Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0158997d-71e4-3d97-acda-5a5cc55cfb1c.roa
File:                     0158997d-71e4-3d97-acda-5a5cc55cfb1c.roa (raw, json)
Hash identifier:          bJBtHQdZkCFfqGkhc5iviZVOk3m7nkNafChGSftn8uc=
Subject key identifier:   39:AB:56:A3:47:29:DF:8D:20:97:7F:FC:83:EE:02:35:D4:6A:EF:97
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285849A4B9F383D2C86678FE7AE400
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0158997d-71e4-3d97-acda-5a5cc55cfb1c.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     14813
IP address blocks:        69.73.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:b9:f3:83:d2:c8:66:78:fe:7a:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=63df0d36-976e-4c70-9a18-69ea737b9d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:58:b3:bc:c3:f4:33:74:b7:08:87:c7:95:
                    7d:1d:8e:72:38:e5:9c:35:79:33:e0:2a:9c:57:87:
                    e1:ed:e3:69:f1:01:0e:85:04:25:91:cd:f4:2d:e5:
                    38:83:ee:8e:17:57:65:4b:ba:7e:74:38:ec:db:94:
                    17:71:c4:fb:c7:82:d2:3c:34:c4:0f:64:9d:36:ee:
                    88:1c:c8:fa:d3:56:36:94:1f:41:42:d4:f3:eb:8f:
                    3c:e9:e9:ab:4b:ef:91:06:22:32:0c:53:40:a5:6a:
                    53:af:3a:50:0f:fd:f7:46:87:58:ab:a6:e4:55:86:
                    3f:e7:88:21:a6:f0:0c:b0:f6:d3:19:11:86:60:7b:
                    f4:86:88:95:5a:0e:1a:5a:96:d2:7d:04:99:e6:07:
                    3b:a5:7b:f5:a8:d2:87:5c:41:09:4c:f2:33:59:f2:
                    bf:51:4a:32:7a:69:07:ed:5d:e0:5b:0e:a1:c6:60:
                    54:7b:16:aa:b5:a2:ee:1d:66:e7:07:d1:9e:dc:30:
                    8d:9b:bb:57:6b:ac:8d:bd:95:f5:3d:e0:be:c3:80:
                    ac:17:e6:e2:12:46:e5:b6:27:c6:20:f9:5e:b4:a5:
                    e4:a4:7c:79:c7:e1:77:76:d9:9e:3c:7f:da:6d:89:
                    62:8a:25:93:7d:e9:75:f7:c3:eb:48:9a:23:62:0f:
                    da:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AB:56:A3:47:29:DF:8D:20:97:7F:FC:83:EE:02:35:D4:6A:EF:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0158997d-71e4-3d97-acda-5a5cc55cfb1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b3:dd:71:cb:80:22:fe:a8:2b:1c:aa:fc:52:79:77:2a:df:
         40:95:05:47:ba:d7:d5:59:2b:f9:45:f9:a4:52:e7:29:73:42:
         3b:27:9f:70:6a:b6:5d:36:1b:8e:af:6e:b8:50:b2:29:2e:38:
         c7:00:dd:b9:04:51:d8:e7:6b:0b:b5:50:f2:f1:cb:e0:b8:e9:
         2f:0c:6e:b7:0a:0d:d5:fb:58:59:ad:55:64:e3:ae:bc:3c:05:
         9b:a4:3c:6e:0e:f3:42:53:bd:86:52:97:49:5a:06:1f:7c:af:
         3e:7c:f4:09:a9:eb:fb:d9:bd:08:f2:bd:8c:c4:4e:67:73:02:
         5e:c8:6d:d5:e5:56:c1:24:b7:b9:84:a0:b2:20:a3:8b:d1:92:
         37:08:c2:53:8e:bd:65:09:7d:10:28:90:4f:dc:d0:ad:66:72:
         65:74:43:df:69:ab:81:67:1a:c5:7f:35:b4:a2:f3:3e:d9:5f:
         84:1f:4d:64:fc:3a:f2:fe:65:7e:22:01:64:f5:8f:5b:48:01:
         73:66:fe:61:01:82:50:28:e5:99:93:55:a0:dc:e6:e0:f6:94:
         82:5a:b7:3e:77:2b:e1:b6:6c:ee:4e:0d:97:77:be:82:19:02:
         ea:d2:aa:24:7e:13:02:d8:c0:af:54:78:1e:e0:68:2f:a1:d1:
         27:65:25:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:06:57 2025 by rpki-client