Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1bccb8f9-e6d9-316a-a866-cd6d8b5c8035.roa
File:                     1bccb8f9-e6d9-316a-a866-cd6d8b5c8035.roa (raw, json)
Hash identifier:          uZy9NsEQ+Ryl9lh/SlZ+yywbHyjeu6SZ1cGFVH7DPpI=
Subject key identifier:   E0:15:C4:64:C0:1F:84:9B:AB:A7:62:E6:34:4D:E2:ED:A1:68:7D:D8
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849B14A07BEB5876017A806D820
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1bccb8f9-e6d9-316a-a866-cd6d8b5c8035.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     13692
IP address blocks:        69.1.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:07:be:b5:87:60:17:a8:06:d8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=a485efd9-c003-46f7-afed-f62b2da1f7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:11:54:19:5b:7a:a9:08:ae:54:1b:b1:41:21:
                    77:18:97:5e:6f:92:c9:40:d4:60:ce:11:d0:62:1c:
                    40:92:3f:b4:7c:ee:53:78:d8:2c:99:49:17:52:37:
                    52:d6:32:52:3e:a5:a5:16:8a:55:44:fb:3f:fa:71:
                    f9:7d:d2:89:ba:8e:ad:ee:80:00:3b:b6:ca:49:61:
                    ec:e1:d7:e7:df:ab:ec:0e:08:cc:2b:cb:f6:c3:be:
                    f9:61:0f:d3:d7:62:24:3d:51:85:66:d0:08:40:68:
                    b4:40:6c:22:a1:7d:32:55:04:54:37:73:a5:d5:a7:
                    c6:dc:80:18:16:ed:2f:2b:9d:c4:5d:75:1e:86:ae:
                    7e:66:bc:35:ef:25:b3:ce:54:af:39:3e:71:c2:c6:
                    58:08:20:6e:7a:6b:4c:e2:5c:51:5e:c9:0d:37:38:
                    85:40:4e:3a:21:07:a4:7e:38:cf:f4:db:85:f6:35:
                    16:5d:a2:00:31:87:dc:7b:da:ee:cd:8c:75:3d:e3:
                    8d:41:53:ab:2b:0d:2e:cf:2f:c6:ae:bd:97:1d:e6:
                    a3:cc:24:e1:91:5c:2c:30:5e:7e:04:a1:5b:55:48:
                    0a:37:2e:35:63:3d:00:5c:8f:5e:c3:d0:7a:45:8d:
                    e0:92:60:ca:45:4e:3e:c7:c5:bd:5e:ac:49:39:14:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:15:C4:64:C0:1F:84:9B:AB:A7:62:E6:34:4D:E2:ED:A1:68:7D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1bccb8f9-e6d9-316a-a866-cd6d8b5c8035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:49:65:48:83:61:b3:ce:ad:12:0f:62:1b:8a:56:05:7c:5c:
         03:d6:e8:c2:9b:15:35:4d:02:3b:d6:6b:3f:1e:f8:4f:b3:58:
         2c:07:9e:cc:69:70:81:bf:10:03:8c:08:71:15:7f:a6:d1:7b:
         b1:df:ca:50:ec:f4:c3:7c:ef:06:93:13:76:ca:78:c8:40:6c:
         84:10:f8:6c:80:c8:7d:1b:44:53:0c:cf:9d:13:92:23:f0:19:
         7c:e2:5e:99:ca:24:d8:f3:dc:5c:82:35:cc:0f:be:45:ec:1e:
         f6:da:a1:be:c7:60:e9:dd:fc:c8:cc:e1:05:b1:3e:e1:16:65:
         66:48:b7:aa:5d:c3:6a:d3:ac:fb:24:85:13:be:fe:cb:74:44:
         09:48:91:b8:e9:f7:db:85:9b:31:c9:f6:46:de:4a:aa:98:36:
         39:64:df:88:23:71:3f:52:ee:19:48:a6:ad:8c:62:fc:2a:17:
         2c:ec:5c:bc:bc:a4:8f:9c:42:02:06:e1:b0:84:1c:b6:e4:7c:
         bd:cf:1e:30:86:be:e2:bc:d2:4b:88:eb:1b:aa:e3:20:e4:4b:
         e1:6e:73:71:dc:5e:3c:29:54:28:cc:86:99:9c:7d:52:d8:53:
         99:46:d0:58:1b:a8:32:f2:ba:9b:a0:5a:24:52:41:dd:f5:9d:
         45:73:07:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:42:51 2025 by rpki-client