Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/e3285cb7-c582-3d33-8de3-9aca150609c6.roa
File:                     e3285cb7-c582-3d33-8de3-9aca150609c6.roa (raw, json)
Hash identifier:          Awvsrt6+EecVatzhSxjwRxjt3ige0WFrOkbzMuwJ4Lk=
Subject key identifier:   82:A3:AA:21:E1:A3:20:E0:C4:94:3D:00:2D:61:13:D8:09:ED:76:01
Certificate issuer:       /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial:       010D0C9F43285849C20A1129C19A66B5FFEACD00
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/e3285cb7-c582-3d33-8de3-9aca150609c6.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        69.72.42.0/24 maxlen: 24
                          69.72.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:11:29:c1:9a:66:b5:ff:ea:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=1a7cc6b8-f1ca-4f4a-a8b5-94584bc7a3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:ff:1e:4f:11:f7:c2:b2:d5:63:51:21:9a:
                    69:6d:79:a4:aa:39:c5:71:50:b7:73:d8:17:b1:1d:
                    01:d6:f8:70:a8:b8:53:7a:c4:4d:f3:0a:a7:b3:ab:
                    d3:a7:94:f3:e9:a5:4b:2a:56:63:48:99:b0:a5:03:
                    61:84:bd:ab:af:88:52:1f:16:3f:6b:6d:48:23:41:
                    d5:3a:a1:15:4c:6b:b8:5e:7c:ad:2f:ef:53:13:61:
                    c8:45:f0:03:a1:a8:9d:e4:fa:b4:0b:a1:4f:d1:12:
                    38:c3:90:43:bd:8c:1e:e9:6e:ed:b7:05:f8:df:92:
                    4c:06:6e:ac:ab:0d:f4:a5:47:97:f9:f7:32:b8:b9:
                    82:d9:87:94:db:7f:16:c0:ac:77:49:9f:90:51:58:
                    fe:76:28:60:ab:f1:9e:10:e2:b2:30:1a:a0:c7:85:
                    79:5f:0b:f6:7e:9c:92:47:a3:7f:51:50:23:24:03:
                    b3:6c:4a:f4:04:48:10:8a:de:ee:59:d0:af:d3:ea:
                    8d:38:02:fb:35:d7:9b:80:2b:00:37:02:8a:84:e3:
                    fd:d0:53:7a:59:fb:cd:2f:2c:3d:fd:47:1a:ed:13:
                    fc:25:bf:93:19:bf:63:61:8c:1f:03:e7:3a:06:29:
                    e7:a8:5a:fe:87:1b:6c:f7:d6:c8:7e:ce:44:e6:a6:
                    96:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A3:AA:21:E1:A3:20:E0:C4:94:3D:00:2D:61:13:D8:09:ED:76:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/e3285cb7-c582-3d33-8de3-9aca150609c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:91:c2:20:84:ae:a8:53:28:f5:7f:47:0e:2a:23:f3:35:5c:
         35:fc:50:3f:28:16:cc:63:3a:a0:1d:49:c0:06:8b:fd:e4:e2:
         73:5b:73:2c:9d:49:50:93:dd:4a:1b:de:e2:c9:bb:bd:29:0e:
         75:a0:e1:7e:b7:f7:f9:56:69:e2:73:81:b1:ff:58:79:0c:ab:
         e6:0d:5a:e1:53:f0:1e:05:25:d7:e7:39:a8:86:4f:60:1d:f2:
         8f:91:ef:f2:f5:ea:ab:a1:34:3c:36:32:92:a7:e3:58:a4:b6:
         f4:f2:73:d6:a2:1c:81:1a:20:64:82:c0:c1:47:55:5a:d7:bb:
         b3:46:e0:38:8f:ab:71:3f:ad:82:a1:60:36:13:ab:ab:8c:f1:
         13:0c:19:5a:74:54:32:3c:6e:0b:91:0d:3f:2f:10:d8:ac:2d:
         c3:d3:bb:1c:9b:cd:05:cc:05:fb:28:08:f1:1b:a0:96:a5:02:
         64:31:43:16:bd:bf:1f:d9:d2:0f:d9:43:fc:3c:64:ef:7e:56:
         e4:f7:ff:2d:93:1c:7c:b0:5d:68:c6:e1:8f:af:3a:8e:0f:14:
         33:1f:19:63:3b:89:37:b9:a6:30:68:6f:c5:7b:7a:32:42:bd:
         57:47:a6:6b:5f:e3:58:34:b4:d0:27:89:e7:64:ff:07:35:05:
         14:f3:b9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:38:27 2025 by rpki-client