Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa
File:                     cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa (raw, json)
Hash identifier:          XTB77Nwid700peFq7RNyUJomsUdW5EeioZczyadpNOM=
Subject key identifier:   AA:CD:0B:BE:6D:0E:A7:71:52:C9:9F:7E:39:10:3D:05:DE:BC:16:39
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584AC2E0DE2E5C2086A52D20A200
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     11260
IP address blocks:        69.17.201.0/24 maxlen: 24
                          69.17.219.0/24 maxlen: 24
                          69.17.223.0/24 maxlen: 24
                          199.193.230.0/24 maxlen: 24
                          199.193.231.0/24 maxlen: 24
                          207.2.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:de:2e:5c:20:86:a5:2d:20:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=dce82b5d-b7ac-48ff-a0c5-870df88117ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:59:22:25:a8:9c:b5:16:d4:cd:3e:e7:c1:94:
                    fa:c6:ce:97:dc:f0:d3:3d:0d:98:1f:d9:00:4e:d0:
                    0b:05:e4:5d:8b:7c:57:c3:98:48:09:87:c0:aa:14:
                    b5:53:5e:4d:d0:17:2f:c0:ba:f9:2c:83:a1:3e:f4:
                    d8:95:18:e4:81:b7:8c:a8:8d:f5:6a:6f:b1:21:00:
                    03:e6:0d:c9:06:84:3c:0d:50:20:d2:9e:7a:ea:9b:
                    a8:f2:b7:ba:dc:70:92:7b:60:63:4f:23:01:8d:05:
                    89:36:60:53:b3:e2:a6:e0:c1:92:46:3d:73:59:ef:
                    25:e4:62:8a:ca:b5:90:96:eb:77:93:31:fe:88:d6:
                    ed:ed:52:61:a7:66:ae:c0:a4:33:37:93:3a:99:34:
                    d5:83:84:52:0f:58:09:81:ed:00:f5:07:aa:d6:a2:
                    7a:53:74:0f:08:5d:22:1b:53:42:d7:e7:d9:87:30:
                    e9:6f:e0:50:a8:6f:16:dc:91:02:f2:01:ce:6d:4c:
                    7e:a6:3d:5e:2a:08:2c:83:b1:d3:db:45:b1:f3:0a:
                    89:22:a9:c9:3b:e1:e2:5e:20:d9:86:b5:a6:10:50:
                    fd:04:e8:d6:80:f9:ef:7f:0f:88:5d:18:16:c6:4a:
                    70:80:61:e7:41:c0:5b:2f:e6:f9:0e:b2:b4:cb:4a:
                    35:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CD:0B:BE:6D:0E:A7:71:52:C9:9F:7E:39:10:3D:05:DE:BC:16:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.201.0/24
                  69.17.219.0/24
                  69.17.223.0/24
                  199.193.230.0/23
                  207.2.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:57:9d:7b:c5:38:6a:8c:e3:51:9d:ba:0f:4e:82:0a:5c:4c:
         f6:c7:a0:0e:39:1c:10:81:9d:92:c7:9c:2a:b2:17:16:ae:37:
         22:ed:fe:a2:4f:c3:4a:34:be:65:0d:1f:1c:d8:40:e0:7f:32:
         05:6a:89:43:a1:0a:8b:23:3b:60:c9:31:ef:c5:cb:9b:9b:b0:
         41:d1:57:9e:61:98:1e:99:42:d0:80:28:81:63:40:45:23:32:
         4c:6a:f5:a6:38:dc:8a:7d:e2:1d:54:d3:17:0f:0e:5c:bc:47:
         d3:09:99:c9:e8:b6:69:de:0f:1c:49:f7:cd:5f:af:e3:00:a6:
         81:dd:d3:37:ae:e4:16:01:b2:15:9a:cd:2e:8f:2a:77:b1:85:
         2b:d8:24:00:28:25:31:21:be:dd:bc:b0:7c:52:5b:36:66:ca:
         7e:fa:8d:72:41:15:86:ad:48:5e:a4:35:e3:cd:08:e3:2a:31:
         7b:07:57:14:8b:49:f2:29:c6:7f:b7:6b:80:5e:c1:87:7b:14:
         d6:85:2d:b7:6c:0f:dd:43:52:cd:4c:2c:3c:0e:14:b4:b1:e4:
         03:17:2e:c3:32:4a:e6:c6:6f:cc:9e:b9:b9:8a:2d:f5:dd:42:
         df:28:ec:f6:6f:a9:41:5f:a4:1f:36:87:e3:14:9c:20:51:a1:
         61:ba:6c:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:30:39 2025 by rpki-client