Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa
File:                     c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa (raw, json)
Hash identifier:          RwmCBanQVsQ6/arnWBT5Y664gMMtg5XqeMD/ZlcWzpA=
Subject key identifier:   79:0C:4E:94:63:A3:00:8B:CC:96:A4:8B:8D:C0:FF:72:2D:57:B1:94
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F43285849E2252691C3C60F15F749D140
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     11260
IP address blocks:        173.252.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:26:91:c3:c6:0f:15:f7:49:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=ef36d6ee-460f-418d-83b4-f5c637fb268b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:aa:eb:0a:84:36:1f:f0:cb:f2:d5:d5:2f:
                    51:14:67:6c:a1:fd:fd:1e:09:dd:6b:c3:72:8f:1d:
                    3c:7c:1a:be:f0:39:bf:37:e2:18:2e:fb:7f:a2:ea:
                    e1:c0:15:db:cb:b1:06:68:00:3a:ce:5e:09:46:cf:
                    bd:45:c0:0f:cc:5d:22:33:d5:98:99:48:2d:c9:c0:
                    62:56:4a:72:98:28:c7:27:6a:11:15:01:9e:20:bc:
                    22:3e:75:22:99:c3:16:4e:75:b5:19:80:af:96:c4:
                    51:f5:ca:46:7b:c8:cf:a8:48:97:74:d2:7f:18:08:
                    73:eb:bc:56:4b:09:56:42:52:1e:b3:43:8d:29:4b:
                    98:ac:71:3f:0f:2e:33:60:bf:4c:af:91:01:7c:39:
                    9c:a6:5d:a6:4c:be:cc:48:89:54:80:a8:ae:0f:cb:
                    22:8a:4a:33:f0:cf:71:36:f2:ad:b6:70:2d:37:92:
                    1f:34:ef:5d:b8:13:e3:ad:17:c9:4b:47:8e:0e:ce:
                    f7:22:2f:8e:9b:15:e8:7c:ec:24:cf:96:08:45:eb:
                    4b:51:a6:02:fa:55:46:c1:41:a5:3d:5d:9f:ce:95:
                    00:6c:be:92:17:08:a5:d5:e9:0e:1d:ff:64:fa:1f:
                    ac:7b:47:85:3a:e7:11:c3:c7:c9:54:ef:6c:8f:b5:
                    9b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0C:4E:94:63:A3:00:8B:CC:96:A4:8B:8D:C0:FF:72:2D:57:B1:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.252.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:3d:14:12:aa:b0:62:a9:cd:49:e6:45:3a:f9:f1:bf:86:e6:
         e0:93:c8:90:fc:58:4a:0e:ce:4c:5a:ec:ab:97:e5:4c:f4:0c:
         00:3e:59:f2:c2:5f:7b:d8:90:44:e9:c6:e5:62:a8:c5:1d:6d:
         ac:b8:e7:6a:b4:3d:5e:44:c7:96:be:1b:c5:90:ba:da:68:b6:
         ce:6f:16:b4:4d:2c:c3:14:7d:23:53:a1:6a:91:a4:e1:c8:65:
         b4:c7:77:a4:5b:b4:fe:40:80:14:22:be:ff:db:ed:e4:5c:71:
         5e:00:37:e7:d1:34:50:e8:fe:f9:fd:a9:c5:9d:7a:8d:7c:96:
         29:84:cb:cf:8e:30:a7:d0:b7:c3:96:6c:ec:1c:67:37:d5:f4:
         01:db:65:fa:6b:ce:71:d5:9a:b0:73:25:ad:93:65:55:91:d4:
         75:c2:cf:0d:2e:a6:95:cf:75:a2:d2:20:d1:f1:80:9d:2f:48:
         23:05:14:4e:cd:65:88:b1:b8:89:0b:bf:f5:7d:2c:ad:d3:48:
         42:5c:ea:0f:f1:87:a3:d2:de:02:37:e5:22:0e:82:df:65:ab:
         c4:f7:42:4b:f8:43:4e:b4:54:97:9d:ee:e7:cc:e2:bf:c2:a3:
         7d:63:31:9b:f7:3a:d2:ea:8d:7b:de:15:28:6b:bd:bc:60:6f:
         fe:61:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:10:24 2025 by rpki-client