Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/8bccc4c6-312e-323b-8801-038f17a9eac0.roa
File:                     8bccc4c6-312e-323b-8801-038f17a9eac0.roa (raw, json)
Hash identifier:          5LPVbuzNuGYUcqObau4ASPJ/DwTfO/9ENGojqgtYMQI=
Subject key identifier:   0C:D1:15:FF:AD:96:82:50:FD:88:D6:82:14:C3:17:60:3F:4F:C0:4D
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584A19FAB70C3C761EBB2686B600
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/8bccc4c6-312e-323b-8801-038f17a9eac0.roa
Signing time:             Fri 06 Jun 2025 13:01:04 +0000
ROA not before:           Fri 06 Jun 2025 13:01:04 +0000
ROA not after:            Thu 04 Sep 2025 13:01:04 +0000
asID:                     212374
IP address blocks:        69.168.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:19:fa:b7:0c:3c:76:1e:bb:26:86:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Jun  6 13:01:04 2025 GMT
            Not After : Sep  4 13:01:04 2025 GMT
        Subject: CN=a279d9dc-b31a-413e-afa1-2dd2a8608817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:57:20:55:b2:6a:c7:aa:82:73:b7:c6:86:26:
                    a8:4b:a7:df:89:99:a3:60:51:c5:72:82:9c:07:78:
                    76:58:d5:99:c2:9a:5f:c7:e1:f2:78:10:c5:26:bb:
                    3d:0c:e6:06:99:70:08:5b:e6:5c:09:c2:bf:ac:f7:
                    c8:06:dc:72:1d:d7:ba:e0:7c:9a:29:39:dc:ae:9c:
                    59:5e:85:1e:06:93:7f:ee:36:7e:eb:94:f8:fe:88:
                    ee:d9:f1:13:5b:fd:a5:ab:41:be:32:d5:37:d2:ef:
                    92:b7:6e:85:75:a8:69:06:b7:1e:57:39:41:90:5f:
                    e2:25:c7:dd:52:b6:b5:84:5a:14:e3:4d:01:37:14:
                    9c:3d:98:f6:8b:b9:36:72:ec:aa:99:e0:02:b6:be:
                    a3:3d:2f:24:e7:41:b4:bf:45:85:cd:e3:cb:55:c9:
                    17:d1:64:1f:59:9c:8a:a3:7e:eb:53:d4:52:f8:3b:
                    97:df:1a:5a:20:c7:22:35:6f:59:9b:9a:ae:f2:5d:
                    dc:8b:00:78:65:0f:3f:0b:b0:7a:82:42:84:84:a9:
                    3b:9f:50:da:13:34:37:95:e7:0b:9b:f7:6f:e4:aa:
                    94:f6:e6:9f:57:1d:21:dc:9c:03:5e:ca:be:32:cc:
                    06:b1:60:99:af:06:a7:09:d0:ab:34:cb:1e:3b:f6:
                    db:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D1:15:FF:AD:96:82:50:FD:88:D6:82:14:C3:17:60:3F:4F:C0:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/8bccc4c6-312e-323b-8801-038f17a9eac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:43:9b:b6:cd:11:58:2d:78:62:37:5a:31:00:9f:53:fa:db:
         7d:06:7f:99:f7:9b:83:56:2a:af:bf:ee:33:f6:17:a0:ba:79:
         b8:99:e7:13:76:ce:87:59:81:a9:cd:a2:63:b9:7e:42:60:8c:
         43:42:82:2e:5a:ac:52:a9:4a:cc:70:d7:e0:77:5a:f8:c6:e7:
         a2:15:ce:ea:9c:e2:88:17:29:64:2e:a2:cd:cb:2b:3e:1d:e3:
         e7:ee:93:8e:32:85:29:06:b9:95:fc:56:71:ec:a6:48:4c:c7:
         b5:d9:82:cf:80:1d:0a:4b:71:1c:ec:23:bf:97:a0:63:c1:c1:
         0c:fe:e5:a1:47:04:3c:ab:5f:fb:66:af:4e:4b:47:11:f6:74:
         01:91:32:1b:d3:4b:1c:8a:c4:dc:d4:c3:62:3f:3d:73:9b:96:
         05:88:25:f6:30:9c:6f:95:eb:05:e1:3c:3d:68:6f:86:99:27:
         bc:02:78:a7:80:35:db:30:68:9a:5d:b2:87:5b:cf:26:6c:57:
         20:a1:b0:4f:bc:33:28:38:97:08:a1:10:e1:50:a1:e7:d7:1c:
         a8:f4:53:68:c8:96:e7:ef:13:69:9d:e7:62:c0:ec:33:5e:ef:
         1d:d5:35:b3:69:cc:ba:4d:3b:84:6f:2b:7b:93:86:16:f7:e3:
         cd:d4:51:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:11:12 2025 by rpki-client