Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/68a76cc5-2955-3aea-b67d-b54d38cf20d7.roa
File:                     68a76cc5-2955-3aea-b67d-b54d38cf20d7.roa (raw, json)
Hash identifier:          PdYnop2Gb9C4Lf0f/xv0KpFk0b7ZvdmE/CaKIFdLcUQ=
Subject key identifier:   AF:91:2D:00:6C:15:FC:AE:A0:65:29:83:F1:A7:6A:D9:02:AA:35:65
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584A427586C83E169D7F47D99B80
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/68a76cc5-2955-3aea-b67d-b54d38cf20d7.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     27539
IP address blocks:        69.26.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:86:c8:3e:16:9d:7f:47:d9:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=36ed32b7-cefe-40d1-9e2e-f74776842918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:e5:62:08:b2:a7:42:81:58:f3:84:ca:92:
                    0f:e1:e2:c3:fd:26:48:2c:96:09:f9:3c:d2:15:a6:
                    27:0d:b0:ea:72:58:07:e3:9f:dc:42:68:24:99:34:
                    2b:1d:a7:a8:83:77:e0:3c:98:4b:55:75:83:f2:bb:
                    a9:51:04:5f:4a:27:23:ff:5f:0b:38:98:93:bb:e0:
                    64:3b:dd:8f:6d:e2:e3:ad:d1:18:e7:38:4c:be:59:
                    c3:d4:c8:6c:89:71:c0:98:c3:bc:cb:02:d5:77:3c:
                    62:4c:2f:16:c8:0b:c1:70:8a:dc:a0:d3:53:d6:39:
                    5a:00:08:20:7b:d8:f4:d9:a9:ab:5d:e3:9d:d7:3c:
                    10:38:17:ba:70:2a:b7:42:4f:12:79:67:2a:d8:e7:
                    be:e2:dd:f2:04:c1:c7:6f:89:53:b5:d8:6a:21:68:
                    ad:63:54:88:62:bf:61:c3:74:a1:61:b6:1d:57:98:
                    55:17:a1:d6:b8:5e:68:ab:a4:98:a0:31:7c:59:b4:
                    aa:9c:9e:2b:8a:5d:64:8f:e3:e8:d7:00:db:02:57:
                    0c:7b:4f:13:0a:57:9c:03:b3:f9:2c:02:98:ca:c9:
                    43:df:bc:48:2f:ff:e8:e2:81:47:8e:c1:8c:0c:02:
                    48:1b:f9:94:77:b9:82:7f:6f:3e:5f:16:d5:9c:9a:
                    c8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:91:2D:00:6C:15:FC:AE:A0:65:29:83:F1:A7:6A:D9:02:AA:35:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/68a76cc5-2955-3aea-b67d-b54d38cf20d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.26.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d0:66:aa:8f:19:93:ff:98:af:08:4c:23:9e:16:3a:3c:24:
         37:ae:ad:f7:af:ae:eb:86:21:38:eb:0b:3c:15:c7:bb:bf:65:
         a9:2c:11:22:56:bc:1a:52:ae:19:76:3d:21:3e:b6:ae:3d:73:
         49:f4:f3:3a:49:a0:0e:0a:67:48:42:f4:a0:ce:70:c3:a8:e6:
         f9:29:1d:9a:2d:3f:fa:ab:55:d1:10:9a:a4:37:58:c7:82:0c:
         94:28:54:2a:97:04:d2:c4:b6:e3:04:0f:e0:f1:e1:7e:50:56:
         91:1f:2e:ee:39:2d:6b:eb:3f:cb:b2:0e:c1:db:1a:81:88:2b:
         a3:a8:43:8a:4b:fc:79:86:59:7d:dd:e9:4b:f6:31:6d:8b:68:
         14:dd:d5:c2:51:6e:39:39:79:fa:a5:6c:2e:e3:d4:b1:a5:05:
         e4:53:68:a3:47:30:cb:79:b8:59:31:72:1a:f6:00:44:23:f0:
         ba:b8:be:6b:eb:f1:52:28:c0:65:24:7d:97:7e:ce:78:7a:4f:
         3a:2e:cc:90:ff:a4:70:78:5c:a4:72:f1:0f:27:80:63:fe:53:
         ea:ef:40:06:b4:13:5a:92:92:98:10:86:c2:52:b8:ff:ae:ab:
         b5:b3:20:63:83:dd:25:b4:be:3e:7c:38:a6:62:10:f9:9e:fd:
         a9:47:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:40:07 2025 by rpki-client