Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/57bf29be-7ac0-3f01-9e8c-e8baed11e7f8.roa
File:                     57bf29be-7ac0-3f01-9e8c-e8baed11e7f8.roa (raw, json)
Hash identifier:          9EpJkl7uy0tJt0Jm4wrRZTSOveNEEl0k3wy70WTLW1c=
Subject key identifier:   58:23:E1:1E:55:CC:99:01:6A:8D:1E:79:7D:8F:9E:D9:5D:D7:82:6F
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CE5BB8D339614C79E73E80
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/57bf29be-7ac0-3f01-9e8c-e8baed11e7f8.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        69.73.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:5b:b8:d3:39:61:4c:79:e7:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1a416c54-e5f6-41aa-b33b-ebc176559250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:38:67:5f:74:5d:3e:e7:1b:86:01:82:35:f5:
                    d1:8f:46:e5:fc:ce:d5:df:92:76:dc:85:f6:9b:e0:
                    b6:83:c1:03:21:6f:9b:c4:d3:33:4a:63:cf:c2:f3:
                    c2:2e:d1:25:82:4e:55:93:b8:68:36:cf:fa:d6:88:
                    63:d8:c7:de:20:6c:22:f3:83:0f:c3:23:66:9a:7c:
                    38:ee:17:75:2c:ab:ce:16:0d:dc:fd:3b:bf:9a:1f:
                    56:7c:fc:35:b1:51:b2:99:73:4c:0c:15:91:f1:f8:
                    81:cd:c8:5f:19:44:23:54:c2:e3:c0:40:32:e0:8e:
                    03:d3:fd:3b:0e:6f:d5:0b:7f:dd:d1:09:6b:0b:ba:
                    88:d5:ed:65:a9:8a:40:f0:86:ab:0d:d4:95:47:92:
                    9a:7b:af:21:1c:0c:71:ea:64:13:2d:b8:9a:63:20:
                    0b:10:d8:ea:e1:e3:36:b1:d3:b3:48:b2:76:10:73:
                    24:fd:0d:6c:eb:48:4a:0b:a0:69:5a:fa:a0:d0:6d:
                    4a:e8:ea:38:b9:5b:c7:19:31:35:d0:46:8b:74:51:
                    80:26:4b:ff:1b:ae:32:ff:93:0b:eb:b3:d6:a0:d4:
                    1e:b3:57:d6:81:ce:cb:ec:12:bc:86:40:82:fb:fa:
                    60:cf:4e:33:03:85:ef:be:f6:b0:31:1d:d9:37:8d:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:23:E1:1E:55:CC:99:01:6A:8D:1E:79:7D:8F:9E:D9:5D:D7:82:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/57bf29be-7ac0-3f01-9e8c-e8baed11e7f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e3:d8:af:00:06:5f:f3:f8:0c:89:ce:b9:a8:f0:08:07:bd:
         da:ea:70:32:fd:5b:ba:6c:8c:f8:73:09:b2:a2:07:52:fd:48:
         34:c9:bb:b4:7e:11:f7:d5:50:62:20:3c:9a:0b:09:91:b8:0c:
         83:18:c0:f6:ad:61:ea:c4:46:25:c3:f3:8e:7b:0f:b8:4f:6d:
         01:31:1f:79:cb:57:f4:cb:b6:d3:f9:1f:33:2c:0e:3d:66:ef:
         02:2e:94:ad:05:0c:5b:c3:58:8e:b1:74:de:6b:31:64:7d:a2:
         7d:60:46:da:c7:96:64:0d:b7:8c:62:68:00:d8:46:1b:38:8b:
         aa:f2:1d:54:bd:d5:f5:76:57:ef:f5:92:c7:eb:11:1b:e7:f8:
         9d:68:5c:e3:db:f1:d8:9b:65:1f:a4:e4:3c:d8:fd:f5:30:0e:
         c0:69:d2:b5:41:0a:f5:e9:02:fa:4d:78:e8:f6:94:83:0f:a5:
         8d:bd:89:87:cf:c3:ba:e8:95:fc:d5:74:f2:ce:68:b0:10:fd:
         07:89:3a:86:90:0d:49:3f:b8:d8:ed:e6:ae:da:58:43:b4:9e:
         45:6b:86:31:1a:3b:4b:bb:58:c2:f5:c1:1f:77:59:68:8a:3c:
         38:86:87:5e:a7:13:c9:46:dc:e7:57:ee:6f:db:5f:dc:d0:a3:
         c7:04:6f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:08:07 2025 by rpki-client