Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/954aade7-7b02-341d-b0eb-26ec26533104.roa
File:                     954aade7-7b02-341d-b0eb-26ec26533104.roa (raw, json)
Hash identifier:          eJGIvc7FXwtdAROn9NK188P4jQk0z9NBxMVSlBkD1X8=
Subject key identifier:   C3:DF:4B:4A:F3:D9:96:8A:68:57:BB:8D:76:C9:6E:04:A4:FE:51:AD
Certificate issuer:       /CN=0f5ef02b-98af-41dc-b874-23f7e75b4e49
Certificate serial:       010D0C9F4328584ADECBB7791FBE838F48D21120
Authority key identifier: E6:67:55:3B:F1:05:6C:61:0C:52:8F:3F:A4:A7:C7:4A:96:5D:90:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/954aade7-7b02-341d-b0eb-26ec26533104.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     399266
IP address blocks:        69.64.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/0f5ef02b-98af-41dc-b874-23f7e75b4e49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/0f5ef02b-98af-41dc-b874-23f7e75b4e49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:b7:79:1f:be:83:8f:48:d2:11:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f5ef02b-98af-41dc-b874-23f7e75b4e49
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=b2552f6a-2b7b-4a20-8612-8088db8a1886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cf:30:67:33:ab:0e:cd:72:66:e3:f5:0b:44:
                    96:1d:0f:22:a0:a8:34:bf:2e:8f:41:ca:79:1b:d9:
                    8e:06:e5:06:7e:6a:1e:d3:e7:e7:e3:4d:11:d5:f2:
                    29:21:8a:42:99:a3:24:c5:b2:2e:63:8f:81:d2:9f:
                    b0:f5:ff:bb:07:fb:2e:30:7a:d0:3b:21:f3:12:35:
                    e8:17:86:25:eb:58:8e:fd:6e:bf:b3:59:68:7f:9f:
                    b0:d5:3c:fd:04:9a:39:b0:41:c8:84:7e:c4:f2:22:
                    ad:2c:5d:94:57:81:3a:e5:0d:a5:ef:1b:16:53:9a:
                    9d:55:53:5d:eb:ac:1b:4e:46:7c:5e:ea:49:a6:f7:
                    2c:54:09:b1:22:88:5c:b8:5a:9b:93:12:e4:01:82:
                    3f:8d:78:d8:54:24:e7:1e:10:f6:57:05:68:34:26:
                    b2:71:fd:ec:89:ba:78:73:3a:fa:9a:f6:45:8a:85:
                    ef:9f:a2:ac:cb:71:6c:35:9d:3a:a5:c3:25:06:e9:
                    4b:31:7c:8e:14:5c:59:d8:31:8a:17:25:ab:a6:d5:
                    5e:40:25:45:fb:b5:ef:ab:de:ea:53:18:b4:83:94:
                    6a:a4:02:93:c8:aa:03:12:0a:c9:69:80:26:bb:e3:
                    a7:8b:23:45:2a:11:02:01:fe:db:12:65:f0:a3:76:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DF:4B:4A:F3:D9:96:8A:68:57:BB:8D:76:C9:6E:04:A4:FE:51:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/954aade7-7b02-341d-b0eb-26ec26533104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/0f5ef02b-98af-41dc-b874-23f7e75b4e49.crl

            X509v3 Authority Key Identifier:
                keyid:E6:67:55:3B:F1:05:6C:61:0C:52:8F:3F:A4:A7:C7:4A:96:5D:90:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:92:73:3d:b6:c8:ca:39:9a:2b:21:ba:5e:3c:8d:ac:c2:4d:
         67:35:86:a3:20:56:98:fe:dc:ba:fc:2c:6c:7e:e2:8f:67:08:
         f7:0f:58:37:3a:0a:48:33:da:4d:ec:df:b8:86:3e:4c:c2:2e:
         68:ad:f6:77:c5:c4:6d:9e:d3:67:0d:56:78:1d:d3:66:fc:6c:
         f2:f7:3b:ef:7d:11:d3:6f:70:4a:9e:a0:59:09:1c:05:fc:e1:
         e6:1c:00:7e:31:51:a7:9a:72:78:43:92:96:27:b5:8d:68:33:
         39:f3:2f:6b:59:94:91:fe:ec:99:bb:26:10:a1:5a:b7:8b:43:
         eb:50:e2:5b:5a:52:9e:2e:e2:8a:f5:21:66:b9:c6:32:55:4a:
         a5:73:e2:cf:79:89:d6:d6:88:52:7d:c8:59:35:b4:bb:17:f7:
         2c:59:44:d6:52:93:90:5a:30:27:ff:f7:9b:f7:d5:62:6d:27:
         ea:34:14:74:6f:bf:66:2f:a6:06:8a:87:df:46:82:8c:53:05:
         cf:f6:e8:61:e1:cb:59:4f:4b:19:cf:f9:5a:c4:80:ee:32:f6:
         f2:31:79:14:1e:ae:f3:a9:9b:fb:fc:ec:23:d6:37:92:80:42:
         1c:60:8c:a5:bf:c1:f8:9a:56:db:d3:23:1c:8e:63:48:0d:bf:
         c2:bb:bc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:25:11 2025 by rpki-client