Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5c69fb2f-eb2e-3864-bb20-0eb70bfc673e.roa
File:                     5c69fb2f-eb2e-3864-bb20-0eb70bfc673e.roa (raw, json)
Hash identifier:          a1BCcYTrOgPzwjxJhtaYe2rZoNpIJL0k6gFU//E7dbg=
Subject key identifier:   E0:98:2F:B6:B9:ED:FE:1F:D9:0D:11:D8:06:9E:A9:51:B5:F1:38:F3
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584AC2E0EC52831CDE8983AEE540
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5c69fb2f-eb2e-3864-bb20-0eb70bfc673e.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     11260
IP address blocks:        24.222.0.0/16 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:ec:52:83:1c:de:89:83:ae:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=7e46c362-e0f7-418d-bb19-b8b0cce0959a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:22:05:76:8e:eb:c0:16:d4:f6:6d:e7:17:
                    f7:3c:19:e2:0e:c2:e0:c6:a4:4d:2b:18:ec:5d:06:
                    dc:ed:97:4c:5b:d4:e8:a8:a4:2c:ae:60:e9:42:69:
                    4c:da:b9:06:66:30:0f:dc:5c:ea:c4:1c:0a:7b:95:
                    84:c9:06:51:26:4e:e1:d0:8c:aa:6c:06:8f:72:13:
                    e9:64:f7:81:65:7b:40:4f:4e:58:4d:e0:34:b6:89:
                    42:ee:f6:32:0c:04:ea:61:eb:5d:1a:55:56:a6:04:
                    d0:22:5c:78:c1:bc:0c:f2:35:d4:c6:af:12:5c:50:
                    a0:cb:c1:e4:9c:40:a4:6a:6c:53:4c:b3:bd:52:7d:
                    35:2d:51:7b:01:3d:c5:38:9f:7e:b6:ae:ce:6c:fb:
                    90:20:94:64:93:7d:0c:a8:ca:e8:a4:6d:36:8b:c5:
                    90:9f:91:02:3f:ca:89:1b:66:fd:33:e0:b4:79:01:
                    8f:7c:e7:a7:ae:44:4a:37:e5:24:1c:33:04:81:35:
                    c9:03:2a:68:94:64:24:55:c7:ba:6e:81:8d:94:36:
                    34:a2:08:a0:17:9a:ac:e1:08:2d:f1:6f:89:a6:93:
                    be:09:03:10:0f:d4:a0:d0:d9:f3:c0:1b:8b:11:ee:
                    29:f2:03:f4:9a:26:5a:78:b6:eb:76:5c:93:1a:5f:
                    44:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:98:2F:B6:B9:ED:FE:1F:D9:0D:11:D8:06:9E:A9:51:B5:F1:38:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5c69fb2f-eb2e-3864-bb20-0eb70bfc673e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.222.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:78:ba:0a:cb:70:0d:4d:5d:e8:25:20:88:bb:be:d0:ab:d1:
         41:be:05:43:9b:ca:b7:f1:25:c3:75:25:9e:17:1a:9f:49:96:
         2c:33:f9:d9:9d:8b:fe:b0:7f:3a:91:46:82:fe:db:13:83:8d:
         1f:fb:99:51:64:69:59:ae:0e:87:ac:80:97:52:dd:89:ca:1a:
         f2:84:3b:bc:d6:a7:ff:2a:d0:cf:90:d4:9b:e6:7b:29:8b:c9:
         6d:94:a6:0e:b9:b3:82:2a:56:c5:fb:57:63:e8:77:33:06:ef:
         15:74:95:4b:fb:17:65:af:4a:c6:5f:af:e4:46:89:56:11:18:
         53:da:02:d6:94:31:c5:e5:00:4b:06:f6:73:e6:b8:c4:d9:f5:
         f3:52:25:9b:8b:4c:f8:dd:48:95:e5:2d:4d:4b:34:67:95:5b:
         30:65:8a:c7:dd:55:07:49:8e:8f:77:4e:53:c2:1c:16:e9:c6:
         9a:d5:f1:42:12:ee:d3:5c:eb:30:7d:12:6a:60:19:e8:f6:c4:
         ab:0a:c8:99:94:94:02:e1:a6:9c:da:77:0a:0e:ac:f2:7a:e5:
         3e:6d:4d:56:1b:b4:c5:93:50:ad:3c:45:33:ab:9c:a1:eb:d6:
         10:ca:35:9b:9c:13:75:04:ef:c9:35:9a:85:02:eb:89:f3:92:
         ec:25:8a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:22:15 2025 by rpki-client