Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4135fe96-9726-3375-bdf8-ff6dcc774b8f.roa
File:                     4135fe96-9726-3375-bdf8-ff6dcc774b8f.roa (raw, json)
Hash identifier:          2D8N3PqDyMBBmiHCk68NNfmxnsa6/3PIDrkLwwnQxx8=
Subject key identifier:   F0:A9:65:F2:12:30:45:FB:96:43:50:76:3C:F8:E6:A6:5B:9E:53:43
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584A3A1578EB753B0BAB8148A080
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4135fe96-9726-3375-bdf8-ff6dcc774b8f.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     36678
IP address blocks:        69.163.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:78:eb:75:3b:0b:ab:81:48:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=e24e945c-8f95-4eaa-bf5f-bec233ea68c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:22:65:61:4b:7d:8e:9c:8d:d5:a6:9a:34:
                    27:5b:f6:30:0e:b2:ad:26:6b:bc:68:f8:45:0a:f1:
                    e8:9d:13:81:0f:ab:89:12:69:b6:f3:a3:e0:02:9d:
                    94:e4:1d:c0:97:2d:b9:5d:63:bc:89:bf:d3:f9:ab:
                    f3:c1:90:69:66:cc:49:f6:cf:01:ef:d6:0c:43:78:
                    4e:85:d5:15:66:ac:1e:ca:9c:c5:d1:f0:cf:71:02:
                    42:04:3e:69:c5:47:9e:dd:0d:5c:f8:b9:86:b5:5b:
                    0c:3e:cc:db:1e:35:3f:ef:48:8a:6b:a3:52:ec:fc:
                    4f:80:25:a0:de:f4:64:5f:19:34:35:5c:34:51:f7:
                    e3:72:48:a5:dd:01:bd:18:86:49:e1:a0:ff:d2:7d:
                    a6:00:7f:d6:e8:ad:74:5e:47:7a:28:47:8b:85:2c:
                    21:a7:72:77:73:1d:85:2b:de:dc:c2:21:19:4b:ab:
                    1a:77:e6:c8:ce:21:52:16:78:f1:dd:9d:af:31:77:
                    0d:5b:c0:83:00:4b:44:ea:cf:f8:01:0f:4b:18:f6:
                    5a:4a:26:41:f0:90:3e:84:e9:3c:18:1d:11:00:cb:
                    8e:3c:d4:da:9b:ae:47:63:68:88:01:f7:d3:37:c6:
                    b9:9c:02:db:7b:83:1a:24:f3:8c:71:5f:5f:67:55:
                    26:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A9:65:F2:12:30:45:FB:96:43:50:76:3C:F8:E6:A6:5B:9E:53:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4135fe96-9726-3375-bdf8-ff6dcc774b8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.163.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:27:68:b4:a1:db:23:a3:fa:f4:67:a3:6c:f5:fe:ab:0b:1c:
         97:60:c3:7d:c6:40:5b:26:33:2c:e2:fd:10:fc:a5:18:24:a5:
         e0:b6:b2:4e:58:00:b6:37:71:53:ab:7b:74:80:2e:52:66:68:
         d2:96:bf:20:e1:8b:65:f7:31:93:40:ba:2e:4f:20:4e:f5:07:
         c2:81:b1:bf:5a:73:90:7e:8f:8d:ee:ab:b5:22:c7:7c:72:5d:
         b5:f6:0b:ca:08:f8:96:4e:1a:8a:7a:e7:a8:15:39:19:d6:e4:
         3d:38:75:f6:96:70:42:a5:24:9a:d0:9d:e8:01:0c:0b:8e:5e:
         22:bc:f5:85:ec:62:7d:dd:c1:cf:2e:84:c9:d7:e7:11:ce:8c:
         67:e9:bc:a7:dd:7a:6a:0b:e9:41:96:52:8f:fa:7f:0a:4a:ee:
         f9:54:97:c6:4f:2a:11:34:1c:16:e0:cd:53:53:e5:87:dd:6b:
         bb:03:45:24:44:5b:d3:74:78:89:8e:0c:2c:89:91:95:1e:17:
         77:eb:b1:40:14:df:17:1f:53:c1:e0:87:4c:6c:c9:2f:26:37:
         a2:91:8d:31:09:71:fb:f7:6e:03:85:14:c8:2a:0a:a0:a9:b2:
         6a:19:5c:36:4c:69:8b:5a:ad:cc:8d:23:13:6b:dd:b6:4a:af:
         5e:52:99:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:55:54 2025 by rpki-client