Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f13b7d75-9937-3f2f-8fa1-801bffa6326e.roa
File:                     f13b7d75-9937-3f2f-8fa1-801bffa6326e.roa (raw, json)
Hash identifier:          awPQk3U7g55jjn5d389tVoIubyuaKIIgOpqbLXdxAWA=
Subject key identifier:   DF:28:28:8A:8F:CD:35:72:9E:5E:AF:1D:EF:5C:CF:55:E8:9C:E1:2D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9300B44CF9BB4EFF4CC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f13b7d75-9937-3f2f-8fa1-801bffa6326e.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        76.70.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:93:00:b4:4c:f9:bb:4e:ff:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=84a9891b-e9a0-4ce8-9a47-f19618022cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7f:cc:9b:0a:0f:27:6f:ed:a9:dc:e0:4f:db:
                    79:20:b8:cd:41:1e:15:f5:e8:e8:4e:aa:f8:c6:90:
                    07:ce:3a:72:c5:e5:30:e6:89:b8:f1:1f:fc:d6:97:
                    10:d1:bc:2a:23:b1:71:48:7d:10:41:41:11:23:3e:
                    65:3b:42:2f:88:7b:ee:e8:b5:73:aa:b7:29:2f:e6:
                    40:48:60:81:12:3b:e3:be:88:c2:1f:a4:a4:82:5c:
                    e8:f8:18:e3:e3:f2:10:cf:71:8c:e1:23:97:5b:28:
                    b9:c4:b1:0d:66:4e:b1:3f:a5:ee:b4:02:6f:7d:06:
                    9a:e0:c4:3a:db:be:d3:e9:54:0c:e3:3e:f2:9f:9c:
                    03:af:00:fa:ca:bc:21:39:0c:eb:eb:c1:90:b4:5e:
                    3e:2c:08:d1:87:f2:1d:39:e8:31:cc:a8:fb:51:86:
                    29:5f:43:4a:83:24:5a:d3:c5:76:c1:a4:5b:5e:f1:
                    3a:68:7b:37:3e:79:cb:c5:8e:6a:40:5c:70:22:dd:
                    7f:fe:6b:f2:62:df:ee:05:68:35:13:0b:87:91:58:
                    db:bb:19:c3:1f:6a:45:e5:10:3f:ba:0c:6d:60:89:
                    ba:f1:05:c2:4e:d6:b3:cd:c8:3a:81:81:33:c5:9e:
                    44:65:8b:59:f8:d4:9f:0e:ae:2e:ae:10:7f:fe:78:
                    c2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:28:28:8A:8F:CD:35:72:9E:5E:AF:1D:EF:5C:CF:55:E8:9C:E1:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f13b7d75-9937-3f2f-8fa1-801bffa6326e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.70.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:1c:31:97:79:14:b7:0a:d2:60:cf:9b:84:4c:28:00:48:c3:
         c3:a2:44:13:bc:c2:d3:93:f7:d4:29:0f:ee:f5:c1:a2:cb:ea:
         4b:10:cc:98:c9:d9:e3:ff:0c:bf:ed:66:33:6d:2d:22:19:28:
         eb:f6:6e:05:80:81:3f:25:30:03:75:70:c7:e1:9a:fa:95:64:
         78:31:44:2a:b3:99:66:79:4a:41:de:02:95:e3:ca:d3:a7:4e:
         3a:11:bf:fa:6a:b7:46:b0:4a:18:53:61:83:d0:ab:db:bc:5e:
         5f:b6:b8:b1:00:a6:5f:46:8d:02:66:a0:7e:56:04:df:6c:bb:
         4b:eb:b4:e8:fe:4a:ea:c9:50:f6:d4:40:95:cc:fb:0e:e2:21:
         cc:54:37:78:2d:c6:a9:d2:f8:42:fc:1f:97:67:33:d3:f5:3c:
         51:d9:1e:c4:82:93:30:3d:46:0d:e3:97:75:9c:bd:39:ea:ad:
         49:68:7d:99:bc:43:7f:37:ab:1f:49:73:3b:1f:b5:8c:e1:b9:
         2c:cd:a5:5f:46:58:28:9f:af:86:2a:71:b6:31:b2:b5:71:8a:
         c2:d1:4f:be:cd:7e:98:59:ba:72:15:a9:01:65:aa:86:82:57:
         27:ea:a7:6b:d4:4d:a9:46:14:97:6c:1a:12:32:e6:39:57:5b:
         2d:75:61:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:43:59 2025 by rpki-client