Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa
File:                     591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa (raw, json)
Hash identifier:          g2Oa5E3jk2VMO4o8/8MOYnot4F88Ebwao+n+M7NLjgY=
Subject key identifier:   68:6F:7F:FB:DB:0F:BF:F9:C3:55:0D:AB:6D:D6:D4:E3:6F:56:C2:AA
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584A268AC02E953598B0BA43C000
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     3695
IP address blocks:        70.36.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c0:2e:95:35:98:b0:ba:43:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=f37dc559-cf5f-48aa-b00c-667c87f830d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f9:ee:c5:a8:56:17:35:2e:e4:90:f5:5e:f5:
                    cb:41:50:df:28:a2:5e:36:23:e4:3a:18:6e:ef:64:
                    6d:95:c3:69:71:1f:62:b9:2e:de:37:08:64:14:42:
                    79:9a:bc:a0:b9:56:90:f3:04:0e:41:f8:ec:da:16:
                    8a:13:ab:0c:4a:fa:fd:7a:f2:4a:bf:f2:55:0d:2a:
                    e4:84:1c:17:8e:75:38:de:31:2a:95:94:ef:68:1d:
                    09:7f:e9:cf:34:62:dc:5d:cc:99:3f:f8:d0:ef:a2:
                    76:9a:d3:47:a9:31:52:b8:e8:a8:da:2e:20:3e:d3:
                    68:91:8d:84:23:e5:25:fb:82:c8:49:c9:b5:6d:21:
                    00:67:70:f2:09:29:ba:23:0a:91:ed:27:59:10:b3:
                    a9:a5:a6:77:18:7e:b4:71:23:4c:eb:a2:3f:88:00:
                    1b:a1:71:e6:64:a8:4a:5f:0c:23:9b:12:9d:49:c9:
                    4d:be:82:40:8e:e0:98:12:95:6b:02:a9:66:25:29:
                    02:e0:17:ad:24:55:f1:32:06:92:c8:19:c2:22:8c:
                    f3:c2:c5:7e:35:01:f2:78:46:a8:76:3f:21:9a:1c:
                    f7:a7:64:a6:60:9d:81:3e:b8:ad:23:52:19:63:43:
                    50:46:ae:6c:90:bd:76:f2:06:c7:fd:ef:69:19:2c:
                    f1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6F:7F:FB:DB:0F:BF:F9:C3:55:0D:AB:6D:D6:D4:E3:6F:56:C2:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b4:70:20:7a:22:b5:d8:a8:30:69:de:6d:00:4b:58:03:c6:
         f7:11:c0:d4:56:e1:d4:4d:a7:98:35:28:53:95:20:63:07:ad:
         8b:01:ac:c8:25:4b:70:ec:43:6b:ef:57:d6:fd:9a:14:14:1b:
         27:0e:82:34:23:36:b8:e1:cb:91:9e:27:20:04:9d:4f:88:bc:
         d0:2d:b8:4f:59:82:87:56:43:62:df:49:60:83:98:31:ea:7d:
         ab:7f:bb:85:40:95:77:91:fb:df:15:bb:23:ea:31:6f:c7:56:
         6b:86:ac:78:2f:4d:ff:db:bc:d7:d6:e4:eb:a2:7b:44:01:8f:
         1f:e1:c5:fe:3e:74:f7:b1:10:20:9b:da:22:44:19:47:4e:ef:
         58:51:85:7c:41:f3:0e:a9:87:84:c3:8c:35:61:5e:5a:4c:ff:
         00:b9:99:cb:8c:c6:80:a0:7a:16:09:8e:37:58:76:7e:13:ba:
         79:d9:4b:c7:0f:1b:c0:69:1c:47:02:bb:2a:59:44:64:5b:9e:
         db:5f:48:d7:23:bb:57:85:7b:e2:be:63:cb:16:25:05:0f:a9:
         2a:b9:2f:4f:2c:92:46:6c:af:e9:e8:38:8d:01:a7:4f:ad:02:
         12:f0:c1:d9:1c:7e:9e:8b:1e:62:18:1b:75:e6:2a:8a:e8:82:
         ef:c1:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:31:30 2025 by rpki-client