Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/55cea90a-508f-36a4-8b91-9053d99a58f4.roa
File:                     55cea90a-508f-36a4-8b91-9053d99a58f4.roa (raw, json)
Hash identifier:          uWeq4bz8ymsMzF+6HWfEySDawMnPvExVkTlEDF7H0Qw=
Subject key identifier:   F6:28:16:4F:94:F3:D2:81:AA:7E:21:F5:58:B2:CB:41:FB:CC:DC:34
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F4328584ACE0B9E4C5BD9ABE79D862800
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/55cea90a-508f-36a4-8b91-9053d99a58f4.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     6954
IP address blocks:        69.4.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:9e:4c:5b:d9:ab:e7:9d:86:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=be9d4923-6c98-4aa8-badb-551fd590dbe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a6:86:35:82:65:94:db:be:82:01:2e:b1:53:
                    78:8e:3e:9a:d9:11:81:fc:0d:1f:8a:b4:2d:d6:9c:
                    dd:f2:e2:79:3d:03:4f:3a:d1:f3:11:5c:9b:b3:79:
                    3d:b9:95:d9:d8:cf:00:e9:57:5b:4b:9d:79:a9:46:
                    eb:7c:b0:dc:5a:1b:70:d0:74:18:1f:26:0a:e7:86:
                    e8:6d:5b:0f:cf:3c:d1:b5:ff:d3:14:56:97:ea:4e:
                    b8:4a:98:1f:d2:c2:f1:7a:5b:fd:5a:8a:43:2d:66:
                    ab:11:ad:38:dd:b7:b9:80:60:2f:72:a4:83:f5:c3:
                    e7:89:0d:09:c5:7e:29:64:0a:1f:ae:4b:93:a0:4b:
                    de:b1:a8:eb:07:46:52:b3:5e:3b:f2:89:a5:73:a2:
                    cc:01:53:86:c5:2f:84:05:b0:5c:07:53:87:5d:9c:
                    c3:c5:49:b0:69:88:fd:98:5f:41:8f:d3:65:17:fd:
                    9c:5a:32:37:d1:8f:88:a0:e1:06:ff:b7:ad:1f:7a:
                    ca:22:93:1b:43:ec:06:f6:f3:01:c9:dc:6e:d2:7d:
                    63:bb:36:7d:11:97:82:b8:13:57:c3:c6:08:82:1b:
                    3b:e9:8a:5d:95:e7:8a:7e:2e:3b:40:72:b7:37:62:
                    2e:e0:88:22:c4:1e:e4:4a:b7:fc:43:36:76:05:72:
                    a4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:28:16:4F:94:F3:D2:81:AA:7E:21:F5:58:B2:CB:41:FB:CC:DC:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/55cea90a-508f-36a4-8b91-9053d99a58f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a6:08:ca:e7:46:ff:09:92:a0:1c:db:1f:81:36:9f:94:1c:
         8c:82:f3:ec:1d:84:48:c8:62:d9:b8:db:84:b9:be:20:04:4a:
         e9:18:14:c8:29:0f:91:37:61:9d:25:5b:17:21:9a:67:9b:e5:
         16:f4:9c:f5:3b:6c:c2:9b:c6:4a:c3:4b:da:b2:3c:87:92:12:
         39:28:cd:00:a8:46:4a:b9:65:9c:4f:f0:c5:35:ff:05:5c:4b:
         df:66:a1:d1:78:69:55:75:19:c2:e7:59:47:30:51:ca:29:fa:
         41:77:25:c7:f5:e5:23:e3:79:2e:d9:8f:0f:0e:0c:24:4f:b9:
         b7:b4:36:cc:58:5f:6b:74:19:89:e6:04:b6:0a:44:0c:22:a9:
         ae:c4:66:74:2b:8e:21:2a:0c:4d:28:77:1a:8d:23:28:1e:7d:
         ff:02:27:e5:21:94:91:18:35:c1:30:ae:f5:fc:ea:a8:8b:3d:
         7e:8a:14:f0:79:3e:83:b5:0c:4e:20:34:90:0f:50:0c:81:2b:
         5e:f3:ff:54:77:ea:8f:81:37:26:c8:4c:84:b3:61:63:21:f1:
         5d:c9:3d:cc:c7:28:49:89:0f:fd:b7:d1:1e:0b:78:46:11:33:
         16:25:7e:17:5c:34:97:a8:9f:9a:97:05:87:c4:3a:72:7c:87:
         c0:2a:b7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 03:02:30 2025 by rpki-client