Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/87837873-480f-35e6-a17b-59371b719b00.roa
File:                     87837873-480f-35e6-a17b-59371b719b00.roa (raw, json)
Hash identifier:          iiwMvbRa54K5guj8H/QYHIVnQUb9TWfP/n5aZLULLXQ=
Subject key identifier:   97:2E:15:9E:0C:34:08:20:10:AF:45:08:87:19:93:85:11:20:86:F2
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F432858495C24406F9B9D13A7443D417C
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/87837873-480f-35e6-a17b-59371b719b00.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        70.42.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:40:6f:9b:9d:13:a7:44:3d:41:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=b52afd29-a49f-4731-a28f-7ddad476f33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1b:80:8d:3c:1b:0d:87:e2:7e:d6:89:76:8f:
                    87:bb:33:3c:d1:fa:f3:ce:43:32:c6:72:11:1c:8f:
                    46:ea:76:6e:de:65:3c:1f:e5:49:99:3c:bb:f3:4c:
                    59:18:0d:59:c2:1a:fa:9b:35:dd:d8:b3:64:99:e2:
                    b4:91:43:3b:43:69:0c:8a:7d:42:f0:53:f2:c8:dd:
                    1e:cb:6c:3f:ab:e3:b8:27:a9:dd:db:4c:94:45:e4:
                    96:df:06:ec:7e:f1:c1:07:1d:f3:fc:d6:be:1e:e3:
                    f0:30:ce:94:58:11:fd:98:95:81:67:6c:1c:ca:73:
                    36:60:20:10:44:40:62:34:25:28:4c:c4:39:1c:b9:
                    bc:04:3f:b3:52:57:6e:49:3b:6a:16:cf:d5:3d:65:
                    6b:62:2e:5e:13:eb:32:f1:0c:46:80:a7:ce:8c:ee:
                    89:b5:29:68:a0:30:c9:af:8b:44:90:53:6f:70:02:
                    6b:e2:70:f0:b2:41:16:ca:b4:48:74:c5:89:2f:cc:
                    b9:6d:5b:3e:c8:cb:56:ee:9c:4d:9f:11:46:f7:54:
                    9f:ce:3f:c4:dd:bd:35:48:ee:95:66:a7:e0:b0:9a:
                    6c:48:5d:25:77:5b:c6:f5:26:d5:0f:03:15:11:f8:
                    f2:47:96:4a:6d:c6:de:ff:d8:f6:e8:f9:6d:fe:62:
                    5d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2E:15:9E:0C:34:08:20:10:AF:45:08:87:19:93:85:11:20:86:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/87837873-480f-35e6-a17b-59371b719b00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.42.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f3:43:5d:73:e2:bf:f5:9a:97:9c:53:60:ce:4a:1b:aa:2b:
         da:8a:ec:ba:5f:d8:16:e1:c2:de:f9:ef:4b:f4:67:21:21:a3:
         33:df:80:c5:28:a6:dc:19:78:fc:5d:0b:7f:4a:c8:58:ee:1d:
         e3:b9:b7:7a:c8:88:5b:85:d2:7c:f5:f9:43:0c:83:49:ee:ac:
         23:af:b0:92:5e:f0:c9:51:84:11:5a:87:c2:79:c6:c7:8e:42:
         70:03:1a:87:db:2d:67:e2:13:f4:d3:06:17:4c:13:8d:23:89:
         9b:55:02:72:e1:47:09:a0:04:0a:a7:80:6c:49:9b:12:25:d3:
         ab:3e:c6:6f:96:00:25:dd:05:fb:71:68:15:1f:bd:33:e7:8b:
         d3:9d:4c:32:97:a3:63:ff:61:c0:57:f0:37:1f:94:41:9d:d5:
         86:a4:23:43:0b:97:db:54:83:50:ff:83:b0:25:8f:65:4d:7a:
         ca:25:fd:a4:08:55:d7:5b:35:9e:6c:eb:88:46:65:db:9c:53:
         0f:09:61:ed:29:a0:58:23:1b:70:df:2d:69:72:55:43:ae:f3:
         48:3f:67:e1:8e:32:e5:f3:7c:ce:90:ec:65:9c:1a:f2:54:8b:
         6e:97:a2:87:af:29:06:f5:30:a4:0e:57:17:b5:b8:1b:95:b3:
         35:77:9f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:17 2025 by rpki-client