Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/abef02f7-b1c4-3549-9f44-cd7183fdbbfc.roa
File:                     abef02f7-b1c4-3549-9f44-cd7183fdbbfc.roa (raw, json)
Hash identifier:          /dyqaqGTpcYrWpO5jUeSedanM1hMvV8wUs2EOuzH+uE=
Subject key identifier:   95:C7:C5:40:DC:C4:24:DD:EF:55:A5:9D:2B:C1:E8:C0:2F:7C:D8:49
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584AD3A10E0CD637B0000CEBD010
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/abef02f7-b1c4-3549-9f44-cd7183fdbbfc.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     19905
IP address blocks:        69.48.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:0e:0c:d6:37:b0:00:0c:eb:d0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=1996c436-cfc9-4fb0-bc04-eefc292f19ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:63:b8:a3:ee:27:50:16:29:ff:1c:10:fc:d1:
                    9e:b9:6e:77:93:38:51:61:bb:d0:3e:66:2f:73:2f:
                    6a:50:6d:0b:97:7f:d1:bb:6a:5c:f3:fc:bf:35:07:
                    4e:34:e5:e5:31:e1:62:6a:00:e6:18:27:2d:d2:7d:
                    f2:7f:06:c7:59:95:e2:c3:91:51:26:4e:98:e1:47:
                    76:d5:f7:e4:84:b7:05:a6:73:6a:1a:93:0a:0a:90:
                    72:3e:d1:5d:06:8b:4a:07:16:2f:a0:91:00:34:42:
                    12:c5:f3:fb:b3:04:bc:6b:24:20:3a:00:82:c2:4c:
                    17:65:d3:36:be:3a:33:15:75:e9:f5:03:bb:6b:30:
                    2b:b9:e9:cd:81:72:9f:75:c0:c7:e9:be:bd:7c:ab:
                    cc:4e:4f:69:14:43:7e:3b:af:6a:91:e9:e5:9f:79:
                    cf:2b:28:02:b8:7c:4c:ef:26:f5:e8:ea:ba:c0:c1:
                    c2:d4:11:28:e0:50:10:38:69:a8:7e:f4:e8:5d:6f:
                    df:cd:6a:71:ec:49:36:e5:a3:e8:63:87:2f:6a:72:
                    4c:a8:26:39:2c:9b:ee:bc:29:47:1f:8e:4a:2c:e5:
                    08:04:12:3a:77:27:03:31:c8:e8:74:e7:16:71:08:
                    08:c4:84:21:3e:64:a3:9d:a0:4d:11:ec:a1:f1:ca:
                    f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C7:C5:40:DC:C4:24:DD:EF:55:A5:9D:2B:C1:E8:C0:2F:7C:D8:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/abef02f7-b1c4-3549-9f44-cd7183fdbbfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:bf:7c:d2:65:63:ad:23:fe:60:57:41:62:d2:d2:25:06:1e:
         19:5f:7b:33:b3:01:55:c2:a5:df:2e:bf:e1:fe:55:62:92:11:
         c0:3a:1e:55:68:d7:ce:01:6c:43:5c:88:4d:d8:62:67:89:53:
         69:bb:31:4e:a1:22:28:3a:e1:a5:b2:20:d3:78:9c:23:0f:df:
         65:0b:1c:54:cd:15:a9:d9:61:55:1c:20:d6:7b:9e:b8:6b:72:
         c6:1a:9a:19:7d:0f:6e:89:a5:37:da:48:25:f8:5c:a8:e3:f4:
         93:d5:41:12:bd:7d:d4:b3:3b:f0:8f:5c:c6:ed:f1:14:c4:13:
         ca:1c:4b:3f:48:c0:5e:56:44:60:09:70:de:7b:03:ae:56:4f:
         c6:b2:94:9d:60:f9:0f:15:a5:ec:8a:44:bd:fd:17:e9:65:3a:
         ae:0b:31:16:b4:8c:d4:f3:a6:66:87:4e:40:7b:f0:ba:7e:10:
         75:6e:3e:9b:9e:08:1c:21:4b:5d:fc:3b:5a:0f:e5:a4:84:9e:
         82:73:c4:f1:98:5e:56:de:88:b6:44:a6:0f:42:55:79:14:27:
         ec:9c:5c:87:d2:ab:74:ef:4e:d0:c4:c7:c7:e6:11:e3:40:73:
         de:94:e4:99:b1:8c:fe:82:5b:a2:81:38:11:b1:e8:1e:26:b2:
         e5:62:6b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:04 2025 by rpki-client