Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b35b1689-8578-3845-9755-094dce1b792b.roa
File:                     b35b1689-8578-3845-9755-094dce1b792b.roa (raw, json)
Hash identifier:          1CQvlnYy/7bZ+UmGsrXGeLK4C8Dzp2RLmxvEu0xFAjQ=
Subject key identifier:   6D:D9:43:4A:F8:3A:5A:B0:57:4E:CF:B4:33:98:DC:4D:13:E2:F3:E4
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584A00DAB96EC3B1AF7E85DA8280
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b35b1689-8578-3845-9755-094dce1b792b.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     30104
IP address blocks:        69.74.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b9:6e:c3:b1:af:7e:85:da:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=c9f6af13-893e-4b6b-aa45-6697e41d21e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:30:23:17:63:e3:04:63:5d:d6:1f:c1:56:
                    fe:fd:5c:b4:d4:7d:8d:9e:6a:a4:59:02:29:ce:a9:
                    4a:1c:8b:04:a0:71:4d:5f:69:25:17:03:2b:6e:0f:
                    43:71:fa:f4:48:c8:36:1b:09:ae:d8:45:af:ae:31:
                    d9:ca:16:c6:39:6f:59:47:f9:81:fa:f4:74:bf:d8:
                    00:c9:92:e9:10:ab:b3:1a:d5:66:2a:59:47:94:2a:
                    71:71:cc:24:0f:93:55:3e:bb:b4:f1:b2:e8:b2:63:
                    48:b6:e8:5b:72:90:5e:68:8f:1e:e7:1b:c6:63:b5:
                    48:a2:15:1b:4c:df:90:f3:df:f4:cd:66:0c:03:d8:
                    28:4e:dd:58:04:04:8d:c2:f9:4d:61:3c:ad:05:5a:
                    1a:dd:02:df:f8:66:13:ad:3d:05:85:45:48:02:df:
                    f1:a9:6d:f7:9a:46:56:ae:4c:07:39:7e:94:8c:ca:
                    7a:66:c2:ec:7f:bb:db:3d:20:ee:00:c8:88:7a:ef:
                    78:b0:d7:99:12:ea:56:89:9c:41:70:db:0d:ce:48:
                    3a:5e:03:23:24:01:60:7f:78:ee:c6:86:98:5d:67:
                    15:5a:72:09:6a:55:a7:54:5a:45:ff:54:dc:38:b1:
                    e1:d3:91:39:06:1a:54:fe:60:09:9a:c2:66:de:22:
                    d8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D9:43:4A:F8:3A:5A:B0:57:4E:CF:B4:33:98:DC:4D:13:E2:F3:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b35b1689-8578-3845-9755-094dce1b792b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:16:31:00:84:c1:0a:94:39:ba:40:5c:10:29:64:8d:c3:f5:
         49:ab:05:85:46:87:86:9d:bf:9a:bd:30:72:df:10:28:5d:93:
         cf:7c:40:1f:70:e3:2b:3f:f0:74:f0:85:0b:ed:cd:0e:ea:b3:
         64:f2:e9:e2:2d:9e:54:7a:8f:ff:a1:4b:1e:6d:55:8c:2b:f2:
         de:45:81:51:92:fd:67:8e:56:b7:ec:3a:b9:23:44:23:85:43:
         e3:ae:13:c9:ac:b8:e4:dc:7a:0d:56:49:9d:d7:f5:bb:81:4c:
         6f:1d:cc:70:7a:3e:50:1c:0a:55:e0:a7:16:16:02:dc:ee:9f:
         dd:c1:2c:ce:dc:1f:3e:a0:97:55:89:16:e7:e5:52:69:f9:47:
         b7:86:47:69:87:2f:3e:52:de:fc:c2:11:0a:c6:76:80:06:72:
         62:4e:3f:95:f1:da:8f:e3:7b:fc:01:89:82:fa:38:f8:fb:5f:
         b3:1e:71:4f:40:3e:f5:ed:c4:c0:ad:81:9a:f8:f6:da:6e:22:
         4b:82:f0:7c:90:44:4f:ee:ff:98:6a:75:bf:af:ff:01:92:6c:
         ed:d1:c4:76:7d:83:21:79:2d:eb:b5:d0:a8:64:27:71:66:2a:
         74:7c:40:78:5a:64:ef:5b:b0:e6:9f:8d:dd:47:0d:3b:51:43:
         2d:25:e9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:34:52 2025 by rpki-client