Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7927f230-4eda-3069-9826-75cf6971a65e.roa
File:                     7927f230-4eda-3069-9826-75cf6971a65e.roa (raw, json)
Hash identifier:          eQTz6xBnewqgdKKW9gG/w3X4q0DD1qwI6g69q4HYj0s=
Subject key identifier:   39:87:58:C0:57:FC:81:24:99:39:D8:04:54:1F:72:CA:C9:D6:4C:C2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9064CF54F53C28CE94BC
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7927f230-4eda-3069-9826-75cf6971a65e.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        70.28.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:90:64:cf:54:f5:3c:28:ce:94:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=527989dc-70b6-42f9-b1bb-49ed6beb7733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d8:72:15:47:3a:21:c5:58:57:08:8f:95:c7:
                    61:10:c5:bc:33:3a:9f:a7:a5:39:ae:53:56:6d:9a:
                    43:12:c2:9c:2a:92:30:fc:95:e1:11:4e:76:64:5f:
                    47:02:82:f7:ea:92:e1:bf:a9:ae:0b:a6:81:d4:a0:
                    2b:ce:57:ce:03:1a:5d:8e:d3:e5:80:aa:fc:a9:3c:
                    da:11:60:37:f9:da:86:76:98:5b:4e:f6:cf:3e:43:
                    12:74:d7:b1:e6:06:b0:e4:af:13:4a:b2:03:fd:70:
                    03:4b:dd:7a:02:2c:a0:eb:5b:fd:c5:8d:b2:4e:7e:
                    dd:74:d0:7a:a2:3d:0f:c8:23:2d:fa:8a:ab:cf:2b:
                    e5:6f:a7:2d:15:77:4d:79:fe:e2:31:93:18:c0:17:
                    b5:c1:64:f1:85:57:35:73:67:33:4d:c0:77:a5:ad:
                    82:94:91:6d:d5:c1:1c:5d:c3:70:5b:50:44:4d:44:
                    8a:71:99:6e:65:17:60:ee:45:9f:4e:2c:d1:6a:2d:
                    b6:b0:c7:0d:22:34:78:e5:d6:b1:45:98:7d:6e:1f:
                    d3:a6:98:90:ca:b4:08:3b:ff:99:5d:8f:85:92:0f:
                    19:7c:cb:fe:84:9b:64:17:01:17:ea:34:58:8e:1d:
                    10:8b:d6:ec:b0:eb:7c:a8:28:c4:35:a7:d9:d6:38:
                    81:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:87:58:C0:57:FC:81:24:99:39:D8:04:54:1F:72:CA:C9:D6:4C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7927f230-4eda-3069-9826-75cf6971a65e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:dd:c8:a7:b2:0a:62:fd:38:a2:fb:45:d8:a0:b0:3a:71:cd:
         a5:bb:08:34:fc:b7:e2:5e:8e:1f:00:3f:e9:c3:48:0a:b2:17:
         bb:cb:db:74:89:a7:f4:4a:51:30:b1:2f:09:0a:c1:a3:91:f9:
         f9:8e:06:e7:38:c3:98:13:19:7e:30:e8:d7:87:d8:b5:7f:5e:
         92:79:2b:86:9a:99:2f:40:06:88:28:c5:7e:b3:b6:54:49:c8:
         57:a8:49:d0:f8:51:29:2a:3d:a2:9d:0b:47:29:91:76:86:48:
         6d:82:13:ae:d0:58:a3:d8:74:72:f9:88:3d:7e:9d:4e:3d:2c:
         09:07:89:c1:c9:56:76:2c:2f:18:f4:4a:24:b4:80:33:82:fa:
         25:82:ab:38:89:04:9b:3a:0a:ab:d7:e9:80:f1:1c:40:41:7a:
         be:55:80:4f:ba:17:35:97:a7:37:f6:08:35:e0:02:84:50:b6:
         b8:29:d3:f2:3d:8c:70:64:e2:66:09:4a:ee:0d:a3:7d:7a:b0:
         a4:f3:23:47:18:57:74:fa:3f:7c:e7:6e:31:ee:2e:0e:fc:36:
         0c:24:6a:f7:60:77:eb:90:57:76:6f:f6:95:ce:d3:7d:6f:4d:
         7e:eb:05:7b:f7:3b:4a:a4:5f:84:cc:e2:19:10:bb:2b:dd:4f:
         49:b2:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:51:39 2025 by rpki-client