Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dcf6540f-db03-39eb-9195-895887850a61.roa
File:                     dcf6540f-db03-39eb-9195-895887850a61.roa (raw, json)
Hash identifier:          bFoXMFNu/RGEQlJNzpJzdC69W4z0nfnJtjB9OfjpSo4=
Subject key identifier:   DD:A9:D5:FC:2A:05:E7:52:4B:04:F4:13:8D:89:4D:A6:E5:C0:72:79
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA90A6F656E97B80BE4080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dcf6540f-db03-39eb-9195-895887850a61.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        70.28.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:90:a6:f6:56:e9:7b:80:be:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=0f0c1705-bf9b-4aa7-9daa-0fe6fefcbb68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:ab:1e:33:99:2d:57:c5:95:bd:54:14:71:
                    19:27:73:61:13:b7:77:34:9d:22:53:d5:56:8b:d8:
                    02:2e:8d:bd:8b:c2:de:e4:a7:53:38:8e:9d:91:9c:
                    96:27:b0:6d:59:b0:5d:c0:49:07:39:3b:0e:74:96:
                    8c:57:c2:61:2d:c3:b6:8b:05:00:38:ee:62:b0:66:
                    be:43:d5:c5:7c:ff:34:f0:c4:c8:25:7c:98:6a:4d:
                    e0:a3:bc:25:6f:94:95:11:e5:0c:b1:e4:de:94:26:
                    bc:3c:e8:4c:05:8c:39:48:74:38:53:eb:f8:81:b9:
                    0f:74:c4:77:fd:36:34:e1:63:a6:59:f2:9b:91:c8:
                    0a:58:ae:69:4c:88:d3:83:f5:3a:2d:57:d9:62:d0:
                    40:d4:2c:65:0e:93:97:17:8a:33:83:27:b4:ca:ce:
                    b6:18:c8:d2:0b:2d:dc:9c:21:9b:fa:3c:c9:33:25:
                    5d:70:7c:7c:88:c2:b0:72:71:69:d8:19:0a:ed:af:
                    b3:b0:7f:98:1c:8d:de:66:b6:59:d4:e6:a5:18:01:
                    42:bc:75:d2:88:e1:62:83:ee:a5:b6:1a:c9:47:a0:
                    85:64:e2:36:b4:36:e4:10:26:f5:eb:74:de:6a:fc:
                    19:9a:71:c9:e6:61:2e:de:a6:00:f3:2e:f8:bd:b1:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A9:D5:FC:2A:05:E7:52:4B:04:F4:13:8D:89:4D:A6:E5:C0:72:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dcf6540f-db03-39eb-9195-895887850a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:6d:2a:1c:af:ad:cc:38:0b:19:1d:b7:21:41:12:01:38:33:
         3b:3b:42:6f:07:d4:44:2f:33:c8:0b:8c:70:b9:4a:5c:cc:d3:
         3a:32:60:d7:6d:b9:13:62:74:87:be:b6:2c:c4:b3:3b:ed:29:
         13:35:95:a0:80:46:65:03:8e:e1:cb:b5:c0:93:dd:06:eb:c6:
         de:26:1f:dc:5f:97:bd:c6:6a:8a:29:53:48:9e:c8:ab:bb:41:
         61:6e:a4:e5:02:b9:be:b9:c2:63:03:69:51:33:51:f6:77:4f:
         af:f3:ee:fd:9b:ab:7e:2a:e2:f3:1f:0b:25:fa:d2:a2:50:e3:
         65:c2:42:0c:77:1d:79:85:d4:25:57:7e:94:eb:9b:16:f9:cf:
         20:c4:70:94:bd:16:6f:2d:62:fd:0e:c5:bd:0a:0b:1e:7b:41:
         cc:c5:a2:6c:e6:c1:43:29:54:90:fa:c2:22:9a:ee:a1:c3:46:
         40:0a:12:d9:3f:9a:f7:a8:99:0f:30:fc:30:79:bc:d9:e9:fa:
         30:5f:ed:16:70:b7:91:c7:2f:d1:e2:55:17:08:ba:35:b9:e0:
         01:78:30:01:39:b2:7e:af:25:b8:51:a0:27:3d:67:c0:ca:b2:
         6a:fd:c2:b5:12:66:5c:53:9e:bb:38:aa:25:38:ed:26:b7:81:
         10:7e:cc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:28:39 2025 by rpki-client