Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa
File:                     fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa (raw, json)
Hash identifier:          Ume/1q8NJAG65u6Ntqxf+eppoBdY4VQVHLnNo6cSW3E=
Subject key identifier:   4E:8A:ED:AE:A1:AA:83:28:91:BE:91:3A:10:08:DB:70:3D:E7:86:00
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F43285849E225268548EE4ACEDAAA0760
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     11260
IP address blocks:        173.237.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:26:85:48:ee:4a:ce:da:aa:07:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=86ab8d15-bf44-4d17-b0e1-4583e0884f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:d2:1a:a1:27:85:1b:d1:1a:07:2b:f7:ac:
                    b4:3d:e7:97:8c:41:ef:29:7a:5b:e1:84:02:26:1e:
                    61:90:00:50:34:ec:72:cc:93:89:90:94:8a:83:fa:
                    69:bf:e3:c4:2c:dd:1d:58:08:f0:ea:54:04:ec:9b:
                    cd:ec:07:d5:15:0b:c8:d3:95:ed:ac:dc:de:9b:4e:
                    a8:4b:fa:2f:ab:8c:5b:b1:8d:91:99:84:4a:6d:65:
                    8c:0d:6a:c0:d0:5e:89:de:9a:9c:15:c8:71:5a:f0:
                    ab:2a:37:85:47:b0:28:8b:ad:67:45:24:33:8b:bf:
                    38:d5:24:c8:6f:d4:de:a0:3c:f4:c6:b9:af:49:67:
                    36:0d:23:57:e8:21:7b:42:7a:71:3f:21:e8:8f:a3:
                    db:5f:81:37:08:ce:49:7b:c6:3e:84:56:be:95:ce:
                    ce:ce:e0:d3:ba:90:80:c3:b5:38:32:c8:54:8a:2c:
                    6d:25:59:e9:84:0a:b6:69:60:01:36:bf:33:5a:5b:
                    78:45:78:ca:18:34:df:0a:a6:7c:68:97:ca:30:90:
                    4e:46:db:16:be:6b:05:7d:ba:b3:2a:f6:ce:e4:56:
                    62:12:57:54:7c:c7:7e:3a:de:e8:66:ce:cb:e8:79:
                    5c:78:8a:85:70:8b:6c:2b:6d:a3:d3:67:bc:a4:9d:
                    4f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8A:ED:AE:A1:AA:83:28:91:BE:91:3A:10:08:DB:70:3D:E7:86:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.237.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:e8:cc:0c:47:e1:9b:d3:26:24:ce:24:7a:f6:59:e6:89:b1:
         58:de:78:07:0d:3a:60:b4:ae:45:4f:94:07:71:09:31:78:86:
         e3:73:bf:19:11:0f:94:67:aa:ac:9e:b1:05:7d:94:97:cf:cf:
         1b:ba:b7:ce:44:5b:7e:0a:38:e3:8f:c3:18:69:2f:e4:40:84:
         33:86:d5:6f:88:26:37:91:0c:3a:90:b7:39:ad:fe:e0:76:fd:
         d3:1e:01:22:74:72:27:69:26:1c:19:64:31:ae:3b:72:a9:9d:
         8f:db:2a:58:b2:04:94:43:71:cf:6f:43:82:f8:55:20:a0:d1:
         8d:b6:c0:82:1d:91:36:1b:6c:13:eb:0f:37:1c:92:44:f1:03:
         08:f1:ec:a2:ec:1e:22:3d:99:38:d3:dd:a2:21:41:a3:ad:a5:
         fa:c1:4f:0e:a4:fa:f6:d0:85:78:65:24:0b:2e:88:57:6c:70:
         14:da:8b:fe:f1:06:47:a6:0a:55:44:74:90:8a:de:e4:6f:ee:
         62:da:d5:db:b2:cb:e6:2b:85:6e:76:b1:2f:5d:75:c9:a6:02:
         7b:cc:67:0a:5c:65:39:fe:91:9b:8e:30:05:14:61:79:03:81:
         53:0a:7f:06:ab:2f:40:d6:4f:5e:9f:6b:c9:e7:cf:70:7c:a2:
         a6:0b:14:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:51:44 2025 by rpki-client