Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/550daf18-84b0-3f96-a399-ac2375fc6049.roa
File:                     550daf18-84b0-3f96-a399-ac2375fc6049.roa (raw, json)
Hash identifier:          X+1HfX+Wk5oD0CVKLjOdlmiZzHDtJr2EwqmnJ6nV3IE=
Subject key identifier:   41:0A:C3:93:C7:DD:37:54:9F:BD:E3:EA:00:7D:3B:37:62:E2:45:92
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285849D42FA308440F7CCB10309C00
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/550daf18-84b0-3f96-a399-ac2375fc6049.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     2386
IP address blocks:        69.51.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:a3:08:44:0f:7c:cb:10:30:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=d3beb941-056b-4c8c-9668-2de0331514fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:5d:29:93:16:1a:ab:a4:c4:26:68:26:aa:
                    20:da:b2:df:99:cc:57:4b:e0:d7:8f:9b:af:7b:c7:
                    ac:40:88:ea:ce:7e:b7:00:96:12:78:ef:a1:ae:11:
                    14:ed:dd:a9:0a:f9:06:5b:b1:d7:97:09:35:4b:5b:
                    37:0b:97:06:c9:86:22:3a:87:e1:f7:c5:e1:a1:05:
                    21:48:7c:56:c4:5b:58:16:8b:d4:99:19:41:8a:9b:
                    e9:df:10:2e:f9:bd:2f:16:5d:d3:67:6b:e4:e0:90:
                    1f:8a:af:ec:e8:a7:03:d7:8f:a5:cf:b1:7c:59:86:
                    21:1a:96:15:d1:c9:e4:8b:44:4e:ce:0c:f8:05:cc:
                    51:58:68:ea:6d:16:df:6c:96:5d:47:34:b1:af:01:
                    9c:49:d5:bd:8d:2b:56:bb:48:a5:9a:80:7b:39:2e:
                    a5:b3:29:f9:d0:51:fa:c8:56:cc:08:b4:50:c0:b4:
                    ed:b6:ba:90:25:72:87:e9:a7:e6:f7:75:fd:6d:23:
                    2e:a6:9c:98:73:07:b1:1a:57:27:95:c6:89:7f:19:
                    62:a2:7e:93:ae:43:39:92:07:55:91:1b:0c:01:e4:
                    82:68:a6:23:93:24:b7:38:c5:c8:d4:aa:e6:ea:c6:
                    89:e4:cc:3a:35:b5:c6:c5:47:a6:04:16:69:66:73:
                    5d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0A:C3:93:C7:DD:37:54:9F:BD:E3:EA:00:7D:3B:37:62:E2:45:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/550daf18-84b0-3f96-a399-ac2375fc6049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:4f:bc:29:23:7a:f7:29:f6:c9:ed:c6:f4:23:79:f7:fb:
         72:25:d1:de:3d:29:c3:4c:a2:d5:1c:72:aa:d5:37:f3:7f:7d:
         a8:c1:fb:95:18:27:22:0a:0f:63:5e:a0:51:56:92:b5:3f:b0:
         e9:83:6a:8d:5b:ca:3e:9c:cd:9b:e7:db:37:d3:e3:16:32:ad:
         48:af:9d:69:19:86:42:c0:63:ab:9e:d8:5b:08:cd:e8:50:9e:
         49:89:1e:62:b9:8f:49:88:18:55:3d:a6:4a:33:8a:70:1b:95:
         64:8f:78:6e:9b:9e:e8:74:19:c8:12:74:87:75:3f:44:bd:e2:
         89:4d:53:8e:64:54:69:b3:7c:45:79:12:f8:77:4f:6f:b4:46:
         17:2e:83:60:01:d7:b5:37:02:76:05:65:84:19:4d:69:18:80:
         8a:3d:8e:aa:ec:64:90:db:2a:2a:07:cc:2b:a3:28:bb:37:ab:
         24:5d:a5:95:76:43:0b:e9:65:ae:be:89:ca:57:50:1f:91:bb:
         6e:a8:8a:fd:18:ed:38:28:9b:c5:76:eb:bd:e8:44:14:66:94:
         c5:f0:c3:25:67:8f:82:f2:b0:2f:18:59:4d:b9:30:81:f1:f0:
         e4:93:9b:c5:45:6a:31:d5:17:83:94:35:61:ad:5d:04:57:a2:
         49:c4:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:32:02 2025 by rpki-client