Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/29db5299-ae20-3cbd-85ad-8843897ba2a8.roa
File:                     29db5299-ae20-3cbd-85ad-8843897ba2a8.roa (raw, json)
Hash identifier:          //G64prnIcWOE0pNIXGFWhJGHXcDMx/oDs0wUfqkkkw=
Subject key identifier:   26:9A:3D:60:BB:AE:85:4C:57:2A:EF:23:38:87:4A:25:CA:26:C1:08
Certificate issuer:       /CN=69df89b1-6446-4f76-b802-330eeb5819c6
Certificate serial:       010D0C9F4328584AF521491142D22AED264BDE80
Authority key identifier: 3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/29db5299-ae20-3cbd-85ad-8843897ba2a8.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     1706
IP address blocks:        192.12.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:49:11:42:d2:2a:ed:26:4b:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69df89b1-6446-4f76-b802-330eeb5819c6
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=f4f4945a-2193-4be9-9b6b-5e0b5fc89049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:39:96:87:c3:17:9b:9c:55:b0:a1:0e:86:
                    a9:37:53:71:be:2f:a0:d2:4c:c6:66:7d:8e:19:f3:
                    fb:91:54:97:60:d5:1f:c5:4e:f9:21:16:57:07:53:
                    35:3b:cc:ab:cf:05:9d:50:07:8d:5d:6f:73:44:db:
                    70:fc:00:0a:f3:e2:96:0b:ff:3f:93:e6:6c:1c:c5:
                    01:75:76:cc:5f:7b:1c:92:ca:33:7d:a9:cd:16:e5:
                    d1:9e:6f:05:c9:c2:33:45:df:d5:12:5d:0d:44:ef:
                    13:a2:1a:e6:5e:82:d7:e3:f5:aa:6a:d6:75:12:e4:
                    e8:99:f9:55:25:3e:52:d7:45:07:95:ee:a4:17:b0:
                    b9:da:3e:52:b8:05:f1:9c:89:ef:77:d9:fa:dc:7a:
                    2d:e5:97:4e:ab:de:2b:83:ff:81:5e:10:7e:9b:c9:
                    1c:af:35:3b:12:93:93:b4:f7:d8:81:a2:75:33:cf:
                    82:82:ed:07:22:53:d8:8b:89:68:bf:53:3b:05:c1:
                    ed:24:9c:fa:a3:b2:3a:da:89:2a:d2:c3:b7:0f:ea:
                    81:75:19:23:d9:cb:89:5f:96:69:ba:99:a6:16:f8:
                    f6:90:53:18:d5:0c:27:f5:06:cd:67:e3:ee:fa:66:
                    01:7b:be:d0:bf:57:77:01:bb:e4:7b:e1:18:97:7a:
                    d9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9A:3D:60:BB:AE:85:4C:57:2A:EF:23:38:87:4A:25:CA:26:C1:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/29db5299-ae20-3cbd-85ad-8843897ba2a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:46:1a:6b:84:91:54:fe:3e:10:4c:3a:4a:2f:de:dd:78:b0:
         11:79:b5:60:14:48:b1:de:a6:8b:9b:1d:fd:c0:a2:40:a9:16:
         c0:6f:50:68:f7:11:0e:68:8c:b4:c2:d9:17:fc:6b:20:c0:3c:
         c1:e9:6d:0c:55:25:9c:4f:24:60:96:7d:85:5f:c4:f5:f9:b5:
         c8:2a:f0:50:ad:86:26:f0:da:bf:5d:a1:80:2a:ea:e1:57:6c:
         f9:4b:28:33:19:3e:16:53:9d:c9:7d:39:74:5a:b9:59:3d:7b:
         99:be:86:b1:c6:32:e4:55:c8:92:4b:41:8d:7d:19:30:0a:06:
         0d:1f:28:67:78:23:79:d7:93:1e:c7:6d:30:70:16:f2:92:cb:
         51:5d:bd:6c:e2:a3:af:88:d3:ac:b2:9b:8a:13:f8:d0:80:5d:
         a6:1d:35:e3:0a:fd:cb:20:95:ce:ae:6a:dd:ec:50:35:4f:6b:
         bd:b6:b1:72:a4:7d:6d:f5:aa:18:1a:a8:e4:3d:83:a7:73:1e:
         97:ad:e8:bf:7c:27:fb:95:8b:08:36:18:2c:fb:71:38:36:e5:
         6a:9d:48:ad:f8:79:46:6b:71:d3:99:f0:a5:0d:f0:f3:61:08:
         30:71:c0:c0:10:36:13:f6:0a:44:12:0a:d5:00:a1:f5:25:90:
         6b:3b:ec:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:25:08 2025 by rpki-client