Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d9088f97-08bc-3e77-b907-58112fed375c.roa
File:                     d9088f97-08bc-3e77-b907-58112fed375c.roa (raw, json)
Hash identifier:          Ip0QHLjLoxqjqU//UAZ5pTcEt3Yiau5R8w7BcKWCi6A=
Subject key identifier:   68:BA:6E:2A:4B:6A:73:1A:9F:7C:BE:B9:3F:AA:03:AA:6B:F2:4F:10
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CC95CFC8750DEC7F3D5E30
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d9088f97-08bc-3e77-b907-58112fed375c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        69.80.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:95:cf:c8:75:0d:ec:7f:3d:5e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=02ea3603-ae57-469a-8db4-54e5489f92fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:8e:57:77:dc:1b:95:d8:ee:3c:60:45:17:
                    27:49:7d:1b:4f:88:c6:78:75:a2:2c:16:71:92:bf:
                    f8:a2:8a:a4:b1:96:da:71:47:b2:fc:0c:c9:c3:21:
                    60:f1:41:28:20:af:34:e7:e1:62:b3:e3:7e:00:3b:
                    75:c3:7e:0d:c8:27:1b:91:84:ab:7f:8b:36:ed:d0:
                    12:2b:c9:12:1a:df:d6:13:c4:95:58:2c:b6:81:71:
                    63:00:20:71:1f:51:4a:79:2e:e5:3b:87:a1:68:20:
                    46:3d:e4:8c:1a:00:2e:a7:97:16:3e:16:9f:83:e8:
                    70:50:bf:fa:52:90:bc:ee:72:52:e3:ce:a0:aa:3a:
                    0a:8d:1f:dd:19:88:07:d9:3e:fe:4b:8a:96:70:b9:
                    cc:77:7d:bd:1d:c7:34:32:d6:8f:b1:dc:1a:a7:7f:
                    18:bc:dd:29:66:da:91:12:c8:20:ac:2e:fe:be:01:
                    ae:68:b1:3c:b1:60:4a:a2:68:5b:30:22:7b:f4:d1:
                    b5:59:a8:53:65:4f:00:c2:95:21:94:7b:c5:93:30:
                    e3:73:fd:b2:64:c0:38:16:9f:32:d5:24:92:5c:21:
                    40:ec:81:87:dc:1d:68:2a:d7:41:c4:69:b5:60:22:
                    88:34:81:40:9e:e7:a5:4c:20:04:9f:ae:e0:3d:3a:
                    5d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BA:6E:2A:4B:6A:73:1A:9F:7C:BE:B9:3F:AA:03:AA:6B:F2:4F:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d9088f97-08bc-3e77-b907-58112fed375c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ae:cc:34:40:c5:01:8a:80:9e:69:d8:75:59:68:46:c3:0a:
         72:77:38:ad:18:f1:06:25:27:91:26:4a:39:1e:10:37:91:eb:
         50:d7:7b:65:9a:2b:8c:0e:ef:22:ea:3c:bd:f9:ee:24:4b:9c:
         aa:1a:c2:f8:bb:84:ae:47:f0:20:b2:e7:4c:5f:54:b2:70:cf:
         f9:50:35:8c:3f:4c:9c:23:be:de:47:9e:26:3c:87:9d:7d:5a:
         12:a4:5d:2e:f2:bc:ad:8b:bc:03:e5:11:41:d6:11:51:3c:db:
         23:b5:2f:46:e3:b3:4f:00:0f:bd:2f:70:82:53:d7:92:9d:2e:
         2c:aa:c3:4a:1f:11:3d:3f:08:fd:a4:29:8f:80:09:d3:b7:72:
         c5:e9:80:84:20:cf:99:cf:8d:eb:ed:a6:cc:7a:e1:fa:71:36:
         21:b9:c7:7e:6c:98:e7:16:d4:e6:15:05:56:4b:70:46:fd:cb:
         d6:a0:30:5a:33:7d:15:ef:41:41:c1:a0:d7:f3:b9:5d:ba:86:
         5e:e2:62:96:50:68:9b:cc:a6:bf:92:97:22:70:ac:f0:95:f4:
         03:b8:1a:3a:41:0d:58:ee:f1:b6:23:80:c3:84:ee:c1:19:f0:
         f4:fd:56:4f:ce:30:0e:10:39:82:88:00:2d:af:18:13:f0:01:
         62:07:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:09:22 2025 by rpki-client