Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/4a514b4a-2e45-3def-b73d-08af34648514.roa
File:                     4a514b4a-2e45-3def-b73d-08af34648514.roa (raw, json)
Hash identifier:          I9TwWRqxtwhkl8bDxoEtwQO2hZyJk8wxy51KvDjfzjk=
Subject key identifier:   4C:86:68:FD:D6:27:EF:13:EF:38:26:54:A2:FE:C4:C5:41:1D:FA:95
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584A58CB068D74452BFF02CE3A80
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/4a514b4a-2e45-3def-b73d-08af34648514.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     11620
IP address blocks:        207.173.128.0/20 maxlen: 20
                          209.210.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:06:8d:74:45:2b:ff:02:ce:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=819d2be2-12ee-42ec-8921-130aff8ac670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e5:37:a3:ce:05:d8:a5:d3:51:0a:2e:13:5f:
                    89:0f:40:cd:a5:c2:23:20:5f:9e:e8:da:f1:3a:86:
                    c6:1f:e4:cb:ef:f6:0a:e0:e7:7c:29:d8:26:9c:85:
                    59:6b:6a:25:f7:a5:06:39:7a:4d:1e:0c:bd:08:26:
                    28:60:19:de:1d:7e:fc:0f:82:20:7f:35:d2:fa:07:
                    b3:4b:34:e4:78:46:50:d5:ce:6e:b7:1b:60:e3:f1:
                    da:f3:9d:a7:25:ff:37:c4:c3:41:83:4b:be:10:3f:
                    b6:29:1a:e4:9e:5b:c5:62:29:b6:e6:6a:55:74:66:
                    da:a5:e2:f7:46:81:be:af:da:a6:4f:b0:c8:33:e5:
                    28:97:73:85:2a:95:a9:2d:d7:21:16:55:17:e4:61:
                    c7:ce:8e:a3:bb:a0:3f:52:71:6e:0f:8f:52:06:8f:
                    c7:77:fc:c7:42:b2:13:89:00:98:98:93:8a:48:0e:
                    54:36:7c:06:85:7d:97:7e:df:db:8b:3d:34:46:d6:
                    e0:84:90:bf:7b:59:b7:f2:df:0c:b6:4e:83:c0:63:
                    2b:b3:97:e5:a3:da:07:6a:95:ee:c9:0b:ea:f0:35:
                    87:7b:74:4f:ec:c1:b0:09:55:98:1f:a8:c3:0e:f2:
                    e3:23:4e:1d:2c:bf:ac:87:21:f2:23:c3:05:42:31:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:86:68:FD:D6:27:EF:13:EF:38:26:54:A2:FE:C4:C5:41:1D:FA:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/4a514b4a-2e45-3def-b73d-08af34648514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.173.128.0/20
                  209.210.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:36:72:6e:fc:54:37:f9:db:d3:9d:b4:07:30:92:82:12:17:
         0a:69:2b:da:fd:60:c0:37:88:a1:82:f4:b0:74:17:cf:5f:db:
         9c:30:8b:ea:4f:e3:b3:f0:0e:28:4e:a8:60:68:b9:f9:cf:0d:
         c7:23:c6:1c:f7:b6:bf:97:0f:29:f1:c1:69:96:44:41:02:ac:
         87:59:b1:f7:08:27:20:d6:a1:d9:c9:f7:1c:7b:b3:2b:35:f8:
         3d:08:92:db:fb:06:1e:21:0b:da:eb:22:32:a4:d7:fd:7f:8f:
         46:37:a5:c9:c9:b3:42:f4:22:39:5d:eb:e3:c0:77:11:a7:6f:
         42:8d:53:e8:c8:1e:e8:60:5d:ca:ae:c9:f3:3b:7e:5d:05:e3:
         cd:f0:81:5c:53:be:fd:68:d7:c4:a6:66:ba:b0:98:36:c2:e7:
         9e:c4:6e:37:c0:19:a5:8a:40:14:dc:ae:f7:e5:8a:aa:6f:eb:
         87:4d:51:6f:01:ec:08:6d:c7:86:c8:95:5c:0b:19:c2:5f:54:
         5b:51:5f:26:b2:76:d4:fa:14:27:d5:77:c4:4c:9b:ae:7d:4f:
         90:31:ab:59:b1:24:19:a4:3b:24:20:c2:6d:7d:23:95:cb:c7:
         32:d3:40:57:11:6a:fe:34:c6:09:60:89:b1:fb:00:c1:03:87:
         fe:95:d3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:21:16 2025 by rpki-client