Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/6a07fc26-2b82-3138-aa44-7371826d063a.roa
File:                     6a07fc26-2b82-3138-aa44-7371826d063a.roa (raw, json)
Hash identifier:          dtSJ9jzHUm0Ztb2SouG8nrvQ66AXk5as0y6/APYoN1g=
Subject key identifier:   F4:87:50:A1:92:3C:E4:A5:B2:F3:9D:4D:CB:EC:A8:EA:7C:EE:97:1B
Certificate issuer:       /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial:       010D0C9F43285849B57A0AE22B0366895BA8E1C0
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/6a07fc26-2b82-3138-aa44-7371826d063a.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     33660
IP address blocks:        69.55.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:0a:e2:2b:03:66:89:5b:a8:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=655bdec6-c075-4df2-8612-69faff8694cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:54:a0:af:0b:68:4b:2f:69:05:eb:ba:25:7f:
                    d0:6d:e9:6b:e9:c3:7d:34:99:7e:e2:97:de:f2:48:
                    f9:c3:10:ad:eb:d3:c1:73:d1:ca:83:a5:fc:f2:3c:
                    6c:14:9c:67:a2:b6:ff:d1:63:93:d6:62:a1:3b:7a:
                    df:66:e6:8f:d7:d4:a2:7c:86:ec:71:c0:ed:f1:89:
                    ff:b0:3b:5c:1b:f8:29:b9:f0:ef:0e:36:59:37:73:
                    e4:7f:22:92:c2:78:f9:65:44:be:6a:9d:ef:76:47:
                    7d:0d:1f:e7:c1:5b:74:b5:e9:a4:90:58:6b:4b:db:
                    6e:2a:4c:45:3e:b3:fe:97:d5:58:c5:d9:94:1c:54:
                    45:c6:8e:a9:11:dd:0f:a1:dd:96:59:c5:a9:66:4a:
                    a6:26:e3:c5:4e:2b:59:23:d9:34:be:2f:e7:7e:e6:
                    03:79:c5:b0:58:85:bc:cd:8e:96:ab:0a:59:d7:91:
                    c4:e1:20:04:b4:a1:b3:d8:82:00:66:62:76:65:56:
                    88:01:87:f6:81:a2:32:89:8c:4b:f9:43:c3:c7:d5:
                    47:10:4f:18:fe:d9:7b:69:58:f8:7b:c8:5b:96:d6:
                    0a:83:6d:b3:18:91:8f:b6:85:0e:71:5a:b8:85:2c:
                    9d:f4:64:d2:79:8e:c1:c0:b6:51:18:8a:1b:6f:80:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:87:50:A1:92:3C:E4:A5:B2:F3:9D:4D:CB:EC:A8:EA:7C:EE:97:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/6a07fc26-2b82-3138-aa44-7371826d063a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl

            X509v3 Authority Key Identifier:
                keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:8b:b3:dc:8f:11:71:1b:f7:77:71:9c:05:8d:89:d5:13:3d:
         40:1e:c1:ce:f1:6a:9c:17:56:b5:e1:5f:41:57:2c:d5:cd:bc:
         7d:d1:ae:be:66:48:1b:76:fd:22:15:a6:e6:81:e7:f1:68:54:
         0a:54:5f:22:c7:7d:59:3c:41:bf:41:f4:1e:0d:d4:ff:b4:df:
         20:01:64:75:d1:65:2e:ab:c8:30:df:15:e5:bc:64:98:16:25:
         7d:8b:5c:dd:7b:26:8d:1e:85:d8:42:dc:fa:83:45:2d:66:f1:
         5b:5b:78:07:d0:21:42:ed:c6:8a:f5:ff:57:b5:0d:56:41:18:
         80:ec:27:ae:fe:a1:1d:94:d8:b0:70:45:ee:e9:c3:bf:dc:1f:
         f2:d0:e2:94:2c:2c:58:c1:74:1a:93:05:6f:ac:ee:f5:94:74:
         1b:b8:40:df:29:0b:2a:d6:c0:21:17:f0:db:0f:89:ee:a6:7a:
         91:df:fe:1f:39:8d:82:2f:89:f4:bf:c7:2d:e4:15:bd:68:4d:
         57:c5:a0:a1:77:4e:b7:34:d2:c8:b4:7e:f9:ae:c7:d7:6b:fd:
         34:c8:f9:b6:eb:2e:50:e6:66:c9:c1:08:21:ae:08:7d:c0:7f:
         cc:7d:e0:b9:5f:a6:cd:08:3a:09:e3:d0:16:01:05:88:5e:cf:
         5d:ae:ba:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:28:02 2025 by rpki-client