Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/4f8195af-8745-3dd6-ba31-6179805f3998.roa
File:                     4f8195af-8745-3dd6-ba31-6179805f3998.roa (raw, json)
Hash identifier:          fbIWTFzU1rKIMttEZqJ/jLBDwY+4MYw1TI2zXT09/B4=
Subject key identifier:   ED:FA:42:BB:A2:C2:6F:52:5E:1A:92:85:07:2F:00:62:6D:E6:B8:B8
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F43285849CE9A412BF668C5506C24A480
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/4f8195af-8745-3dd6-ba31-6179805f3998.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     19197
IP address blocks:        69.41.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:41:2b:f6:68:c5:50:6c:24:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=9e682824-fcc9-46ad-aab9-cab69fd157f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:81:bf:c7:50:0e:ef:12:af:42:76:84:80:
                    78:77:10:1d:41:98:ea:cd:9a:0f:e9:81:2f:4d:77:
                    92:1c:b8:55:8c:2c:d0:d5:b7:72:42:69:bc:86:e8:
                    b6:57:b5:df:cf:b6:64:16:58:7c:2d:ae:8d:69:ea:
                    a1:e1:63:57:6d:14:d7:37:ca:34:a4:1c:7c:af:fe:
                    bd:1a:db:25:be:08:d5:f0:c8:e0:5a:e3:77:59:d3:
                    9c:67:a4:1b:33:ef:c9:40:a6:41:df:4d:9e:39:51:
                    29:43:ec:94:ef:29:2c:48:04:c0:b2:23:c8:7e:6e:
                    7b:58:4a:35:a0:b9:ac:2c:2e:10:11:02:86:2c:5a:
                    37:61:c2:d8:d2:1a:fd:03:b0:23:df:4d:04:ee:76:
                    0d:d3:9e:cc:50:68:9f:2e:72:f3:34:15:be:cd:b7:
                    f2:2f:32:a2:f8:c0:56:2f:5d:ad:19:d5:e0:a5:86:
                    88:6a:15:1c:57:6d:d3:2f:05:75:5c:c5:9f:e3:77:
                    15:e6:64:dd:d1:cb:99:da:5a:90:3d:9f:d3:b9:86:
                    83:c6:ff:09:55:d9:61:b6:1e:32:02:03:2f:3b:23:
                    e2:d0:f5:99:b8:6b:57:40:f4:ff:c5:0b:92:c1:91:
                    a7:c8:a2:22:bc:eb:15:a4:77:cf:dc:98:9f:11:c5:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FA:42:BB:A2:C2:6F:52:5E:1A:92:85:07:2F:00:62:6D:E6:B8:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/4f8195af-8745-3dd6-ba31-6179805f3998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d6:62:4d:90:f3:1f:08:92:1a:10:6c:fa:dd:fa:65:f5:67:
         85:db:32:3e:98:4c:7d:41:bf:24:64:2f:42:f5:33:97:4f:12:
         9c:d9:67:07:ce:78:81:5e:0d:d8:f9:89:ae:9d:d1:13:b3:46:
         0b:52:00:28:41:e7:38:55:aa:45:0d:19:13:e7:60:23:66:b1:
         62:1b:cc:63:f0:da:3a:40:38:c1:95:ea:62:0d:5a:4a:33:a6:
         ef:42:59:3d:65:96:b5:f1:20:af:33:29:07:28:9c:bc:6b:43:
         9f:42:4f:32:b1:71:b8:c0:1f:40:a7:69:c6:44:e8:91:62:8e:
         6f:14:6f:33:90:b0:f8:88:ee:b0:c4:c7:95:46:55:85:07:07:
         92:1e:ef:ca:2c:ac:0c:2a:8f:d6:5c:83:c5:d2:d8:2f:b9:36:
         ec:d4:d2:ae:5a:3e:c5:bb:15:5e:a7:f2:23:6e:ae:75:e5:be:
         a7:ad:37:a4:ad:76:29:6a:08:75:97:1a:65:03:f9:00:6d:5a:
         5c:14:5a:48:c8:d0:92:87:29:81:6a:4d:ff:a4:f2:6c:88:ee:
         8d:ca:98:58:c8:39:31:d7:e9:f1:16:f4:d6:96:d1:61:e6:15:
         56:2e:6d:d7:78:66:20:b8:0d:7c:29:ce:13:92:2b:57:98:6e:
         e6:58:e8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:00:17 2025 by rpki-client