Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b80d1046-0cfb-3a86-b0ae-8a16642352ea.roa
File:                     b80d1046-0cfb-3a86-b0ae-8a16642352ea.roa (raw, json)
Hash identifier:          GBztrFwzIk4KHTc63Sg+ziL3WOroj4AxkuJBXv6ifZw=
Subject key identifier:   E5:0E:1C:95:D1:E8:30:A9:BB:0C:32:27:BA:3B:07:E3:95:30:B9:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC17F0AC12BFF9B15F20600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b80d1046-0cfb-3a86-b0ae-8a16642352ea.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        69.141.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:7f:0a:c1:2b:ff:9b:15:f2:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=37bfb91f-e889-411f-a881-5ce7e18090d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:a8:ac:5d:9c:ef:e5:59:65:53:8c:64:29:
                    8d:f0:5e:b1:05:ae:2d:5d:11:c1:18:57:84:5a:f1:
                    2d:37:db:26:18:c0:6d:7e:1a:e0:a7:a6:90:82:04:
                    3c:be:8f:3a:2d:96:86:f2:ba:d3:1f:df:d3:d9:5f:
                    3a:31:54:b3:21:df:80:9e:37:07:60:eb:d2:33:da:
                    8a:4c:6c:34:8b:1d:f2:a6:02:c4:1c:66:d1:d9:9c:
                    ba:60:a9:14:15:02:c2:5f:a3:4c:4f:b1:96:ea:c1:
                    14:cf:3e:56:02:99:bd:4e:70:ca:e1:67:3b:2d:08:
                    ae:28:d2:58:4a:a8:4a:0f:8b:cc:c4:2c:60:e2:6e:
                    7a:67:69:b4:b6:fb:f9:85:41:ca:54:e7:c1:41:0f:
                    c6:89:e7:b4:eb:4c:f4:a9:23:10:8e:bb:7c:97:4b:
                    c9:c3:39:58:a2:51:2b:88:17:e7:6b:2f:5b:fa:82:
                    27:3d:5a:d6:74:32:4d:b5:73:de:07:62:28:f7:5c:
                    49:70:92:8a:aa:fe:6d:9e:53:37:bc:7a:c4:a0:5a:
                    80:17:e0:da:55:c0:94:37:8e:79:33:12:8b:09:cd:
                    73:4c:b1:12:63:5f:55:93:58:aa:8c:0c:74:d9:06:
                    2d:e8:aa:fa:d6:48:0b:71:5d:c3:35:f0:16:b0:10:
                    74:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0E:1C:95:D1:E8:30:A9:BB:0C:32:27:BA:3B:07:E3:95:30:B9:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b80d1046-0cfb-3a86-b0ae-8a16642352ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.141.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:9e:8a:ee:c1:4e:28:2e:a1:60:2f:15:d8:cb:74:fd:97:12:
         c7:7a:c9:03:bf:b4:ca:92:9d:e9:4d:72:08:1c:d5:2f:0f:68:
         93:c8:5a:aa:93:50:3f:5f:32:be:26:50:e6:96:27:ff:64:8f:
         b1:b2:3c:ed:5e:3d:2a:38:01:f5:01:e3:ee:5e:3c:17:b5:48:
         49:0f:30:25:ad:c5:ef:41:f8:79:59:f6:f2:66:33:b2:3a:8d:
         8e:b5:7d:d0:ec:94:28:21:74:7c:38:d0:15:08:a6:7b:bc:5b:
         11:00:84:ea:6e:fb:77:cf:44:ee:34:88:98:a3:34:43:ca:07:
         b6:70:82:ee:82:a2:14:27:88:40:db:ff:4c:66:8b:94:00:66:
         fb:83:b9:3d:4c:2b:e7:e1:88:f1:50:dc:a1:0e:2f:f5:39:2b:
         07:3f:57:71:e5:60:8f:68:62:9a:c7:56:8f:b9:cd:57:50:b6:
         5e:6b:1d:5f:fb:ce:44:5a:4f:35:b5:53:ab:13:97:10:67:c9:
         2f:2b:a9:94:6c:2c:d6:02:c3:20:e4:23:a1:9d:09:64:c2:ba:
         da:08:1a:ac:b0:cd:37:38:cb:f9:bf:c5:67:a9:7b:fc:9b:ac:
         7b:ab:1f:bd:0c:19:b1:15:be:09:0f:32:9f:b4:66:73:b8:e4:
         e1:83:24:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:35:52 2025 by rpki-client