Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/25ef63cc-bc42-34d0-8698-21d997cad7c2.roa
File:                     25ef63cc-bc42-34d0-8698-21d997cad7c2.roa (raw, json)
Hash identifier:          w+HzFr3Kr8UTJfjZQUN5CDwm95Re5elEQ73zeH/q9uY=
Subject key identifier:   24:9D:60:0F:2F:BA:EC:FB:4C:83:B0:12:4B:27:19:19:B9:59:34:E5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A4A3A90B779D16335F3F2C080
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/25ef63cc-bc42-34d0-8698-21d997cad7c2.roa
Signing time:             Mon 23 Jun 2025 19:48:35 +0000
ROA not before:           Mon 23 Jun 2025 19:48:35 +0000
ROA not after:            Sun 21 Sep 2025 19:48:35 +0000
asID:                     20001
IP address blocks:        69.58.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:3a:90:b7:79:d1:63:35:f3:f2:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 19:48:35 2025 GMT
            Not After : Sep 21 19:48:35 2025 GMT
        Subject: CN=4edd7ebc-a84a-4a2a-9a91-f0c4acf5d0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:29:f8:26:34:ff:8c:db:8f:0c:3e:c5:27:
                    41:9f:84:51:57:90:17:b8:32:40:47:b4:3c:3b:fe:
                    49:35:d7:b3:a3:38:65:2e:87:e2:ab:fc:5e:97:59:
                    55:16:e4:e8:33:6c:b5:b3:b3:a2:d1:63:f1:e3:f2:
                    34:b7:b1:1d:70:3a:1b:2c:2f:b1:19:9f:93:d6:93:
                    d7:66:e1:a8:ff:11:6f:75:1f:f7:de:3e:23:12:fa:
                    5f:79:4f:75:d2:8f:81:bd:5d:59:1b:92:1d:b0:45:
                    25:53:0f:9c:f7:0a:b4:dd:40:95:6d:81:23:46:96:
                    0e:1e:49:7f:93:fd:22:71:ba:bd:27:7d:56:30:78:
                    b8:e7:28:01:06:94:73:90:96:71:ed:f8:80:3c:b7:
                    1b:1b:79:63:ee:e1:66:af:7e:d3:23:fb:24:4b:33:
                    3e:bf:3e:2d:e6:3d:3e:6f:ac:3a:bf:b0:67:7f:1c:
                    d7:f9:24:05:4b:3a:73:c1:fc:20:b8:fa:92:60:c4:
                    b8:fc:af:27:cb:8c:79:d3:67:07:c6:f3:55:2f:2e:
                    51:8b:fa:5f:71:7a:b3:f9:f0:f2:f9:89:cb:0f:0e:
                    51:76:06:ac:09:8e:75:11:49:cc:44:bb:c5:fc:fd:
                    33:ac:45:b5:bb:a3:46:a9:a6:fb:f1:5a:99:2d:ad:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9D:60:0F:2F:BA:EC:FB:4C:83:B0:12:4B:27:19:19:B9:59:34:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/25ef63cc-bc42-34d0-8698-21d997cad7c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:73:e8:fc:74:a9:1a:0a:d2:11:39:89:4c:66:51:a3:fe:7e:
         ed:7b:b9:ad:ad:be:c2:13:de:77:9f:13:4f:b2:c7:76:af:da:
         76:c1:61:33:9e:d5:7b:82:31:de:3c:0d:4c:5d:54:a5:51:2e:
         6e:d6:15:3c:e6:81:d1:ed:3f:f5:6a:33:16:ac:d8:08:03:e6:
         87:7f:38:40:12:6f:a7:02:46:29:ac:8f:2f:b7:0c:29:e9:34:
         3c:f9:d8:98:0d:f1:b1:14:af:d4:31:f2:5c:2d:33:c7:96:43:
         6e:01:e6:5e:e1:6c:cb:00:6a:c8:49:73:ae:53:03:8e:a8:70:
         ef:d2:72:d2:24:79:59:14:a6:87:d1:b4:5e:8c:11:d9:9d:24:
         10:b9:92:64:4e:bd:34:6a:fb:33:e3:6f:18:0c:f6:05:d1:7f:
         83:49:e4:20:7c:9e:15:80:55:05:ac:20:a2:55:2d:05:e1:dc:
         4e:82:09:bf:08:e4:9b:42:69:1e:d4:0b:01:42:3c:9a:3a:5b:
         f8:fe:e8:9a:38:f6:75:27:42:a6:c9:55:eb:61:d0:73:80:de:
         da:bb:1e:19:9f:f7:36:55:7a:33:59:2f:da:df:7b:b0:a4:51:
         34:dd:8a:54:d9:dc:57:74:7b:27:a0:dc:3a:61:27:5d:5c:2c:
         c3:ab:7a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:15:47 2025 by rpki-client