Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/7e7dfc09-f6dc-3df0-92f2-221c7cc8743b.roa
File:                     7e7dfc09-f6dc-3df0-92f2-221c7cc8743b.roa (raw, json)
Hash identifier:          xU21SPK2/Ry4BQ7NiwSAhXSGHerme2SZQbWMeBG48fE=
Subject key identifier:   DC:A9:1E:F7:8C:70:D9:1E:39:3B:23:5A:C9:A2:9E:86:A1:44:9A:EF
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584A268ABFD6325FF2117D735100
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/7e7dfc09-f6dc-3df0-92f2-221c7cc8743b.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     3695
IP address blocks:        70.36.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:bf:d6:32:5f:f2:11:7d:73:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=83d5d10c-8401-4a72-b05a-12d5b53c6b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b5:b0:ab:e2:fc:8a:e9:24:d5:54:87:1b:f6:
                    0f:b0:fa:9c:ef:33:ce:e3:b8:2b:59:98:7a:24:e3:
                    c3:8d:cd:3f:05:bf:45:82:c5:bd:50:d7:27:f2:df:
                    fa:56:e3:15:47:b6:65:53:dd:f4:e6:86:86:9f:25:
                    75:34:43:e4:f2:18:b6:58:6b:09:d2:f9:e0:ed:31:
                    20:83:ab:8f:0e:3c:ad:60:61:28:a8:19:a9:03:b6:
                    0c:96:d0:50:3a:b6:93:7b:36:da:72:a3:98:d5:80:
                    af:1e:6d:cc:70:ca:16:87:d0:1c:0f:c6:1b:ff:dc:
                    f1:97:ca:f3:a5:18:ff:4c:96:22:15:fa:97:88:ca:
                    f5:93:f7:1f:bb:3d:ec:2a:82:2f:c4:a3:63:98:4f:
                    fb:f6:79:c6:f4:53:aa:35:14:2d:1f:88:e2:f7:27:
                    eb:ac:1f:af:27:bd:3d:dd:bd:66:1f:e1:59:fd:a3:
                    12:6a:ad:66:c4:71:9c:23:ee:98:84:d2:54:21:ca:
                    ee:42:05:31:9a:10:f0:d1:67:fd:d8:90:78:61:a7:
                    25:67:e3:69:b3:b6:0a:c2:36:a4:d9:20:e1:dc:00:
                    89:b4:3c:43:4e:8e:2a:7e:f7:9b:61:c7:16:bc:c2:
                    6e:66:fe:c3:37:19:f6:12:3e:94:48:6b:f3:1c:bd:
                    ce:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A9:1E:F7:8C:70:D9:1E:39:3B:23:5A:C9:A2:9E:86:A1:44:9A:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/7e7dfc09-f6dc-3df0-92f2-221c7cc8743b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:69:0e:5a:13:65:cf:f5:e7:e1:59:90:cb:a2:64:95:52:06:
         a4:c1:c0:97:b3:1e:91:14:1a:3b:88:43:fe:dc:ac:03:6e:1d:
         51:99:d5:85:a2:c8:7e:47:ef:88:48:20:df:d1:7a:06:6d:3d:
         cb:08:ce:af:91:1e:b0:dc:e5:64:74:9c:8a:1f:65:f0:f1:2e:
         19:6d:fc:78:77:ce:6f:e5:35:36:b0:a7:d0:af:e1:81:69:7c:
         84:61:3c:27:9e:95:cc:6b:03:b9:86:97:e5:da:df:46:d7:b6:
         59:bb:b0:99:13:cd:8e:30:a7:da:5f:8c:6a:de:19:36:5b:28:
         7f:48:30:11:c5:35:36:7d:bd:60:28:e3:cd:8c:41:fd:e8:e5:
         0c:c0:9d:17:5e:b2:74:9f:e3:6e:5d:c5:b1:15:d1:82:89:aa:
         3f:5f:7f:9f:21:e4:8f:30:0f:dd:b6:e2:8d:37:8f:ca:56:77:
         df:c3:23:c9:ea:f4:33:fc:e9:7c:12:ce:39:ce:c3:a8:a6:50:
         60:5f:54:97:58:c8:ad:ba:8c:ed:73:60:35:cd:3b:94:71:0f:
         85:fb:58:e2:cb:e6:0b:13:f2:e6:2f:ee:9e:76:20:8a:80:59:
         e8:8b:9e:92:91:a6:0b:35:6c:32:6e:e6:05:75:37:8d:a2:28:
         fa:8d:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:51:20 2025 by rpki-client