Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/b40d2ab7-c882-34d6-9ee6-0ec5cf503a4e.roa
File:                     b40d2ab7-c882-34d6-9ee6-0ec5cf503a4e.roa (raw, json)
Hash identifier:          yxtQUu3JNgIAEj+ATF+cPEHKGTYcpHkBR4iOeCmuK4o=
Subject key identifier:   F2:56:24:10:55:55:2D:47:89:9C:DD:58:62:15:13:C7:AF:B2:44:66
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584A4275869E7A2E9C4C48CCA0C0
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/b40d2ab7-c882-34d6-9ee6-0ec5cf503a4e.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     27539
IP address blocks:        69.26.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:86:9e:7a:2e:9c:4c:48:cc:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=27ca7f99-5d1e-4e36-a516-0655c0300840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:3a:8b:4a:ce:7f:cf:de:12:22:d3:27:67:
                    6a:42:74:c7:93:b4:c6:a4:26:91:4c:16:99:52:c1:
                    67:5b:91:07:e6:fc:02:4b:55:0a:92:3f:75:ed:1a:
                    cf:5c:d8:98:13:53:08:f3:aa:c0:23:be:00:7e:be:
                    2e:a9:3c:e7:13:95:5f:a6:7c:d4:6a:55:19:16:d4:
                    d3:69:17:16:fc:4c:54:fa:1e:19:62:55:4b:fd:c0:
                    39:1c:f4:13:21:7f:0d:e1:67:72:ed:59:6b:9c:73:
                    69:a2:47:c2:e7:47:a4:70:4b:cb:6f:82:03:32:b1:
                    c1:be:eb:6d:50:f7:64:aa:0d:2c:16:f7:ef:d4:a0:
                    25:67:75:6b:7c:63:21:cf:77:b8:5e:98:bd:74:3d:
                    af:20:00:61:ff:e8:98:c3:9b:94:ff:69:a3:33:7e:
                    e1:2f:21:8b:5b:a3:8d:1f:07:bd:f8:28:68:8d:07:
                    8a:ee:ec:84:fc:46:8e:81:d5:41:69:83:c1:5c:0a:
                    55:23:2b:7f:b7:47:a5:10:11:75:d8:9d:c0:46:b2:
                    14:bd:e8:52:c4:6e:e6:6f:c4:e1:0d:9e:fe:57:95:
                    ca:8d:68:33:6a:0b:6c:5e:1a:61:c4:3c:33:92:7c:
                    0d:99:ab:8b:de:76:14:17:b5:89:c9:c1:ff:cb:1d:
                    1a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:56:24:10:55:55:2D:47:89:9C:DD:58:62:15:13:C7:AF:B2:44:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/b40d2ab7-c882-34d6-9ee6-0ec5cf503a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.26.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c5:d5:34:6d:27:91:76:b6:05:f0:18:97:01:de:39:21:64:
         c6:e1:29:83:e2:c9:0d:35:48:6d:60:34:85:3b:5d:46:9f:f3:
         48:39:a9:5a:dc:f8:e6:2d:16:79:cd:a7:a0:cc:a9:4f:e1:cc:
         08:93:6e:3c:08:61:9c:2e:bf:b6:be:78:2e:f9:c8:52:e2:29:
         3b:84:85:49:5f:14:b3:61:a7:e2:bf:0d:b1:08:13:dd:34:e5:
         a5:f9:1e:6d:a9:4f:ed:58:0a:8c:e3:2c:07:4a:b0:47:72:60:
         05:c8:96:5f:1a:6c:57:86:8b:3c:de:4d:a1:86:e6:f2:43:8d:
         8b:c2:a6:b1:88:88:52:03:7a:bd:4a:c6:5f:6a:e8:40:b7:ac:
         fc:47:da:cf:29:4c:9e:af:dd:4e:46:c4:27:cc:77:76:be:8e:
         16:33:a7:e9:f5:52:4e:b7:6d:36:b6:7f:b1:91:28:c0:24:70:
         9e:f3:a7:3b:8a:86:ef:8f:cf:4f:68:e0:a6:c7:67:79:b1:8d:
         79:bf:97:ad:6f:cf:32:5c:08:8f:d5:7f:5a:45:b8:a5:47:c2:
         09:37:85:f7:9a:eb:2c:f4:28:3e:30:50:2a:5f:61:1a:05:bf:
         6a:6d:22:d1:de:be:f7:c2:a9:ac:33:53:bb:5d:38:a1:70:aa:
         c4:49:9f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:35:01 2025 by rpki-client