Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/717ebdd6-4d0d-33db-ae05-66962b047c06.roa
File:                     717ebdd6-4d0d-33db-ae05-66962b047c06.roa (raw, json)
Hash identifier:          z2qXOwtPkZ5H8bYk96bNo8/5027dwJBnZyjVa0APmyo=
Subject key identifier:   99:DE:DA:11:FA:C8:A4:38:51:91:D7:BF:83:49:71:ED:A0:90:5C:85
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584A19FAB7F812137CC18F92F900
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/717ebdd6-4d0d-33db-ae05-66962b047c06.roa
Signing time:             Fri 06 Jun 2025 13:01:04 +0000
ROA not before:           Fri 06 Jun 2025 13:01:04 +0000
ROA not after:            Thu 04 Sep 2025 13:01:04 +0000
asID:                     200288
IP address blocks:        69.168.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:19:fa:b7:f8:12:13:7c:c1:8f:92:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Jun  6 13:01:04 2025 GMT
            Not After : Sep  4 13:01:04 2025 GMT
        Subject: CN=ff57ae34-fbed-4f66-9962-7b29d12b5245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:67:81:a3:be:1f:70:f2:04:40:41:c7:17:1a:
                    bb:b6:d6:65:8e:ea:8b:c5:b8:c2:98:58:7e:87:c6:
                    17:2e:44:d1:8c:9f:2a:a3:15:ce:dc:17:62:b9:41:
                    6f:5f:28:0f:c6:79:e1:1c:a5:e1:a7:0e:58:57:aa:
                    03:db:55:da:91:b8:a4:01:56:38:3b:c5:8f:e0:83:
                    f8:71:96:f0:b3:13:6f:1d:2c:e1:af:92:8d:35:9e:
                    05:0d:18:9a:c5:77:56:96:51:3c:d4:1e:4d:9b:9d:
                    80:30:99:d5:b6:66:f3:95:b0:8d:f9:15:8d:4f:b0:
                    d6:f0:54:4a:80:f6:c7:3b:16:e1:7f:d2:0b:08:6c:
                    b5:3b:04:60:ce:27:12:60:b9:13:1f:a6:f3:2a:79:
                    40:0b:6a:23:0c:de:c4:6a:0f:af:cc:26:ac:10:4b:
                    c7:9e:bc:d7:a8:0f:0a:f5:5f:65:7b:bf:2c:b8:0e:
                    77:a1:d4:ca:0d:67:32:0e:c1:af:31:ac:72:90:9b:
                    50:ef:0a:fa:0f:d1:59:d7:08:9c:58:19:82:02:e5:
                    c3:a3:d3:ea:db:20:c9:d3:88:fb:b2:1d:94:ad:b4:
                    6d:66:a1:44:67:b7:e2:30:47:4a:81:d2:0f:66:7a:
                    2d:9c:19:c5:f2:8d:4b:fc:21:dd:e4:62:bf:05:df:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DE:DA:11:FA:C8:A4:38:51:91:D7:BF:83:49:71:ED:A0:90:5C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/717ebdd6-4d0d-33db-ae05-66962b047c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:6d:ff:10:82:f4:23:14:27:44:3b:1a:2f:ae:3c:1d:b0:26:
         77:00:97:8c:8c:65:14:f2:b8:a1:ac:2a:69:0e:6c:0a:9e:cb:
         77:cd:9a:21:06:3e:dc:e9:f1:7f:1f:ac:cb:17:37:85:31:60:
         e3:4e:9b:16:d6:2a:41:1e:93:0e:04:b1:f1:70:a8:b7:9b:a5:
         af:61:94:38:75:20:2f:64:b9:c4:62:53:30:0b:83:7b:01:fb:
         3a:2e:53:42:2f:23:cb:96:eb:30:7f:e2:cf:ff:c1:2e:34:cc:
         35:80:cd:6e:ae:8f:73:39:44:75:83:88:4e:f3:65:af:8c:9b:
         5c:98:f2:17:22:ad:48:48:d3:09:af:6c:03:62:17:4f:f6:2f:
         7b:64:b1:d8:74:31:33:20:88:48:a2:56:f4:18:91:51:e9:30:
         bb:51:fb:7b:bb:97:e4:00:96:7b:02:d6:f1:50:b1:da:0e:8c:
         6a:94:69:0b:6e:d3:30:28:12:d0:23:65:1e:6b:39:26:68:b4:
         25:83:de:73:17:0d:4b:e4:b6:74:bb:08:9f:72:41:28:64:9c:
         13:f0:92:20:f4:0c:73:81:c4:69:de:71:f6:a5:b4:09:e3:11:
         4d:e7:70:0f:6c:18:44:eb:3d:02:d5:a6:a9:bf:84:50:91:dd:
         d9:c7:96:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:47:27 2025 by rpki-client