Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/8d83db7f-4341-3029-bd2b-8cc9c8c929d0.roa
File:                     8d83db7f-4341-3029-bd2b-8cc9c8c929d0.roa (raw, json)
Hash identifier:          hVEFiCxQOufZ9HvTruCouMLQyvYnhHAl78XxRMpkBiU=
Subject key identifier:   98:12:9D:C7:EF:C9:0F:6F:2F:A9:67:55:78:87:5F:6A:BC:56:8A:D7
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F43285849E2252869F4A2358AB7C1A200
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/8d83db7f-4341-3029-bd2b-8cc9c8c929d0.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     11269
IP address blocks:        69.17.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:28:69:f4:a2:35:8a:b7:c1:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=53a8502c-7fb4-49cd-a8a3-4806257eeec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:dd:64:d3:f5:2e:a8:f1:1c:ed:0d:39:63:
                    4c:70:8a:01:0a:53:13:00:6e:97:e2:0d:fa:62:80:
                    42:8a:50:a6:98:e4:ed:08:74:23:f4:d4:25:d5:80:
                    93:62:20:b6:17:5a:89:ba:13:c1:fb:17:18:2f:b8:
                    dd:68:e0:38:50:df:ce:a2:11:75:a9:75:e4:48:fb:
                    09:6c:d3:09:0d:46:b3:04:11:18:f0:58:a1:db:e0:
                    45:ca:dc:bd:c3:d4:04:ad:b5:55:70:e2:47:d8:5c:
                    2b:f8:67:c5:08:1d:12:5e:6a:b9:e3:86:dd:0c:b4:
                    07:71:60:f2:24:22:2a:96:61:c0:f0:73:5c:1e:e4:
                    d2:01:f2:ea:f6:a6:37:99:4d:6e:69:ca:94:3f:f0:
                    c8:fb:77:70:a2:d5:2e:08:12:74:5e:a4:93:ab:ec:
                    18:4e:f6:39:4f:88:cd:ee:38:1e:2d:b3:2d:cd:79:
                    4a:8c:05:57:e3:e4:a1:59:67:a3:fe:62:31:c3:04:
                    90:75:30:b5:ea:a7:aa:16:ba:1d:63:24:ce:10:c5:
                    bb:74:5f:43:36:68:56:8c:47:fd:21:75:f2:28:48:
                    7b:bf:a5:c7:fa:78:d4:32:95:b2:e0:4f:13:aa:c5:
                    24:fc:ed:55:99:b6:7b:bb:cf:5b:90:b7:ee:e4:8f:
                    13:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:12:9D:C7:EF:C9:0F:6F:2F:A9:67:55:78:87:5F:6A:BC:56:8A:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/8d83db7f-4341-3029-bd2b-8cc9c8c929d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:63:e6:a7:7f:75:8a:fa:a6:0c:15:cc:ee:3a:bf:d5:28:11:
         98:29:dd:46:ac:08:e8:ea:73:96:01:66:d4:3a:9c:4a:28:9e:
         a1:df:c0:e3:bc:7c:2c:bb:6b:18:b7:45:79:82:49:50:a5:bb:
         e7:ae:dc:46:2e:0b:8d:f7:fa:73:d2:b1:71:df:9e:dc:92:96:
         0f:49:3a:75:67:89:a4:db:9d:e2:ef:ff:cc:a0:32:23:6e:95:
         fd:a7:44:a2:ac:5f:e6:f2:a7:37:1b:9b:c2:07:ab:81:93:80:
         75:c8:1d:67:45:a1:0f:51:77:15:b4:0d:c6:4e:aa:95:19:da:
         ec:05:6a:83:41:c9:b8:93:7a:2e:00:2c:1d:8b:f7:d5:03:5c:
         d1:03:58:4b:09:27:89:90:a6:de:7e:ef:b6:3d:ae:b0:0a:58:
         ec:7f:99:34:59:48:14:d0:a0:f2:5a:f0:ce:32:f5:52:ee:94:
         ab:c4:6a:de:4f:d9:74:42:39:e2:fa:57:a1:31:b7:8e:bd:ac:
         33:d8:0e:51:2e:8b:bf:50:ef:76:ff:fd:06:05:bc:17:35:7b:
         12:c2:f6:2b:99:d3:79:d6:66:c6:27:10:a1:8a:ba:ee:6b:ab:
         2e:2f:29:9b:dc:86:32:81:0e:bd:31:aa:a0:24:33:a3:eb:50:
         b8:b3:ab:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:09:02 2025 by rpki-client