Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/be2cd3aa-3e0d-3676-8e37-0434e6e1412e.roa
File:                     be2cd3aa-3e0d-3676-8e37-0434e6e1412e.roa (raw, json)
Hash identifier:          iVDjwQ+dPNEX0ieyMc1ZH/sTXgfBWBXJyTc4hhtD5TE=
Subject key identifier:   1B:D4:FF:47:67:26:55:EC:B0:6B:F6:3E:73:F6:39:F8:95:C4:FF:5B
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F432858495C244048950EB7CE7FC31450
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/be2cd3aa-3e0d-3676-8e37-0434e6e1412e.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        70.42.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:40:48:95:0e:b7:ce:7f:c3:14:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=1e6555b8-94ad-4579-8c7f-517de862bbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c8:55:e2:12:1c:6b:b1:d0:22:a1:93:a0:e5:
                    3f:30:e9:cb:d6:7f:44:6d:de:fc:9e:3b:71:f2:38:
                    aa:9c:b9:2a:fa:88:98:30:18:f2:8c:5e:90:0c:1b:
                    cd:e5:6d:b7:b8:da:e8:32:04:eb:ae:c6:fd:2b:20:
                    41:66:03:a6:f6:5c:8d:d1:2d:18:01:3d:06:0a:94:
                    b6:91:cb:27:76:2c:a7:77:c9:22:9f:5c:69:fb:11:
                    e6:4e:60:de:b3:cd:8d:59:5a:21:60:00:6d:65:80:
                    d9:f5:ab:b6:38:1b:b1:cd:ae:c1:0f:22:32:da:8e:
                    1a:c5:35:02:c4:b6:5c:b5:04:58:9f:20:9d:1e:56:
                    02:0b:03:3a:ea:63:cf:e0:fa:96:a1:00:91:7e:c9:
                    08:9e:02:bb:ab:e2:09:f9:10:d1:fb:f8:fe:9f:53:
                    87:cb:d0:0a:bb:d1:25:fa:24:38:a6:fd:10:ec:1d:
                    22:40:db:7d:a1:53:cc:66:d0:c6:d2:6b:0e:cc:3e:
                    67:41:b1:05:78:83:2c:28:34:a0:c8:a2:ee:5e:b5:
                    60:1b:f7:15:af:d9:55:96:d6:af:ea:3d:26:8d:82:
                    63:2c:27:e7:29:c0:50:10:53:b1:f1:45:cc:2a:08:
                    e2:97:ad:e9:01:af:2b:bd:d3:ce:44:ce:c9:61:20:
                    8e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D4:FF:47:67:26:55:EC:B0:6B:F6:3E:73:F6:39:F8:95:C4:FF:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/be2cd3aa-3e0d-3676-8e37-0434e6e1412e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.42.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:5e:e3:0a:4b:87:76:a2:75:5b:8f:d2:8b:11:0b:f1:e4:52:
         9e:23:cb:ee:71:c1:b3:d8:0d:a8:c9:45:bf:e0:4c:d5:df:2c:
         21:87:1c:50:fc:72:e6:67:45:94:6b:3b:eb:ba:54:b9:da:da:
         df:81:e1:a0:a9:8f:df:2d:cd:32:8d:af:96:27:f8:a7:02:d0:
         b9:30:8f:1d:5b:6b:d1:fa:17:b8:02:98:8f:8a:9a:f1:ba:2a:
         1c:90:61:55:ce:74:28:b2:9d:ee:a2:23:11:bb:d9:41:78:94:
         a7:68:4c:20:ec:c2:0a:2c:2d:51:d5:dc:a4:98:1f:19:67:4d:
         65:b7:5f:a3:87:70:82:85:af:81:16:be:9b:23:c0:71:0d:b2:
         b9:cd:76:bb:11:6e:58:2e:f5:0a:c7:d1:44:d7:31:14:2c:f2:
         92:6a:50:87:e4:fe:52:ce:a8:16:77:ac:93:c5:3b:c7:2e:1d:
         9f:42:1d:37:ff:ba:93:5c:9d:0e:3f:30:76:84:f6:22:6d:13:
         49:88:e2:71:1b:fa:53:f5:d2:9e:20:ac:a1:39:73:16:3a:5e:
         8d:50:30:b5:31:98:b2:65:d3:4e:f8:f2:81:51:0a:f6:aa:14:
         e2:3e:4c:77:26:5b:00:7c:29:bf:fa:ac:34:61:ed:25:f2:a8:
         67:1c:be:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:20:54 2025 by rpki-client