Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/148fac5b-db30-374b-a428-f9d9c8a85496.roa
File:                     148fac5b-db30-374b-a428-f9d9c8a85496.roa (raw, json)
Hash identifier:          kVUTRz3/4IwbQ9XQoQhupErsv2/H9WZTY5W4RUHjxMY=
Subject key identifier:   25:2C:15:5B:69:2B:9B:7C:C0:65:B0:AF:E6:C5:A8:89:5A:54:60:49
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F43285849F44A54C7EEC64A858FAB5E00
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/148fac5b-db30-374b-a428-f9d9c8a85496.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     63023
IP address blocks:        69.42.213.0/24 maxlen: 24
                          186.190.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:54:c7:ee:c6:4a:85:8f:ab:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=010b0cb5-5001-42f8-88b6-1179626323fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:dc:46:4c:ed:77:68:b4:5d:9b:e3:ab:26:
                    d1:b6:ae:c5:bf:9e:05:8b:b6:26:62:e2:a6:42:57:
                    f2:e8:a1:c7:9c:14:bc:3c:2e:b5:be:c2:fa:f9:b8:
                    2a:10:22:ff:48:31:e8:5b:bf:9c:8d:10:e5:30:88:
                    13:06:c8:4b:4e:8c:61:31:5e:cd:cc:3a:ee:78:87:
                    1a:70:44:64:09:75:d6:36:9c:6c:d7:e5:cb:c4:db:
                    55:8b:5b:03:ab:07:1b:38:22:48:3d:eb:89:f3:2d:
                    60:b3:20:5f:22:a1:52:57:13:09:4f:b5:a7:ac:31:
                    74:5b:dd:cf:29:1c:4a:9a:7a:c5:24:6a:94:1e:64:
                    be:ce:28:7b:9b:d2:4e:e3:a8:01:1c:dc:de:f1:1d:
                    23:00:61:66:83:4f:4a:5c:d7:fe:0a:4e:34:33:89:
                    e7:10:65:3b:ef:81:a2:ec:22:12:cc:d6:b9:8f:37:
                    16:56:d1:2c:28:19:13:f9:80:77:95:7c:c6:50:04:
                    21:62:f7:eb:d8:92:d0:70:40:3b:52:d1:72:6e:cc:
                    10:37:1d:5c:08:78:b8:37:e4:c0:54:23:e1:a6:03:
                    4b:42:6f:ba:db:5f:a9:b3:09:74:af:6a:89:45:3b:
                    43:b2:e7:b0:1e:0b:f2:95:51:3a:17:10:6b:88:f3:
                    db:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2C:15:5B:69:2B:9B:7C:C0:65:B0:AF:E6:C5:A8:89:5A:54:60:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/148fac5b-db30-374b-a428-f9d9c8a85496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.213.0/24
                  186.190.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:0e:8c:80:b8:01:09:0d:cf:ce:51:d5:05:62:9a:f1:7e:07:
         59:45:ea:5a:dc:04:e7:44:ae:58:52:2c:c7:3f:a3:42:73:5a:
         ab:8e:5e:f1:59:92:a3:24:7c:e2:92:be:72:e2:ba:c3:9c:e2:
         ad:1d:61:ed:15:ab:81:f6:02:89:08:ec:27:40:85:38:e5:48:
         fc:fc:ff:1e:ce:51:86:d6:38:ee:12:8f:e6:9b:12:b2:85:8f:
         b7:fb:8c:83:34:44:1b:c4:f9:8d:2e:b1:67:e6:9c:10:c6:fe:
         f7:64:10:43:69:fe:79:1f:66:9a:0c:a6:af:e1:e3:aa:63:21:
         c0:dc:aa:e8:c7:ed:cb:8f:ac:0b:08:b1:b2:0e:53:bb:1e:36:
         01:05:4e:bf:13:88:88:d9:9b:b3:c2:68:65:76:35:36:4b:83:
         d3:69:e0:7c:59:77:6b:b1:80:08:53:28:7e:f0:c2:e8:da:9a:
         16:ef:21:6f:26:34:96:ab:cb:7f:6f:35:8e:e2:85:2c:71:b7:
         19:9d:73:19:38:a6:0a:a3:1a:36:be:51:f8:75:5f:45:70:96:
         0a:b6:2e:55:37:c0:10:d6:15:b7:ff:41:9c:7d:4e:a4:2f:f1:
         ac:c9:f3:4e:74:9a:b7:47:22:21:76:8d:07:6c:0a:f8:bc:3f:
         77:64:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:08:04 2025 by rpki-client