Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d179b7f7-9cd3-3975-b459-8f0c4ca28ea9.roa
File:                     d179b7f7-9cd3-3975-b459-8f0c4ca28ea9.roa (raw, json)
Hash identifier:          yWU/hcQbLz9DgquWjFHi/B6Wu/pDbznEFVm2yDTbH7c=
Subject key identifier:   41:72:29:EC:34:45:78:FC:7D:0F:3B:0B:14:B3:1F:2C:37:75:91:BB
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C01C001DD5FAF16D1068C0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d179b7f7-9cd3-3975-b459-8f0c4ca28ea9.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        70.32.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:1c:00:1d:d5:fa:f1:6d:10:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=12a1a6b2-7a51-4c35-a243-45b4d2ceb1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:70:80:3e:40:e0:55:7d:34:44:14:81:9a:96:
                    ed:98:47:ac:80:49:2e:11:83:e6:ff:60:2b:82:be:
                    27:ce:97:ae:23:b5:c8:e4:38:47:84:d6:4f:c0:35:
                    55:cf:9f:3d:1e:23:66:b5:db:8d:cb:e3:95:54:a5:
                    77:b7:50:dc:23:81:f3:ef:83:50:af:7f:2d:56:35:
                    9a:b6:d6:b7:c0:95:66:98:2c:0d:98:01:dd:11:f8:
                    7e:06:be:86:a6:85:d6:90:40:df:82:64:fd:a8:58:
                    18:1b:a8:28:e9:0f:bf:05:e0:f2:cc:ff:cc:1e:94:
                    c4:5d:d8:9d:59:dc:57:da:81:bc:64:a1:43:ac:9d:
                    83:6d:3a:ff:6b:43:80:42:2c:7a:be:b4:6c:7b:3e:
                    1f:f7:87:0f:fc:13:79:fd:a3:6c:3b:9b:f6:8d:5a:
                    2c:a4:56:da:8d:1f:21:c0:4f:66:8e:7e:bc:fb:92:
                    11:4d:32:95:7a:c6:28:69:36:61:69:03:68:e1:74:
                    8e:09:ed:f8:5f:84:a2:b7:00:38:7b:e4:89:8c:7d:
                    3d:2d:39:9f:ae:d5:13:64:d0:1a:00:6d:e5:e7:85:
                    b9:76:56:0d:6a:e1:2d:3e:1a:ba:77:3a:33:7c:fc:
                    9a:ff:2d:0b:c4:92:a8:e8:ed:f7:56:d7:88:70:72:
                    02:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:72:29:EC:34:45:78:FC:7D:0F:3B:0B:14:B3:1F:2C:37:75:91:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d179b7f7-9cd3-3975-b459-8f0c4ca28ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:81:ab:b8:f5:49:f5:e7:ab:ed:43:4a:44:a2:7d:4d:16:49:
         af:33:dc:bb:53:30:60:bd:18:3a:8f:2a:91:91:91:32:92:22:
         30:3c:8a:5d:35:81:4e:9c:e1:b0:91:5b:11:7e:ba:42:42:f6:
         75:4a:64:30:b4:f6:8e:2d:b4:08:ce:c1:bf:9e:6a:97:cd:67:
         c1:2e:ed:de:bf:34:d1:55:d5:38:b2:5b:4f:ad:fa:e7:9b:c4:
         dd:f7:9a:36:d9:ee:ba:be:9b:2a:94:4f:45:24:c3:87:84:8e:
         68:6a:79:01:8b:ad:6d:dc:d8:8a:50:dd:da:f1:a3:4f:c8:43:
         0c:22:b9:22:09:0c:28:7f:18:12:89:d4:84:5e:b3:3d:8d:99:
         58:f2:0a:42:f2:ff:ec:b2:47:80:24:9a:77:84:00:08:26:6a:
         37:a4:28:07:b6:01:0c:ab:0d:b4:53:28:f6:ac:02:34:1a:c7:
         58:8d:e1:5d:26:eb:71:65:bb:cd:b4:12:df:c6:1a:13:57:af:
         68:c6:98:54:cb:20:fc:0b:c2:ba:bb:54:0f:12:62:33:f3:9b:
         65:9d:3d:96:d5:26:28:25:ee:b1:fe:d0:45:82:b9:39:d8:e0:
         5a:b5:8d:78:9c:7b:b5:f0:97:d9:2f:74:5b:d8:6f:04:0d:05:
         c8:91:64:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:48:32 2025 by rpki-client