Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b4f90c05-80a4-3842-bfaf-a796bcbf6275.roa
File:                     b4f90c05-80a4-3842-bfaf-a796bcbf6275.roa (raw, json)
Hash identifier:          hq1Nmbia9y2Vux+zL5uIkrm3PZPYVivQrOKHJHSXj3g=
Subject key identifier:   6A:69:9D:9E:D9:40:F8:64:DD:40:A1:D3:9A:F2:BE:65:85:F2:9F:47
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849AA4F6AB6E5CF3A4C2F5A7900
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b4f90c05-80a4-3842-bfaf-a796bcbf6275.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     55293
IP address blocks:        69.48.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6a:b6:e5:cf:3a:4c:2f:5a:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=7e79a583-b8b2-4b83-a247-c072c4ac2243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:27:41:ae:f0:ba:a4:2c:51:aa:4c:f0:11:
                    1f:91:a6:65:2e:2e:cd:f6:2b:2d:7e:04:49:d3:57:
                    8b:24:83:4a:1a:fc:15:a9:bb:98:86:8f:3e:ec:99:
                    0a:b5:d1:7c:40:62:c0:22:54:33:24:79:7d:5a:52:
                    ce:2d:be:88:11:17:a0:19:3b:94:99:d9:97:ac:3e:
                    b2:02:9b:46:77:cc:bf:c1:c7:0d:17:84:31:d2:31:
                    f5:2d:d5:26:bb:60:a4:53:22:7a:5e:b2:51:a7:34:
                    a8:b5:0b:95:c1:b7:fc:f9:5a:1a:06:4e:ed:b7:c8:
                    58:01:a0:14:f9:83:a2:0e:76:9a:7b:00:59:0f:d8:
                    fc:21:ed:cb:24:f3:c7:8b:1b:2f:a2:0d:8e:b4:2e:
                    6b:10:0a:f6:9d:b4:a6:51:3a:24:88:1f:a1:02:da:
                    0d:31:70:f3:e7:4f:b2:0e:bf:1c:7f:eb:8f:7e:04:
                    60:9c:96:12:02:4d:42:4f:5e:bf:8d:8f:6e:b1:9c:
                    07:be:d7:a4:fe:93:72:0d:dd:bb:52:b4:ea:a6:42:
                    08:c9:38:ef:87:77:6b:42:ec:e8:6f:a6:85:4e:00:
                    40:82:5b:c3:12:2c:73:fa:fc:be:e7:5a:e4:30:77:
                    65:c9:a0:c4:f0:9d:a1:df:19:b8:6a:04:3e:37:25:
                    ce:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:69:9D:9E:D9:40:F8:64:DD:40:A1:D3:9A:F2:BE:65:85:F2:9F:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b4f90c05-80a4-3842-bfaf-a796bcbf6275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:3f:d9:a0:50:d5:dc:1e:f1:30:16:5d:df:4d:3d:aa:bf:43:
         bc:e5:1c:ac:0b:22:7c:0d:ab:b9:7d:f3:91:87:b1:5e:2d:b4:
         37:ef:28:1f:61:28:ea:c5:6f:9c:c5:3f:d7:71:bf:3b:37:22:
         00:54:66:ae:a6:22:fd:3c:47:08:16:35:99:4a:b3:8e:ac:2e:
         64:12:5c:ff:73:33:b4:0b:65:f7:af:cb:7f:a1:d2:23:1a:9a:
         d2:57:2e:92:32:94:70:58:27:21:33:3b:4d:e2:33:57:db:e0:
         84:f2:8f:ae:ea:41:ed:b2:fb:cd:2f:86:ec:4e:c3:65:e7:8c:
         e9:45:cc:58:9d:c7:8c:33:31:c4:71:99:c9:02:3e:7c:de:aa:
         e7:03:a4:72:82:e9:b5:a1:6a:9f:a6:f5:3c:6c:6c:18:d1:b5:
         3d:6c:f8:0c:ea:1d:b2:0a:38:c7:aa:ec:8f:c0:93:e4:83:19:
         ca:9d:4d:d1:de:a8:e0:cb:a0:0e:88:a8:7b:bf:4d:cd:53:68:
         9f:ce:56:26:91:53:27:5b:7b:d5:f5:87:2e:56:36:7a:ea:b9:
         bf:45:83:c0:e7:87:77:f0:f5:51:c3:b0:73:14:d3:06:92:a4:
         e8:c2:ef:64:a6:85:e3:f1:9e:a2:53:fa:80:4c:08:8c:a7:c3:
         b1:b5:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:40:12 2025 by rpki-client