Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14e5d667-fd27-354f-892c-dfef0139784f.roa
File:                     14e5d667-fd27-354f-892c-dfef0139784f.roa (raw, json)
Hash identifier:          bU83wQf9PfOZuYSCnSEa5UjOVvWG6XbuezV5vYcHWBg=
Subject key identifier:   E2:07:4D:CE:31:1F:87:46:45:79:F4:63:34:14:47:63:23:29:1F:A2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A1035514DA6B62A18D5382D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14e5d667-fd27-354f-892c-dfef0139784f.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        70.167.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:51:4d:a6:b6:2a:18:d5:38:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=e09a827b-31cd-4fe5-a52c-22378f2a5877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:4b:42:6a:78:6a:cb:69:dc:b8:66:4f:32:
                    06:fd:3b:8f:50:45:b7:ad:87:c5:ea:26:77:a8:43:
                    d9:7c:ef:b2:28:c4:7a:63:ba:74:13:dc:34:77:fa:
                    88:69:60:d2:5b:aa:d4:c8:9d:cc:86:d6:94:4f:bc:
                    1f:3c:84:06:c9:0d:9e:df:ca:4f:39:de:a6:f3:9c:
                    a0:f5:3d:bd:57:ce:b0:93:29:26:53:cc:15:a2:19:
                    9d:ab:86:19:30:07:df:75:e7:19:94:c8:6d:75:34:
                    9e:fa:64:07:45:49:7e:3a:57:6b:80:c9:49:89:4e:
                    40:31:29:8f:0c:ae:32:4f:af:52:ab:c4:3b:4f:d1:
                    13:9d:2e:a5:56:78:33:7c:95:22:35:b3:cc:19:6f:
                    27:dd:3a:bd:5a:75:29:03:d9:dd:cc:84:fd:f6:02:
                    5d:21:ff:ea:e6:d7:e6:c2:76:8e:10:0c:c0:63:06:
                    76:c1:e3:0b:94:ca:1e:6c:44:65:38:97:03:5e:05:
                    99:f3:84:d6:5a:e7:11:a0:46:eb:ab:e3:ec:0e:9d:
                    f8:07:6c:b3:0e:15:0d:5b:db:3f:4e:6b:a3:b5:62:
                    fd:eb:38:41:91:85:5f:61:d4:cd:3d:f6:0d:7c:4f:
                    4e:29:7d:39:9e:28:5d:35:08:c9:23:b9:ca:6f:b1:
                    eb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:07:4D:CE:31:1F:87:46:45:79:F4:63:34:14:47:63:23:29:1F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14e5d667-fd27-354f-892c-dfef0139784f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.167.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:56:8c:b2:02:7f:fb:52:64:4c:ec:df:81:63:7d:d5:45:05:
         0b:f9:2b:65:a0:22:c9:44:2b:29:81:25:f8:fa:f8:a3:b4:9b:
         74:1e:ad:2e:18:6f:38:85:af:00:54:8c:77:77:34:48:88:57:
         13:3a:d6:9c:88:14:4f:f9:f7:d9:d1:47:91:1b:43:f3:c0:81:
         f8:52:f8:12:2c:57:ee:e6:17:6d:66:4c:23:3f:1a:8c:8c:40:
         38:b3:b9:c3:37:fe:8b:d2:3e:cb:ff:5b:63:39:c6:c5:c7:1e:
         4b:d7:f4:5a:17:0f:d9:39:02:35:db:b1:22:ba:5a:ca:27:0f:
         33:4d:b8:b9:b1:71:be:16:78:75:da:f1:2c:d1:11:98:23:5d:
         21:b6:d9:ac:e9:56:36:e5:3b:8c:a0:ff:53:f0:44:23:9c:e7:
         1d:dc:84:eb:6f:c2:0e:82:fd:c1:34:83:50:0a:2d:68:18:23:
         65:98:29:5d:8d:d0:cb:9b:5e:ef:fa:58:5c:15:ea:6a:74:ee:
         d7:a2:d6:fd:68:f3:23:a7:65:e3:a4:d1:be:5a:8b:27:e3:fd:
         64:d8:3d:30:a3:7a:28:59:42:55:9e:6c:f3:0b:25:37:32:c3:
         a8:9f:1a:21:a8:dd:46:a3:69:8f:ef:7b:15:ec:c3:24:f5:5b:
         2b:17:d2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:48:51 2025 by rpki-client