Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2e61229-20e1-320e-b274-42964ea17426.roa
File:                     b2e61229-20e1-320e-b274-42964ea17426.roa (raw, json)
Hash identifier:          l6bvTJyFDEZF589pY/dQ2DKZhRonpqeEDGQBYV3au2M=
Subject key identifier:   87:8D:07:CC:8A:B1:CF:51:50:BB:04:1F:EC:14:25:A7:6E:49:58:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9DFE70A3771596FD69580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2e61229-20e1-320e-b274-42964ea17426.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        69.139.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:df:e7:0a:37:71:59:6f:d6:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=6b9d0182-c8dc-4abb-a265-1475586d6055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:7f:01:2e:16:d1:1f:ad:5a:e1:18:13:8b:
                    be:88:cb:2b:6a:9d:d1:02:a4:d4:fa:79:b1:30:9a:
                    8d:f4:11:03:9e:3b:7f:3b:ab:b8:96:6a:67:52:28:
                    9f:d2:2c:d8:66:4b:b3:83:2b:a8:99:46:f8:46:34:
                    3e:20:b4:7c:45:6b:89:f1:b6:e6:00:ad:a7:e4:d3:
                    ae:d4:c8:5d:bf:61:67:08:3e:e6:b5:1a:6b:86:40:
                    dd:59:ed:1b:1b:72:61:62:53:a4:ee:30:00:5b:de:
                    24:c3:46:08:2b:92:f1:c4:59:ff:81:fc:6c:07:a7:
                    0b:92:bc:bb:9e:06:14:fe:4b:d6:a6:52:19:19:6e:
                    54:94:da:f5:9b:15:25:cf:14:67:03:a4:ad:55:60:
                    1c:c3:ad:8d:3e:dd:63:3f:44:ec:a0:ce:e8:1e:74:
                    75:e8:ec:df:ab:4a:8c:77:c3:c3:9c:26:f7:2f:41:
                    58:03:44:e1:ff:83:95:f7:f0:86:ef:3d:dc:d4:16:
                    3f:ae:75:62:73:91:20:e6:68:cd:d6:76:fe:cc:00:
                    54:d0:07:44:76:87:76:12:7f:7d:5e:a6:fd:ae:62:
                    ab:1b:f0:2f:f0:01:6d:ec:36:b7:0b:b2:94:c7:8c:
                    a6:6a:6f:e9:78:0f:fb:0e:e2:85:8e:17:05:01:38:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8D:07:CC:8A:B1:CF:51:50:BB:04:1F:EC:14:25:A7:6E:49:58:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2e61229-20e1-320e-b274-42964ea17426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.139.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:cf:17:25:49:b3:e9:de:55:51:de:0b:d9:9d:59:c2:1b:27:
         c7:fc:7d:92:7b:e0:b7:3b:67:9c:4d:94:ca:ae:d4:3e:20:fd:
         45:d1:f4:22:8c:0c:27:60:9c:67:93:69:d6:ac:c8:c7:64:d3:
         26:b0:e1:14:e3:b8:38:25:cb:4b:1c:34:ae:4a:3d:ab:fb:d4:
         7c:16:bd:14:de:ee:e9:51:a9:95:3d:db:fe:41:4c:b4:96:d4:
         26:93:9d:90:85:89:0f:00:87:40:ac:a9:17:f6:0a:ce:b2:3d:
         87:57:66:bb:0d:0e:58:11:e1:d5:43:a4:04:fc:21:a8:46:71:
         4f:3e:74:24:48:d6:51:1a:47:04:08:e1:3e:52:aa:00:2c:01:
         a6:c6:ee:96:9f:30:0d:23:c6:af:e9:7d:af:be:5d:0d:05:e3:
         28:cd:4f:01:e6:f2:3d:63:e0:e6:bc:5b:82:5c:6f:1e:9c:6d:
         47:3d:71:7f:db:bf:a7:31:9a:bc:a5:7f:f0:2c:45:cd:18:dd:
         85:a7:b2:84:aa:38:cc:97:91:11:0f:65:df:e9:de:e3:4d:d0:
         0d:23:6f:d0:7a:4d:57:7a:d5:22:ff:11:de:74:bc:08:a5:66:
         3b:98:32:a4:be:4a:51:0a:85:37:37:b6:72:fe:eb:71:c8:ae:
         54:bf:4d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:18:28 2025 by rpki-client