Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/c0cfa22f-38bd-3df0-ac6e-f4c5baa2a5bf.roa
File:                     c0cfa22f-38bd-3df0-ac6e-f4c5baa2a5bf.roa (raw, json)
Hash identifier:          PBvwBLoX86t628c1Ah7G3RSi/az1GumUnwMVE3szPXc=
Subject key identifier:   80:FE:2F:24:16:F9:56:22:25:C1:E4:64:82:42:C9:EE:22:75:B3:36
Certificate issuer:       /CN=095a6ac2-781a-4599-be6c-28b6bc2857c7
Certificate serial:       010D0C9F4328584A5A3079175441F91880D91E80
Authority key identifier: 73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/c0cfa22f-38bd-3df0-ac6e-f4c5baa2a5bf.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     6079
IP address blocks:        68.69.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:79:17:54:41:f9:18:80:d9:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095a6ac2-781a-4599-be6c-28b6bc2857c7
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=2d2f80c9-0744-4b6e-b37a-d3c2ae1f5db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:38:5e:dc:13:ac:48:88:4a:a2:60:bd:c2:
                    66:3b:e9:56:d9:57:5c:e3:07:87:57:48:a6:08:c1:
                    eb:60:dd:e8:81:ac:95:3e:8a:f9:ba:1a:34:d9:20:
                    fd:82:4d:c7:82:6c:a3:6b:55:34:e1:a5:31:8d:e2:
                    07:46:74:5b:76:77:ef:a3:2e:60:e3:38:7b:e7:86:
                    1f:6e:e2:40:dc:9a:31:15:df:91:82:ed:87:4b:fe:
                    55:11:e5:87:eb:1b:fd:9d:9e:1d:9d:ca:5c:6d:6d:
                    2c:93:f6:7d:41:ee:10:1c:62:4b:1f:3c:54:23:ae:
                    54:74:de:54:51:97:24:b5:cb:a4:95:a9:17:f1:61:
                    7b:33:b6:4b:c4:d3:7b:ec:35:52:22:fe:d6:28:dd:
                    ce:a6:19:e0:ae:7b:58:12:46:e5:d9:57:02:b4:82:
                    5d:19:39:3b:be:94:dd:2e:91:cd:04:f4:46:ef:c6:
                    63:b0:ea:d9:ed:4e:f1:12:d0:4c:b9:cd:bc:be:33:
                    42:fb:1a:28:09:6f:90:6a:d8:e3:dc:30:d3:3a:1c:
                    3d:4a:6a:28:d2:ca:96:25:73:c5:cd:b6:bc:29:33:
                    71:65:0e:21:83:77:3f:52:dc:42:43:33:74:1e:96:
                    e1:6a:39:2a:c2:31:1e:86:94:32:03:00:cb:25:86:
                    06:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FE:2F:24:16:F9:56:22:25:C1:E4:64:82:42:C9:EE:22:75:B3:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/c0cfa22f-38bd-3df0-ac6e-f4c5baa2a5bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl

            X509v3 Authority Key Identifier:
                keyid:73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:83:c4:8a:5c:b3:6b:77:ad:ea:be:db:66:12:a3:f6:69:f3:
         24:9f:82:05:50:21:25:1a:f7:78:58:cf:9d:f4:c0:a0:4d:d2:
         1f:c6:af:27:e3:d0:d2:35:dc:a3:f8:17:8b:be:00:c8:1b:8e:
         69:37:63:58:c9:41:87:03:56:0a:1f:17:5e:50:bd:e5:9d:13:
         4d:77:da:42:18:5e:3b:d1:a7:a0:1b:90:18:be:90:2a:18:45:
         fe:ce:cf:2e:f3:5e:7f:ba:ad:1f:74:d6:e6:e8:f8:99:6c:c2:
         cf:e1:bd:6a:4b:aa:13:3f:ff:56:02:59:29:63:7f:75:6a:f6:
         26:cc:14:b7:0a:96:0e:b8:c1:a1:06:74:77:32:9f:1b:f5:83:
         04:f1:8f:1f:a4:b2:75:40:63:30:b7:cd:d7:ea:aa:53:c8:25:
         0f:d3:27:73:23:9e:c6:dc:dc:e7:3c:07:95:da:6f:05:48:38:
         ac:36:41:91:29:7e:18:86:18:44:0f:4c:2c:87:fd:7c:f4:3e:
         02:94:54:55:ba:26:6d:d5:e0:5d:fe:29:12:c8:1c:40:cb:f4:
         51:d0:a6:b9:43:2a:ab:e0:88:e5:f4:74:5d:f9:ac:8a:4e:dc:
         5c:c7:9d:67:c5:36:d2:a2:a5:01:48:37:f0:16:61:70:10:c6:
         c3:88:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:27:52 2025 by rpki-client