Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa
File:                     4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa (raw, json)
Hash identifier:          Zed2T9JH3j7zicwrw/tyvLkdnpvgUR1IVtmiCSVmLeQ=
Subject key identifier:   5D:8A:04:60:91:FA:40:D7:E0:EE:F6:35:1F:50:AD:32:E6:D6:0C:43
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584A2ABAD9870B359A7D26768600
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     13414
IP address blocks:        209.237.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:d9:87:0b:35:9a:7d:26:76:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=98e82d29-a38c-486a-8d00-00274e231d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:9d:6c:31:2e:3a:65:dd:46:f7:5f:ac:b4:
                    13:ff:00:b4:ac:99:33:33:91:8f:df:e7:68:a7:11:
                    3b:60:71:08:74:e6:a5:9d:40:33:21:93:61:38:92:
                    62:31:df:23:fd:9f:af:be:2d:fa:c2:59:4d:5a:e9:
                    a5:2f:a7:75:d1:14:a0:cc:2e:2a:83:17:53:b2:1e:
                    ad:43:c9:3a:fd:f9:11:52:52:c6:a8:61:b5:06:3d:
                    47:86:67:67:ac:79:bd:6f:2d:b1:b3:bd:74:52:75:
                    d0:eb:60:a6:cd:e9:6e:de:6d:0f:8b:11:ef:c9:a7:
                    84:35:77:07:dd:8f:54:ea:22:f3:2e:d6:33:15:ee:
                    dc:07:16:90:37:c8:e9:ac:b8:1a:40:91:f7:52:60:
                    5d:d7:8a:cc:0f:e1:75:ba:fa:62:fb:70:95:48:ec:
                    21:a2:96:3f:1f:21:3f:5d:20:62:0e:37:56:cb:e4:
                    6d:3d:57:ae:9e:2a:21:93:a6:9f:b2:5d:8a:bf:06:
                    6c:d2:af:3f:37:be:b0:3f:a1:43:26:69:a3:4b:c0:
                    35:58:ab:14:88:62:58:61:0e:47:63:46:d0:1c:43:
                    32:64:54:39:4f:ef:21:0e:91:7c:0c:18:1a:7b:6f:
                    b0:4a:96:c0:4c:3c:98:79:2d:1b:7d:0e:68:b5:c2:
                    18:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8A:04:60:91:FA:40:D7:E0:EE:F6:35:1F:50:AD:32:E6:D6:0C:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/4a7c1d4e-a494-3dad-add8-04d5a361ba46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:fd:c6:0b:76:88:8a:f2:0d:5f:e7:5e:35:07:bd:a4:7c:df:
         d9:39:23:80:51:a6:ba:0d:38:14:a5:cb:cf:e0:9b:91:a5:c9:
         c8:ed:ab:10:3b:08:50:90:f1:d4:82:2a:18:a5:22:b8:fe:3e:
         85:2c:6d:07:b8:75:d1:93:f5:3b:36:71:b1:54:a9:e1:e3:05:
         43:c6:10:e1:da:76:70:6a:d8:13:ee:49:97:73:94:b3:02:82:
         0f:89:e1:21:71:97:db:9f:7d:bd:c6:7b:3a:c7:40:51:bb:de:
         92:49:40:63:67:5b:7a:68:7f:1f:8f:5b:93:06:a4:f7:9e:6c:
         e8:bf:7b:b0:da:27:ad:6e:bc:24:dd:cb:0f:d4:b6:c1:92:a6:
         96:1f:db:e9:73:16:f7:82:86:dc:f1:f5:e3:b2:e5:72:2d:75:
         11:52:e8:d3:f8:7d:f1:e4:7f:c2:82:09:47:08:88:e0:b3:a8:
         00:2e:dd:4d:7c:f9:90:4f:84:d8:06:90:57:d9:06:dc:8c:e4:
         19:d9:6c:1b:1c:ae:f7:cb:14:b7:60:46:92:20:b2:a2:eb:92:
         44:58:83:f2:9d:6a:9e:80:18:8e:69:7e:28:ff:c7:e1:b0:f9:
         81:dd:2e:79:12:a7:6e:d0:15:c8:5b:ef:c3:11:58:a1:10:5e:
         54:2d:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:24:09 2025 by rpki-client