Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/024a5f29-c6d1-392d-99e1-436589772a96.roa
File:                     024a5f29-c6d1-392d-99e1-436589772a96.roa (raw, json)
Hash identifier:          dT0ldK6gr3BtpSqwbVfTtTgMJuZaofBThfSYeRsYJMw=
Subject key identifier:   12:59:E2:E0:48:9D:6D:3F:59:27:CE:4D:07:FA:01:41:BC:77:72:0C
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584A268ABF608EF2857B498E4EC0
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/024a5f29-c6d1-392d-99e1-436589772a96.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     3695
IP address blocks:        70.36.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:bf:60:8e:f2:85:7b:49:8e:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=4223c64e-eca8-4094-bdeb-6f5984505d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:17:82:5b:8e:39:68:3d:cf:45:cc:31:13:47:
                    7c:89:87:ec:6a:c5:f2:4b:b2:06:73:5a:34:f9:50:
                    04:27:28:4b:35:58:9f:b8:18:5f:27:ef:bc:9b:d5:
                    72:c2:91:eb:63:e6:59:94:e9:0a:b3:6d:42:f9:6f:
                    bf:44:a7:79:40:48:e1:3c:49:c3:6a:70:4c:ef:ab:
                    f6:91:48:fd:d5:80:97:b2:f3:5f:1e:58:16:7c:0f:
                    b3:e7:a4:95:65:2a:a1:c8:7b:c3:05:c5:31:bf:5f:
                    2a:8f:be:12:00:6b:80:32:90:02:75:da:26:c4:ab:
                    92:1b:4c:b3:22:3b:53:f1:41:87:3f:35:da:57:88:
                    48:f3:8b:ac:7d:f9:36:e7:61:37:40:7b:c1:90:b0:
                    f4:fc:76:41:fb:c9:3c:a5:bf:a3:e0:05:36:5e:57:
                    f8:c8:ea:54:8a:d5:ec:6d:42:b3:cf:e8:ba:99:41:
                    81:13:aa:94:29:65:5c:f7:79:90:2d:15:c2:d3:c2:
                    46:be:ea:ae:a2:df:e6:cb:1c:ad:00:dc:f5:84:52:
                    e6:49:5b:69:d2:4f:66:01:66:aa:e1:86:cd:2c:0c:
                    84:c6:10:97:11:c4:89:0a:5b:4d:aa:e2:2b:b0:6f:
                    b3:2d:6a:99:1f:47:32:80:c5:3b:68:e9:0f:09:d2:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:59:E2:E0:48:9D:6D:3F:59:27:CE:4D:07:FA:01:41:BC:77:72:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/024a5f29-c6d1-392d-99e1-436589772a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:e4:94:76:fd:49:e1:40:62:46:94:aa:2d:f5:06:59:5d:22:
         3a:a0:bd:52:8c:09:c6:b4:0e:69:63:c5:46:42:00:9e:39:4c:
         60:5d:7e:f2:c7:34:be:cc:3f:08:e7:8a:d6:f4:99:1f:e8:98:
         1a:b3:2e:c2:d2:e8:0c:43:15:71:76:f9:7f:79:41:e7:69:9c:
         53:5f:44:63:11:64:e6:1d:3c:18:85:07:b8:01:31:1a:c5:09:
         32:2c:3a:05:b9:8a:5d:0e:12:9a:e8:4d:e3:c6:3f:70:1b:26:
         cd:c5:70:af:42:ab:02:77:86:e7:59:ec:70:9d:09:f8:7d:13:
         88:3e:d3:59:1f:5c:32:57:e7:61:cb:c5:3e:7e:18:53:c4:69:
         3a:e2:04:70:6a:e4:e5:a5:fc:32:a0:4e:11:76:9c:0b:c1:50:
         30:c1:4c:bc:dd:2d:cd:6e:71:54:9f:31:ae:cf:ef:ba:ab:0f:
         ed:22:6f:ec:1b:5e:4e:98:08:1a:c5:1f:1b:30:d3:a4:21:b5:
         92:e6:92:da:f4:47:0b:60:ed:51:a6:53:a1:40:7e:c5:87:52:
         78:f3:b6:f8:e6:f5:fb:b0:fc:b3:fa:07:a3:32:fe:7e:83:c0:
         a0:5a:49:05:79:7a:f6:8f:89:26:e9:ea:07:03:02:a1:05:6d:
         88:bd:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:59:26 2025 by rpki-client