Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa
File:                     1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa (raw, json)
Hash identifier:          c1cejJ48xHgu4IjM2haCTC4mGxmHQ5ZTLeYMY2uArBk=
Subject key identifier:   0C:7E:9A:B2:2D:DA:C0:FB:0A:4D:62:BD:FD:4C:D2:EA:ED:10:E3:58
Certificate issuer:       /CN=6b72a822-0e8f-45f9-a612-463da7164bf3
Certificate serial:       010D0C9F4328584AECC149F3B875DF49ED1A0B00
Authority key identifier: 58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     174
IP address blocks:        69.54.244.0/22 maxlen: 22
                          69.54.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:49:f3:b8:75:df:49:ed:1a:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b72a822-0e8f-45f9-a612-463da7164bf3
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=7b27efa0-e368-4edf-85ff-45bf657560f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bf:6a:73:bb:a1:69:a5:2a:ac:c6:bd:d6:a4:
                    39:fe:1b:03:08:ce:55:6e:e4:ee:5a:d6:05:7c:92:
                    f1:a6:e2:01:d0:44:a0:52:88:8a:69:92:7b:81:d0:
                    f7:79:f0:2e:8f:11:fd:4d:54:f8:1e:99:51:d1:0e:
                    29:cc:62:72:6a:f5:82:5b:35:bf:8b:10:3e:7b:94:
                    07:a1:a7:88:87:14:90:b6:d1:7b:34:26:ce:a3:34:
                    8c:8e:04:e8:cf:b7:46:2c:cf:ad:8a:6c:25:14:26:
                    6c:63:ee:2c:8e:e7:da:08:87:df:03:9d:3c:52:8e:
                    78:90:b4:86:f5:81:0f:6c:a9:36:df:1a:0e:81:a0:
                    cf:f7:9e:9a:b8:49:e2:d8:e6:6b:1e:aa:02:e0:d3:
                    bb:4d:e2:15:ce:ba:ec:27:1e:05:75:24:45:c5:79:
                    cd:06:31:49:af:f9:3c:b0:ad:54:6c:0e:11:08:82:
                    db:4f:16:2b:46:39:da:63:b2:93:3b:ad:8a:c6:3b:
                    54:29:7b:8b:c2:b0:a7:8c:49:77:f4:4a:94:bf:bc:
                    66:ba:05:5b:98:4c:3d:0b:81:14:76:2b:85:5f:b1:
                    6b:b7:c4:f2:7a:86:a2:8d:29:df:f2:5d:27:55:8d:
                    bf:2a:c4:e4:2e:97:e2:02:08:cc:5a:ff:bc:d0:a3:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7E:9A:B2:2D:DA:C0:FB:0A:4D:62:BD:FD:4C:D2:EA:ED:10:E3:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl

            X509v3 Authority Key Identifier:
                keyid:58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.54.244.0/22
                  69.54.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:5b:54:f9:ba:a4:a8:73:20:61:d1:37:84:9c:55:de:58:ad:
         f2:11:2e:0a:29:cc:32:e0:d4:23:a7:33:32:c0:29:44:a0:ea:
         ce:03:97:33:1b:4f:48:4b:0d:63:c9:c2:58:8c:8a:18:a2:00:
         56:ae:1e:23:7a:71:c2:58:0b:48:a3:49:d6:b4:fc:29:0f:93:
         43:bd:eb:cc:d8:ad:3c:c6:37:ae:81:a3:5c:12:87:b8:0d:48:
         17:c7:c9:21:9d:d4:26:ca:df:2f:e0:48:ef:b2:e6:89:27:a0:
         0a:ca:90:c8:af:21:15:f8:f8:b1:12:0a:08:b5:65:ac:8f:e7:
         d2:00:06:c8:e6:fa:0f:d0:28:47:2c:1f:ed:da:d1:d2:8f:5c:
         ef:8d:2c:8f:1c:05:01:0c:f5:68:4d:b8:25:da:bc:56:0e:74:
         6f:7c:7c:0d:ff:0e:de:64:55:66:54:4c:af:43:05:fc:41:2b:
         ec:c9:13:84:d4:0a:e1:63:8b:7a:f6:3d:20:df:e9:86:68:49:
         e0:00:15:25:b6:77:f7:36:4e:fa:74:61:42:49:56:a4:b1:b9:
         e8:ee:10:3d:f0:7b:b8:16:58:1e:c0:eb:d5:87:a5:1b:32:bf:
         36:15:a3:83:d4:bc:59:83:76:11:86:3c:5a:a5:49:e7:87:41:
         60:9c:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:51 2025 by rpki-client