Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/e76770ae-17b0-31ab-a319-b0f928c378b0.roa
File:                     e76770ae-17b0-31ab-a319-b0f928c378b0.roa (raw, json)
Hash identifier:          Kl77nI0xDdJhsUKL889QRP/bTOIrSxJVZtZ80RKEtuA=
Subject key identifier:   56:D0:08:CE:0C:2C:E2:10:0E:77:65:A2:93:E1:12:1D:EB:62:E4:D8
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584AC5AB8E5E81EA73054A8B7380
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/e76770ae-17b0-31ab-a319-b0f928c378b0.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     14813
IP address blocks:        69.73.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:8e:5e:81:ea:73:05:4a:8b:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=1a0afedd-41e9-4a4a-b423-f179f5ba4d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b6:f9:02:b6:d8:02:45:59:58:6e:e9:4b:06:
                    ce:0a:ee:11:0c:14:f3:d9:b4:de:32:c3:d7:a2:24:
                    1c:f7:d5:92:e6:e8:b9:ff:f1:58:37:aa:11:a1:c9:
                    93:5f:b4:6d:3a:7b:cb:c1:3e:9f:52:98:fe:a6:31:
                    b3:86:c3:69:7f:10:22:dc:36:e4:dc:f0:16:26:13:
                    4b:3f:f7:d9:ad:61:c1:fc:6f:98:e7:06:68:d6:73:
                    7a:c0:14:92:d4:c2:54:cd:c5:04:0b:60:05:28:da:
                    9d:71:a3:c0:ee:44:4c:b6:4d:d8:ea:04:99:62:0f:
                    65:d9:b2:1e:33:76:9a:57:e9:c6:69:b6:ec:80:25:
                    ee:1a:0c:f0:f2:4d:6f:f5:e2:5a:e6:91:1b:1e:82:
                    cc:cf:a2:24:94:9d:92:3b:63:a4:f9:aa:87:fb:08:
                    c4:41:06:f9:59:ca:11:af:01:10:ca:ba:59:6f:a8:
                    10:3e:a8:4d:20:b6:f3:8c:63:6e:0d:7e:a6:8f:03:
                    f4:33:38:c1:f0:30:24:04:c9:6b:e4:b2:da:35:47:
                    2e:3a:49:54:42:97:c7:22:6e:cb:32:10:52:d6:e8:
                    5d:24:bd:f9:de:8e:5f:33:41:e1:eb:7f:08:91:e2:
                    81:c2:d7:d6:66:32:ac:1f:6a:fd:a3:87:66:7a:06:
                    cd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D0:08:CE:0C:2C:E2:10:0E:77:65:A2:93:E1:12:1D:EB:62:E4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/e76770ae-17b0-31ab-a319-b0f928c378b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:fc:58:1b:9a:f5:2e:02:25:76:d5:4b:02:84:ad:9c:29:66:
         51:aa:f8:e9:58:60:b7:e0:39:20:c6:cd:06:59:51:b0:63:43:
         74:3f:1f:cb:10:d6:21:2a:d3:86:24:6f:5d:f8:76:94:78:aa:
         e9:8d:94:93:5e:9a:92:97:9c:cf:06:a4:f8:3b:53:8d:09:88:
         c0:41:c6:3f:8e:a7:48:93:e7:40:27:a9:21:d9:95:1a:32:2c:
         f0:8d:2e:20:0b:83:ac:d5:cc:ae:a8:e9:ba:09:0f:fc:5c:36:
         81:55:24:01:77:af:78:22:a9:be:f4:d7:ef:46:de:67:9a:73:
         69:0e:f0:2c:be:cb:17:2f:bb:55:d8:96:27:ec:34:0d:b9:83:
         63:e7:69:81:e0:84:02:a2:17:7e:d5:10:5b:85:6c:1e:5b:b9:
         c7:e3:44:f9:3b:c1:77:c7:bc:40:0c:86:3c:ae:5a:53:0e:56:
         11:be:66:23:48:83:4b:c9:5b:be:4d:46:f0:96:f4:2b:7a:56:
         fb:7a:e1:84:7f:b5:0c:1f:28:82:60:ed:0d:ed:62:f7:d4:39:
         2f:72:cb:65:06:71:4a:b6:c5:f0:5d:4f:25:82:44:60:8d:0a:
         6c:b9:ed:95:b9:c4:7d:15:ad:36:8c:4d:1b:e7:5f:24:1e:ab:
         1b:f0:d2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:35:41 2025 by rpki-client