Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/e4b2057a-af76-374f-ae46-35833af25c64.roa
File:                     e4b2057a-af76-374f-ae46-35833af25c64.roa (raw, json)
Hash identifier:          UF10mqGPcfhs5AWlDK4beJiYl0j0iygi+KxwSMqNJ0U=
Subject key identifier:   29:4F:F1:57:CE:62:1D:D7:F6:A4:E0:5E:B4:6E:A5:A3:A2:A4:02:8F
Certificate issuer:       /CN=7e488bf9-7470-4c89-8aed-6849e5450eee
Certificate serial:       010D0C9F4328584B80B768C272304DA91FFF04C0
Authority key identifier: B3:0E:14:A1:6C:91:71:B9:02:0D:D8:84:78:53:4A:CB:C0:34:B9:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/e4b2057a-af76-374f-ae46-35833af25c64.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     19566
IP address blocks:        69.58.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/7e488bf9-7470-4c89-8aed-6849e5450eee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/7e488bf9-7470-4c89-8aed-6849e5450eee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:68:c2:72:30:4d:a9:1f:ff:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e488bf9-7470-4c89-8aed-6849e5450eee
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=7d198426-8f2a-4ab7-b195-82f3ed04fbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:61:41:86:19:e6:16:00:7f:6d:34:90:ea:
                    8d:ee:c5:22:87:7e:51:89:db:53:f7:14:1a:b8:41:
                    9b:d7:01:0d:72:69:3a:83:4d:db:92:8e:b3:78:2a:
                    b4:f2:eb:99:77:ce:72:f6:b1:4b:76:18:f1:07:74:
                    58:f2:4b:d3:03:36:a6:5e:6f:dd:0c:31:c4:6e:25:
                    28:11:69:20:dc:b6:e8:62:09:62:f2:61:49:36:cb:
                    a7:76:22:df:1a:d4:15:32:e0:18:2d:08:08:5b:79:
                    e9:45:82:83:a1:ae:1e:a6:0c:05:32:2b:41:ad:7b:
                    44:f5:60:87:0c:69:55:e5:31:0d:4b:88:ad:14:1a:
                    34:73:bc:2f:42:9c:0b:1c:3f:6c:bf:0c:5a:0d:77:
                    ca:3f:69:90:69:82:2e:b4:ae:ed:69:af:78:70:8e:
                    9f:36:86:c6:f3:5a:52:fa:98:a5:68:41:bd:31:c8:
                    1c:90:b3:e4:b2:d5:39:c2:ef:d0:f4:c4:22:4f:2a:
                    50:f0:5d:0b:4b:18:6e:a3:17:33:12:ee:4c:97:e3:
                    16:d4:29:64:5a:e8:bb:f3:d7:8e:d7:80:8e:71:7c:
                    9a:ab:d7:8d:79:90:78:e3:5c:79:a9:66:87:73:59:
                    7a:87:1a:d6:66:bd:01:44:f4:4d:ec:f8:48:cd:74:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4F:F1:57:CE:62:1D:D7:F6:A4:E0:5E:B4:6E:A5:A3:A2:A4:02:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/e4b2057a-af76-374f-ae46-35833af25c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/7e488bf9-7470-4c89-8aed-6849e5450eee.crl

            X509v3 Authority Key Identifier:
                keyid:B3:0E:14:A1:6C:91:71:B9:02:0D:D8:84:78:53:4A:CB:C0:34:B9:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:df:22:06:57:41:15:f7:91:50:f2:2e:b0:dd:72:74:b7:8f:
         37:c7:eb:60:13:07:06:25:33:3a:e8:ea:34:4e:0a:38:c8:58:
         c2:b8:15:a4:75:77:ad:4e:ae:52:e2:ca:83:24:03:ba:e5:2c:
         21:9f:14:5d:4f:ee:a9:1f:e6:4f:af:ef:11:05:b7:05:c1:09:
         d4:4f:e2:18:28:2a:17:c7:ca:c8:0b:3a:f1:bf:cc:b4:ea:2d:
         15:bf:d1:c9:b2:32:e5:a8:4e:7e:fc:51:20:1c:3b:06:89:56:
         43:7d:d0:f3:ba:ac:39:c4:56:a5:02:7a:8e:48:9f:41:82:64:
         d8:ba:4a:cf:bc:31:b3:7f:2f:41:32:62:ce:b1:96:62:49:90:
         25:a7:58:13:d8:ac:d9:d5:98:4b:6f:09:a6:6f:15:6f:bc:b8:
         3a:40:27:ef:c9:02:ba:87:e3:82:c9:af:b7:c4:c0:f3:99:a8:
         c6:3e:5c:01:24:77:58:83:5d:5f:46:06:7b:7b:87:1e:ab:e7:
         7a:b4:fe:65:bf:24:64:f7:c4:1b:ac:5b:c7:2c:b7:c5:8f:b6:
         d2:a4:2f:e1:f4:8a:0b:8a:e9:e1:06:2a:ec:f8:fa:10:f4:ca:
         06:77:c6:bd:1d:86:86:e5:4e:8c:b3:a6:42:46:53:e9:b2:f0:
         ae:02:81:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:13 2025 by rpki-client