Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/6088e5f3-a5ac-3887-85f3-caa78a898aa7.roa
File:                     6088e5f3-a5ac-3887-85f3-caa78a898aa7.roa (raw, json)
Hash identifier:          QloocZzQQoz0Xlj06gSyP9gxyOTU0RO1k0ie0tYSRZY=
Subject key identifier:   C0:36:DD:2E:1E:44:6F:43:FE:A1:19:66:49:0B:9B:19:44:21:E4:3B
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584A49706C0419704DEDD1DB4500
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/6088e5f3-a5ac-3887-85f3-caa78a898aa7.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     13720
IP address blocks:        69.174.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:6c:04:19:70:4d:ed:d1:db:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=2c546e23-2611-4fc3-8d42-b79b45b53f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:27:4b:1e:30:6d:79:85:39:79:6e:36:25:
                    b1:18:3d:fb:df:31:81:22:dd:5d:d6:ec:63:1d:7b:
                    cb:fd:6b:3b:b4:a4:fe:1b:16:0e:30:7b:26:23:77:
                    cf:c5:7f:80:2b:6b:99:a7:b8:41:d1:cc:32:00:05:
                    19:9d:be:1c:e2:cb:0a:28:37:01:a0:63:e9:1c:1d:
                    7f:36:08:c9:c6:3e:97:89:0d:7c:61:1f:14:c8:75:
                    9e:cd:de:f8:1d:79:89:48:e5:a5:23:11:f6:0a:8b:
                    94:4c:88:21:64:e5:1b:4b:6c:bc:a5:fa:26:30:cf:
                    21:54:93:10:1e:e7:6e:8c:c5:c4:8c:95:f2:4e:1c:
                    7f:cb:e9:51:2c:bf:83:9c:9b:e5:20:a0:65:68:57:
                    63:2c:40:ca:f7:56:d1:8c:8f:21:8f:db:4a:37:8c:
                    da:cc:12:d7:91:52:12:24:70:d5:b2:bb:de:44:88:
                    6f:e5:ca:bd:b6:04:63:f3:3b:0a:b1:5b:91:05:72:
                    85:e5:4b:dd:b4:7b:af:64:66:bc:2c:37:a7:6f:21:
                    15:56:e7:e7:99:ea:60:0a:e9:42:c9:b1:0f:ac:3d:
                    e0:d1:94:f1:c0:71:55:25:00:e7:38:16:f7:ba:fd:
                    4f:9f:dd:02:86:d7:4a:ee:85:91:30:56:9a:1b:54:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:36:DD:2E:1E:44:6F:43:FE:A1:19:66:49:0B:9B:19:44:21:E4:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/6088e5f3-a5ac-3887-85f3-caa78a898aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c4:bf:e6:9e:36:fb:82:e1:ce:40:40:b0:7e:c8:c8:72:ad:
         e9:bc:81:0f:38:d6:a6:11:34:1c:18:83:ea:61:8a:d1:c8:71:
         7f:2e:62:cd:cc:12:06:9d:7b:61:a0:5f:9c:0b:8a:1c:62:2b:
         1e:aa:0c:3d:c0:71:cd:5d:2a:5b:62:0d:93:ff:76:6c:c6:c9:
         f5:18:62:63:79:97:bd:46:a7:0f:60:8f:fc:ec:78:bc:64:38:
         65:e0:9c:a6:4e:8c:b7:eb:3d:c1:32:25:cf:33:56:0f:a1:8b:
         59:97:6f:70:e9:a0:96:f4:09:85:2c:42:0a:33:f0:aa:9b:c4:
         ad:51:d1:1e:d8:f8:77:43:75:1c:37:5d:37:cf:ae:64:03:b8:
         e2:69:9a:9d:6f:08:cb:af:eb:8c:b0:e3:8b:7b:3e:33:f4:3b:
         eb:16:43:48:dc:ee:e2:6e:41:48:4d:85:b6:fe:e6:d5:9e:71:
         9e:44:a9:91:07:3a:f2:0f:da:34:1f:2d:50:92:04:a1:39:d8:
         87:50:90:e4:bf:d5:6a:5a:9c:bd:c9:46:e7:a7:2e:e6:be:cd:
         e8:b3:f0:c9:4a:20:a6:6e:af:90:d7:20:73:a8:aa:a0:fd:58:
         29:fe:1e:c8:4b:96:73:c4:56:84:da:04:70:0f:13:5a:ad:51:
         05:92:6c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:50:49 2025 by rpki-client