Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b00e1741-3d62-3c32-9ab0-7477d25ee03d.roa
File:                     b00e1741-3d62-3c32-9ab0-7477d25ee03d.roa (raw, json)
Hash identifier:          AXa0iSWLhqwJkBjUGssOlYx5PRAY0tnfJJt+18/logE=
Subject key identifier:   29:3A:E6:4E:B2:F2:5D:44:0F:C9:0F:57:0A:93:18:90:7C:47:3A:FD
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584AD30AF54F17FBC7143C9C34A0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b00e1741-3d62-3c32-9ab0-7477d25ee03d.roa
Signing time:             Mon 11 Aug 2025 19:58:24 +0000
ROA not before:           Mon 11 Aug 2025 19:58:24 +0000
ROA not after:            Sun 09 Nov 2025 20:58:24 +0000
asID:                     25198
IP address blocks:        69.73.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:0a:f5:4f:17:fb:c7:14:3c:9c:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Aug 11 19:58:24 2025 GMT
            Not After : Nov  9 20:58:24 2025 GMT
        Subject: CN=5a601a28-a98c-4c7d-9970-3462022fe215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e7:3a:62:af:ec:c6:4a:cb:f6:f5:c9:fb:e2:
                    09:f0:08:ab:d8:8d:12:ef:c8:f5:83:6a:24:9d:8d:
                    69:68:89:e3:30:e3:76:27:0b:60:e6:bc:04:15:78:
                    fa:01:db:87:ec:5d:c0:f4:76:8c:e5:da:56:87:fb:
                    88:83:5b:bf:73:50:64:68:41:7e:56:fe:bc:0e:1e:
                    2b:54:5a:8b:0b:94:4d:f5:11:c6:de:46:97:7e:63:
                    cf:fa:f5:81:b0:8c:c3:ff:2c:b7:43:9b:55:aa:d8:
                    f0:ef:5f:07:b8:4c:51:01:d4:63:be:c5:0e:21:8a:
                    94:3c:5d:6a:f3:d5:2a:97:de:61:ce:1a:13:a8:3b:
                    fb:44:77:3c:69:aa:a1:8c:b5:0b:ae:eb:e7:80:12:
                    b3:61:17:c7:11:4f:47:4a:5a:9b:91:2d:15:c1:a5:
                    a1:6d:3c:b3:c9:cb:8d:7f:83:28:e5:9a:ef:9a:58:
                    01:ec:25:4d:47:62:4d:e0:21:87:d1:99:a5:12:6c:
                    15:de:17:c8:f2:9d:8b:bf:7f:da:a3:7c:a3:34:3a:
                    f4:ad:44:6e:3d:ff:25:83:34:16:a0:d5:9e:6a:9b:
                    40:bc:21:7b:d8:18:3b:08:49:83:ca:5c:cf:a7:69:
                    ff:e5:cc:41:b5:77:0e:de:e9:33:f2:f9:9e:0d:e2:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3A:E6:4E:B2:F2:5D:44:0F:C9:0F:57:0A:93:18:90:7C:47:3A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b00e1741-3d62-3c32-9ab0-7477d25ee03d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:5c:61:92:3b:b9:db:61:a4:11:1c:87:34:2f:ad:cc:72:13:
         c7:5b:80:c8:20:32:da:58:31:4c:eb:4c:1a:15:a6:7f:ee:1c:
         b5:5f:e6:72:ef:e7:1d:d4:02:fc:98:61:51:ea:bf:c1:ec:11:
         5a:be:60:db:4a:73:55:70:6d:0c:a0:d2:39:cc:97:3c:ae:f6:
         7f:10:0f:5f:93:d3:a0:51:ec:40:e6:79:98:ed:ce:9b:eb:6d:
         91:cf:5c:d6:d9:f9:95:7d:7f:a9:a7:e8:28:18:93:98:eb:9a:
         05:4b:6c:f3:9e:e5:c5:70:5d:10:eb:49:a9:6d:42:f7:97:12:
         75:91:61:b1:4e:ca:a5:7f:a8:e8:f8:49:ea:5e:ac:6a:42:06:
         7c:6f:9c:f0:3d:b0:18:fd:e9:56:d5:a9:d8:5c:c5:d0:59:fc:
         9b:0c:af:2f:7d:31:df:99:52:0e:f7:c3:7b:f5:6d:e8:e0:9f:
         43:a3:e9:3a:92:f8:56:89:86:0f:c6:05:a0:77:ae:8f:54:05:
         a8:2d:88:e9:c4:42:c8:76:17:76:28:24:34:43:b0:3d:3a:ee:
         61:74:56:80:1e:6d:e4:51:07:ed:ce:1f:9f:08:75:b8:83:04:
         03:8a:e5:55:89:c0:7d:28:49:f6:78:8c:a0:65:d7:fe:22:23:
         78:37:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:52:03 2025 by rpki-client