Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b/9eb732f0-7dc2-3772-922b-327d51ae0a05.roa
File:                     9eb732f0-7dc2-3772-922b-327d51ae0a05.roa (raw, json)
Hash identifier:          lYJ34nDZPx0N7+pa9ugt9bY6kWTa6gKrhBjcYq860iY=
Subject key identifier:   BC:75:87:3F:56:BE:71:F4:BD:E8:A2:43:A7:61:8A:3F:EC:A4:78:F6
Certificate issuer:       /CN=f1bee768-3970-42c5-ad86-94ca59e8551b
Certificate serial:       010D0C9F4328584AD0D66AC787E9AE4A9135C600
Authority key identifier: D5:B8:13:E0:57:CC:78:37:73:98:C7:36:CF:1F:2E:69:4D:13:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b/9eb732f0-7dc2-3772-922b-327d51ae0a05.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     33494
IP address blocks:        69.194.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b/f1bee768-3970-42c5-ad86-94ca59e8551b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b/f1bee768-3970-42c5-ad86-94ca59e8551b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:6a:c7:87:e9:ae:4a:91:35:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1bee768-3970-42c5-ad86-94ca59e8551b
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=e7413791-be6c-4e26-80a1-77dabf2bc587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cd:a1:71:26:aa:db:3d:29:5e:34:6b:38:30:
                    11:3d:fb:d3:8e:50:2b:7a:e3:10:c1:1c:7b:d0:5b:
                    8a:9a:9b:2b:11:0a:15:d2:32:15:ee:0e:de:fb:cf:
                    52:03:77:de:5a:3b:06:b7:be:80:d5:f1:50:42:e2:
                    45:4b:f3:88:44:3d:39:b8:bc:87:aa:dc:1d:a8:07:
                    25:2f:8d:e8:d9:45:30:44:f8:1b:4e:81:31:a1:e5:
                    70:e1:29:5f:89:63:67:be:9e:20:c3:d8:98:0d:e3:
                    0d:a7:71:9e:15:2b:07:4e:dc:a3:88:8c:d0:b9:3a:
                    af:dd:49:a5:ea:52:41:93:3a:57:5c:f5:21:56:a9:
                    72:82:fd:9a:40:07:84:94:35:66:7a:01:d5:22:49:
                    0a:ba:33:0c:1f:91:2b:24:99:84:13:55:1a:f1:5a:
                    6f:1f:46:89:0b:c3:35:b9:c1:be:b1:13:57:ee:f1:
                    7c:47:7d:62:3a:1d:b3:d9:f5:9d:be:6a:5e:7d:de:
                    93:26:70:7d:9a:c6:03:65:e2:e4:80:b7:ab:5b:4a:
                    47:cb:e9:cb:95:a1:eb:58:2e:0d:a3:87:bd:e9:e7:
                    6d:03:26:ea:d2:ce:2a:0c:0d:1b:47:82:4e:e5:60:
                    bb:31:8c:07:15:ca:59:90:41:f9:f1:1e:d7:2b:10:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:75:87:3F:56:BE:71:F4:BD:E8:A2:43:A7:61:8A:3F:EC:A4:78:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b/9eb732f0-7dc2-3772-922b-327d51ae0a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b/f1bee768-3970-42c5-ad86-94ca59e8551b.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B8:13:E0:57:CC:78:37:73:98:C7:36:CF:1F:2E:69:4D:13:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f1bee768-3970-42c5-ad86-94ca59e8551b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.194.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:35:17:2d:b2:c0:17:58:be:78:a9:49:0c:9f:05:bb:12:d1:
         49:d7:92:9b:51:d0:4b:30:51:5a:48:e3:7f:e1:c8:94:4e:e3:
         7a:21:b8:cc:99:1d:e4:60:bd:db:05:07:15:70:8f:3e:ed:76:
         44:ad:1c:a6:77:ad:66:39:4a:c4:9d:0d:eb:ec:c8:97:27:c3:
         3e:8a:5a:bf:66:3c:87:b9:82:d0:f5:6f:7c:0f:42:ff:b6:64:
         4b:9f:7a:83:f8:5b:c4:28:0f:b2:01:b3:54:52:e2:ef:9f:70:
         56:22:54:84:20:7a:8d:5b:b2:e1:57:b8:06:5f:11:46:5d:19:
         e8:63:de:ed:44:be:a9:9e:83:f8:11:56:60:2b:f7:e1:5e:65:
         1d:2a:ac:98:b6:98:1b:98:34:c2:b9:dd:a2:d6:3b:07:76:41:
         2a:22:d8:0d:84:c4:ba:c6:b7:c8:41:89:10:1a:79:36:4b:6c:
         9d:21:e4:f6:3e:08:80:5c:81:09:95:7e:0b:4a:b2:82:86:08:
         80:e0:25:e9:11:1d:c9:ce:8a:cd:da:cc:be:9d:cc:4d:24:10:
         63:92:fc:23:9f:f5:64:bd:8c:f3:51:b3:8a:46:42:3f:18:b6:
         7c:6a:fc:49:db:a6:00:37:c1:57:31:18:3e:75:20:ad:d7:68:
         dd:e8:bf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:20:49 2025 by rpki-client