Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04eee67a-2ec7-3b6a-a5ad-be64e7f45d02.roa
File:                     04eee67a-2ec7-3b6a-a5ad-be64e7f45d02.roa (raw, json)
Hash identifier:          FXuvAKop6ZM1MAws6fYO2K5bPKS2RFN3u2rkvHAq6bk=
Subject key identifier:   A5:C2:1E:B8:36:26:5A:8D:FC:D3:06:DA:0A:78:07:6A:7A:3B:9F:58
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9022B4EC1A65B7D42380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04eee67a-2ec7-3b6a-a5ad-be64e7f45d02.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     3848
IP address blocks:        70.28.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:90:22:b4:ec:1a:65:b7:d4:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=c9b2b635-817d-41b4-8516-00cc9658b8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:c2:e6:38:57:73:ce:6e:24:13:d8:5f:62:
                    0d:80:94:0a:86:9a:8d:4f:96:ea:57:55:0d:79:84:
                    e6:62:87:3d:9e:b5:61:6d:b1:e5:30:0c:2a:89:b7:
                    4a:af:06:6c:da:71:1c:a8:b8:cc:26:0f:88:d8:bc:
                    75:5a:6b:86:a6:4f:93:0e:f7:49:34:37:dd:ea:96:
                    d0:76:cd:e9:69:bf:9b:1b:08:79:c6:d0:f9:6b:63:
                    f0:42:0c:d6:9d:27:1d:ab:bf:39:ba:63:fc:9d:eb:
                    1e:f5:4a:ec:e1:a4:cd:a7:87:1e:31:8a:62:8d:bd:
                    e3:b6:70:e5:a8:88:ae:7b:41:df:6a:9d:ae:3c:81:
                    cd:fc:9a:0f:6e:b2:a3:e5:b6:7b:dd:be:10:b5:de:
                    da:28:eb:54:dd:e4:76:ea:34:17:55:43:36:c3:d8:
                    f9:70:4d:99:3a:02:37:2a:17:bb:85:a6:95:c8:c3:
                    67:78:bd:b7:3d:23:50:ab:bb:40:52:4b:88:fc:13:
                    fb:d4:58:e9:cb:7d:91:9c:95:4c:a0:81:59:9a:61:
                    ab:52:37:bb:d4:ac:7b:79:96:30:5e:3f:3d:fd:68:
                    19:e8:a7:30:23:60:48:cf:0c:04:a6:3a:cc:3c:e0:
                    11:f2:c2:85:e3:d9:ed:97:22:6b:e0:04:b3:18:a1:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C2:1E:B8:36:26:5A:8D:FC:D3:06:DA:0A:78:07:6A:7A:3B:9F:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04eee67a-2ec7-3b6a-a5ad-be64e7f45d02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:85:b7:71:c3:88:a6:f1:a0:16:08:a0:b6:c3:f8:d3:69:97:
         b7:60:b3:23:bc:f7:f5:eb:a0:3e:f9:7f:84:a8:ff:09:2b:f8:
         64:22:04:9a:d5:22:5d:ef:3c:45:c7:53:c7:47:a3:1c:ad:b5:
         68:e7:e9:75:2f:67:1c:40:33:be:42:88:bd:98:1e:71:5b:fc:
         12:a5:0c:4e:03:f2:1c:ad:c6:41:52:dc:0e:90:7e:5c:e2:c6:
         4e:3e:04:df:4b:7e:bc:7e:f4:f2:12:50:56:78:bf:9f:25:12:
         bc:02:4c:57:02:9a:e8:a1:95:ed:38:7d:37:44:4f:65:8f:e3:
         fb:f2:59:af:29:e1:8c:5f:f2:fb:e2:6f:5f:24:a4:1e:25:13:
         72:9a:f7:e9:46:ce:38:fc:8e:ed:76:98:ca:01:96:8e:0d:56:
         00:13:b9:81:18:6e:95:3f:68:b4:96:25:76:5e:13:ab:3b:c7:
         8d:16:07:75:a6:f4:30:bf:c5:22:f7:31:24:11:8c:16:da:7b:
         65:c4:ff:8d:fa:e0:a8:e6:ba:8e:08:eb:a4:20:d0:d9:bf:47:
         95:91:1a:a7:08:08:7e:a4:ef:9d:1f:cd:00:80:a5:e7:1a:2d:
         ce:b5:d7:91:30:58:b9:a8:7a:ff:c1:b0:1e:8a:f7:ca:bf:87:
         78:19:89:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:23:50 2025 by rpki-client