Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/72490e2b-d9c4-3ddd-a82a-8ec002bfb10e.roa
File:                     72490e2b-d9c4-3ddd-a82a-8ec002bfb10e.roa (raw, json)
Hash identifier:          gt1//Ows+dZFF1hB3ADsh4snua7ugLHa3hrle4Mg29A=
Subject key identifier:   B8:FD:1F:32:56:20:A4:55:4D:01:8A:35:98:E8:7D:4E:15:9D:DE:7A
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584ACE0B9EC28D151274E4576B80
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/72490e2b-d9c4-3ddd-a82a-8ec002bfb10e.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     30059
IP address blocks:        69.61.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:9e:c2:8d:15:12:74:e4:57:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=f4b70881-b521-4c27-9740-9d39e2610593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bd:8a:40:cc:a4:dc:87:c1:53:1f:5d:d0:0e:
                    22:f4:d9:69:8b:13:a5:36:ac:0d:93:84:85:9b:09:
                    1e:eb:23:13:be:32:17:d2:3c:53:a1:2a:08:af:b6:
                    67:da:37:75:c8:35:c1:e9:31:0b:32:5e:7f:f5:98:
                    f5:04:16:07:36:c0:f4:82:11:52:ba:68:22:f2:01:
                    0b:87:a9:32:d8:ec:10:bf:82:91:e3:d4:fd:a8:86:
                    aa:98:a8:60:53:ad:a7:4e:7a:47:ed:56:16:f4:4f:
                    f0:71:46:df:33:e4:9b:83:44:70:c6:08:73:a3:1c:
                    7e:90:43:6a:5e:7a:b1:58:36:15:a9:82:98:7b:31:
                    ea:81:a1:42:46:ff:55:bb:7f:68:89:34:d8:a4:ee:
                    0c:03:e9:46:26:3f:95:ec:9a:5a:39:f1:02:5f:db:
                    0c:9a:29:c1:5b:be:e4:49:21:f3:75:ef:33:9c:ce:
                    bf:dd:dd:de:17:f6:f8:22:e6:55:35:fd:ec:78:f9:
                    7b:5f:33:0f:3d:45:97:65:26:5a:7b:a8:74:88:e7:
                    ab:b9:f7:b6:1e:85:12:55:f5:13:93:ea:1e:5f:57:
                    90:63:ff:bc:df:de:8b:9a:75:1e:80:e3:49:df:44:
                    36:92:0f:71:cf:a8:cb:e4:6e:06:34:6f:96:17:74:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FD:1F:32:56:20:A4:55:4D:01:8A:35:98:E8:7D:4E:15:9D:DE:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/72490e2b-d9c4-3ddd-a82a-8ec002bfb10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.61.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:9a:26:08:c2:77:95:7c:68:0c:ed:96:42:79:ef:df:22:6b:
         2f:7d:a8:fa:ef:eb:0c:15:6a:30:c4:e3:71:5b:d8:5f:b6:b0:
         29:67:0c:f3:72:25:4a:4c:2a:c9:52:d0:89:0a:85:e2:19:2b:
         d8:25:e1:70:44:58:77:99:a9:10:8e:e0:65:7e:37:39:8d:a7:
         11:ad:0b:83:05:7c:fc:9c:a1:c4:a0:03:03:88:12:43:9c:80:
         e7:15:5e:a6:88:84:72:c9:c4:46:58:66:e5:e6:dd:68:84:d0:
         5f:f0:0a:a2:e2:31:59:94:3d:81:98:78:11:af:3d:d0:1c:3d:
         9a:d7:8b:e7:c3:ed:25:4e:34:b0:65:ee:8c:08:06:e5:c7:bd:
         4a:c7:af:9f:4e:38:c4:22:6e:73:42:03:cf:e7:46:9b:ed:9c:
         ea:65:24:7d:e4:74:51:e6:b6:cb:2b:e1:1e:98:d0:33:0a:07:
         df:f5:99:f1:3c:26:88:28:8b:c5:76:f5:54:ef:09:1b:45:c2:
         5b:45:5a:fd:d9:34:95:94:31:39:1a:50:4a:c3:0b:12:50:94:
         ec:f1:59:2a:29:a3:40:f1:b2:4f:b1:80:90:f5:d8:d8:e1:61:
         d3:c4:d4:07:0f:72:89:07:0a:3a:3e:6c:b0:6c:0b:9e:39:ed:
         8e:0e:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:40:52 2025 by rpki-client