Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa
File:                     8e5ed9de-8260-3f23-8a5f-845c119039ad.roa (raw, json)
Hash identifier:          bFd6ZhwC+ETQPAbC0552opDq1fYAi4iqAC0QPN68aIQ=
Subject key identifier:   50:64:5D:EA:58:90:D9:BE:E4:0F:DB:DC:5B:7C:25:93:A0:99:FB:60
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584A268ABF8ADAAB88E9AAAD5300
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     3695
IP address blocks:        70.36.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:bf:8a:da:ab:88:e9:aa:ad:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=13db187d-06ad-4115-a0e6-e6f3459fbf6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4f:7b:2f:df:52:7d:75:fd:d7:69:00:22:8e:
                    d8:0c:fe:ac:dc:72:5b:4b:74:d3:34:3a:24:d6:d0:
                    f6:22:33:c5:cb:1e:ca:13:fb:29:f5:e7:50:2a:3a:
                    22:76:c1:d7:89:fe:48:20:15:3b:ff:40:07:7d:ce:
                    7c:79:31:eb:f7:ad:92:bb:11:de:2d:96:9b:6a:19:
                    37:ba:6a:b1:b6:4f:31:c3:27:7d:8c:d2:16:fe:fa:
                    eb:94:15:b6:fd:98:b0:b2:69:55:1e:c7:04:76:47:
                    57:ec:86:af:a2:ca:1f:f6:bc:a6:1e:bd:f4:59:9e:
                    d8:a3:c6:a1:8e:e8:e0:56:04:e3:63:ce:25:7c:f4:
                    57:b7:82:84:cc:43:07:ae:77:fb:d5:ee:0f:03:78:
                    ce:a6:4b:19:25:dc:e7:ee:a2:09:8d:f4:87:e7:fe:
                    bc:8a:cf:34:cb:5a:06:2b:40:35:d7:ae:0e:a6:66:
                    05:0e:bb:e1:40:c2:82:59:d1:ca:ce:2e:0a:7c:92:
                    00:44:84:e3:f7:2f:5a:c1:23:e4:7c:73:0c:04:01:
                    2f:6c:c4:94:12:1b:72:41:3a:16:98:e7:56:81:92:
                    15:07:aa:ff:ad:dd:c9:45:5c:9d:3d:11:0e:bc:9e:
                    62:0c:2a:c4:d5:dd:c4:d4:7d:50:fa:44:60:92:26:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:64:5D:EA:58:90:D9:BE:E4:0F:DB:DC:5B:7C:25:93:A0:99:FB:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b4:2c:00:1c:18:76:eb:e3:e7:c3:32:57:7d:5d:a4:81:61:
         c5:de:5a:04:cb:0d:a5:f9:73:5e:fa:39:90:d0:be:cc:7e:fc:
         27:5c:bf:31:46:cd:4f:ff:ba:a6:8a:6a:92:e3:e9:3e:2b:41:
         3a:3e:e1:60:18:3d:6d:68:09:67:b9:b0:99:df:8d:1f:f6:c6:
         15:75:6b:f3:64:ea:da:e3:aa:dc:ba:5e:65:20:ef:ce:60:2e:
         16:d8:19:f6:05:a5:bb:e2:64:b1:db:80:1a:51:c3:fd:db:02:
         28:ef:c2:f1:c4:bb:f9:4f:25:7c:3d:7b:0d:ef:5e:4d:29:3c:
         fb:7a:61:2c:c9:21:98:d3:f9:ab:f6:b4:ae:75:30:3e:f5:52:
         69:f5:79:fe:15:86:ea:08:30:d9:04:63:3f:7e:72:c8:aa:7c:
         19:b0:e1:aa:c5:4b:78:24:d6:65:fe:4f:a6:97:ae:b5:47:96:
         49:94:ad:c6:9a:36:5d:f7:77:9e:4c:c8:23:a1:eb:f8:51:d9:
         83:10:ea:e5:c2:c5:ef:54:75:08:3e:36:c8:69:8b:48:6a:0d:
         7d:8d:73:73:ae:95:d8:8f:79:e2:c7:c7:3b:3a:1a:1b:79:cb:
         a7:44:62:9c:35:17:30:b3:e4:5c:87:a9:2f:7e:30:0d:ef:bc:
         ec:30:72:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:07:05 2025 by rpki-client