Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/aba5151f-da95-3883-88dd-906de034d844.roa
File:                     aba5151f-da95-3883-88dd-906de034d844.roa (raw, json)
Hash identifier:          w4YQFL0fJwFlXFMpS/Lklx/0+BpH6X1XosLBeDWjCjg=
Subject key identifier:   8D:A5:06:A7:91:A0:89:C9:66:AA:54:FF:DF:96:1E:0D:B4:35:01:7D
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584A19FAB77C7AF0D08AA465C680
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/aba5151f-da95-3883-88dd-906de034d844.roa
Signing time:             Fri 06 Jun 2025 13:01:04 +0000
ROA not before:           Fri 06 Jun 2025 13:01:04 +0000
ROA not after:            Thu 04 Sep 2025 13:01:04 +0000
asID:                     36344
IP address blocks:        69.168.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:19:fa:b7:7c:7a:f0:d0:8a:a4:65:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Jun  6 13:01:04 2025 GMT
            Not After : Sep  4 13:01:04 2025 GMT
        Subject: CN=4fc3ceb0-f16a-4957-b2fc-2e87f34087ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7a:d9:07:e7:bf:07:6e:4b:dd:62:7a:87:f2:
                    a1:78:01:9b:cb:d4:ad:46:ef:73:ef:a4:7a:c0:f3:
                    74:43:61:f4:bc:4c:0b:d6:64:cf:00:fb:fa:07:0e:
                    67:c9:e8:98:9c:cb:11:23:87:6a:3b:f5:03:a9:10:
                    af:28:c0:8f:a5:e6:d1:e5:06:53:7d:b8:1d:b4:30:
                    6b:5c:87:e2:9f:71:3c:8c:52:1d:a1:fe:3d:0b:36:
                    d8:85:47:0a:10:b1:18:96:a3:df:c3:33:31:4b:61:
                    6d:0f:b3:a4:b1:0c:17:f6:46:4f:e5:28:e6:1b:c6:
                    a3:25:91:56:2b:6f:6e:33:22:df:43:c4:d9:6d:b7:
                    e7:f9:37:c3:f9:0e:de:82:3b:a4:41:65:cc:8a:3b:
                    71:cb:d7:ac:65:07:3f:9b:b4:c6:d5:aa:e4:ba:2c:
                    95:b7:de:67:c7:72:07:1f:e6:a7:44:ff:8a:f9:f3:
                    5f:8b:69:af:d4:9a:03:f1:70:52:ba:7d:81:54:bd:
                    94:b0:6f:0e:76:a8:7b:a3:1d:c9:5f:0b:90:a2:f6:
                    10:51:af:e5:97:2f:9a:0c:79:66:b6:6e:cc:8b:8e:
                    55:60:6e:86:bb:26:7f:80:60:0e:a3:25:cb:94:43:
                    e7:0c:ee:9a:5c:a2:f2:f3:ca:40:a7:32:87:e3:7e:
                    cc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A5:06:A7:91:A0:89:C9:66:AA:54:FF:DF:96:1E:0D:B4:35:01:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/aba5151f-da95-3883-88dd-906de034d844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:25:3d:d2:52:51:d9:9d:46:e3:71:ed:fc:93:cc:df:e7:d6:
         90:83:92:89:ba:21:cb:ba:93:b7:dc:da:92:de:b0:ca:55:b9:
         12:37:32:34:8b:7d:db:e0:30:49:7f:86:b8:60:ab:de:20:73:
         8e:16:7c:23:4c:12:b7:62:74:65:1d:b2:7a:72:47:9f:a1:63:
         29:22:ce:28:40:3c:05:28:b2:38:c4:94:b3:42:b0:ed:b8:8e:
         88:d3:91:03:dd:7e:da:f6:fe:8e:d3:36:28:63:12:9f:ff:e6:
         d5:dd:53:c7:f5:c3:6a:0f:a6:56:09:54:05:8e:04:28:a1:b6:
         e9:5a:0d:7a:19:4b:12:63:2d:40:ad:7e:2f:96:82:07:6c:e5:
         e8:7f:2f:3b:61:d6:e2:02:64:f7:f3:6a:31:5d:22:22:cf:dd:
         e9:d2:0c:70:b7:ac:b0:55:be:80:58:5c:d4:7a:dd:e8:18:e4:
         2d:1c:51:e3:9c:3b:0b:aa:98:62:1d:b6:c3:21:49:55:3d:32:
         73:b5:84:78:38:d3:df:a4:19:b7:d9:31:98:f4:9b:31:6d:da:
         e9:d1:c9:d0:b4:c8:11:84:29:72:c7:54:61:e4:2a:d3:6e:2a:
         d0:09:23:f6:a7:6a:6f:0c:c1:67:09:94:71:38:ea:f5:1d:d6:
         e3:b6:bd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:14:05 2025 by rpki-client