11:fe:44:16:
                    67:ea:4d:bb:27:3a:c3:7a:90:7d:05:ce:e1:4f:8d:
                    a2:a8:37:59:d0:f7:ec:25:64:21:ef:8e:bf:19:d0:
                    a5:12:72:9c:ae:44:fa:76:7a:17:08:db:07:07:fa:
                    7c:a6:b8:1a:94:07:6a:c4:f8:5e:83:5a:db:ca:69:
                    0c:4b:b6:d2:f2:e2:e6:85:2f:f0:79:f2:1a:eb:ee:
                    02:76:09:f1:c2:19:31:22:14:13:c0:e1:23:3a:f0:
                    c0:03:c4:b3:b8:50:b6:5c:7e:c7:49:8b:ec:4f:cf:
                    fd:fd:89:94:ba:f0:81:29:31:15:27:38:b5:b7:1d:
                    c7:f7:8f:75:73:ff:c5:33:33:62:16:1f:68:57:a3:
                    05:96:fd:66:1b:54:82:b4:b0:22:9e:82:81:f6:6f:
                    76:72:a5:84:7c:cf:51:44:ff:e3:53:8b:d3:07:99:
                    6f:69:bb:33:18:0d:e2:1b:12:5b:7e:05:23:8b:92:
                    d9:ea:4f:f9:cb:87:30:79:df:e8:f1:af:40:e0:ea:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F2:C6:78:C6:F3:08:AE:16:FC:A8:D9:AD:59:60:D6:13:0F:D1:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/2201e5ec-ffcf-3315-94bf-de14f6a87f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:fe:85:b7:65:62:7f:8f:61:67:a8:6f:93:cc:b4:52:a1:ad:
         bd:3c:46:15:da:98:98:18:20:83:dc:7d:09:c5:63:c2:b8:f7:
         ff:fb:ce:5e:a4:6a:42:35:3d:a8:2f:67:b3:c4:ea:06:fd:45:
         b9:f2:8d:44:19:53:e7:e6:d1:8b:47:1d:6a:2e:4d:cb:6e:0a:
         94:86:9f:b4:d7:80:48:6d:95:00:67:8c:60:ce:fd:23:9b:e6:
         b8:b7:c6:a1:62:4a:97:f2:65:30:cc:ba:ab:5f:75:a4:ec:1c:
         8d:9a:90:e5:1a:5b:e9:56:62:b7:fc:be:ad:ef:8a:38:cd:66:
         14:92:07:56:b4:db:8b:b1:b5:32:a1:5c:89:a5:ed:61:4b:1b:
         40:1b:e5:9d:ec:22:52:a3:a9:be:2c:23:f6:0a:32:08:89:2a:
         ac:ab:db:e3:fd:71:65:7f:f7:c1:5f:a4:1f:b7:23:b3:2e:9a:
         12:d4:ef:2a:ae:c5:b4:f3:d1:68:2f:5d:61:68:65:8a:0b:0e:
         eb:a1:af:21:65:80:f0:ac:99:1b:b4:f0:66:47:dd:d9:39:24:
         27:9b:2c:1c:c5:15:d5:ef:3a:b6:da:e5:64:fd:76:d9:9d:62:
         52:d7:53:3d:19:29:af:91:98:6c:cf:dd:33:a1:7f:5c:44:ec:
         b9:ac:60:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:17:34 2025 by rpki-client