Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa
File:                     ea9b1f11-cc10-3201-8210-2b8888464357.roa (raw, json)
Hash identifier:          sFX7isOLy1jNzw/3yAANX5ghrLW+/yFKrl1l/MNbI/c=
Subject key identifier:   B7:00:4D:CA:EF:27:FB:9E:77:74:D3:A6:57:6B:B1:41:31:5C:98:C9
Certificate issuer:       /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial:       010D0C9F4328584A225ABABCBDD9485E259F48C0
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     32034
IP address blocks:        70.35.146.0/24 maxlen: 24
                          70.35.147.0/24 maxlen: 24
                          70.35.148.0/24 maxlen: 24
                          70.35.149.0/24 maxlen: 24
                          70.35.150.0/24 maxlen: 24
                          70.35.151.0/24 maxlen: 24
                          70.35.158.0/24 maxlen: 24
                          204.14.40.0/24 maxlen: 24
                          204.14.41.0/24 maxlen: 24
                          204.14.42.0/24 maxlen: 24
                          204.14.43.0/24 maxlen: 24
                          204.14.44.0/24 maxlen: 24
                          204.14.45.0/24 maxlen: 24
                          204.14.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:ba:bc:bd:d9:48:5e:25:9f:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=ab9c143f-e5f7-40f0-8527-4897f1969b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e0:1e:e1:a5:9a:39:92:b2:bd:87:ef:d9:3f:
                    74:87:24:1f:af:92:7c:22:54:07:a9:2b:bc:cd:ee:
                    17:0c:c0:e4:c5:af:6f:69:eb:06:47:3c:c6:33:fc:
                    a7:f6:5f:af:a7:57:33:31:1e:52:5e:05:5b:e0:29:
                    9c:6c:29:b5:90:03:0e:5c:7a:83:d2:39:68:62:4a:
                    b7:77:93:76:de:8a:00:87:25:10:65:28:9c:8b:31:
                    1c:42:a7:03:5e:bb:e1:47:8d:0d:18:38:a6:3a:53:
                    09:23:64:8b:7f:0e:c7:37:b8:50:34:b1:81:e6:f2:
                    10:8e:2d:ed:ed:d2:91:52:d8:f2:6a:4d:65:2b:29:
                    6d:70:b9:2c:29:3e:db:fc:ec:c3:38:87:1d:ba:fd:
                    db:81:0e:e4:bb:c3:de:a6:16:09:fe:14:22:81:ff:
                    0d:41:3b:9c:10:95:86:f3:ce:12:ff:26:bd:8e:2c:
                    81:d3:6b:b4:09:08:25:f3:90:60:bf:05:c0:77:b5:
                    6e:6b:d3:b6:1b:2d:29:97:68:50:a6:f4:0a:73:72:
                    44:b0:81:8e:4e:91:c8:2d:0a:3b:ff:4e:dd:f6:aa:
                    fd:b1:d3:e8:61:9b:f3:18:86:23:c8:43:3e:9d:be:
                    5e:0f:65:f7:5c:90:ef:61:2a:e7:1b:e4:cd:4d:3b:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:00:4D:CA:EF:27:FB:9E:77:74:D3:A6:57:6B:B1:41:31:5C:98:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl

            X509v3 Authority Key Identifier:
                keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.146.0-70.35.151.255
                  70.35.158.0/24
                  204.14.40.0-204.14.46.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:f6:ce:8b:0f:f2:fa:f8:bf:46:45:3e:e7:f2:7e:f6:11:c0:
         78:66:27:b2:2c:6b:dc:4d:e1:72:ad:7d:dd:68:10:6f:9a:fb:
         2b:11:7e:3d:fe:eb:09:6e:2e:83:75:82:80:99:4c:d6:f0:09:
         5e:48:20:20:62:dd:48:08:88:24:6b:f4:d2:61:c7:66:1e:e4:
         f0:ac:dc:25:8e:ee:45:83:3e:c4:38:39:c1:e1:c4:bf:bd:38:
         f9:22:3d:b6:ac:28:80:4a:63:35:d7:4a:80:ef:6a:6b:7b:25:
         59:d0:3f:6b:01:24:e8:a0:bd:38:a7:fa:07:b2:76:01:89:fd:
         af:d1:90:56:95:52:7c:2f:23:3f:2a:e3:60:67:4d:5b:d4:bd:
         a5:53:97:8e:26:71:26:be:46:67:9d:dd:a4:52:d3:af:5b:d6:
         d7:c0:b2:9b:3c:12:7a:e8:eb:66:1a:ae:38:c4:f4:d6:1e:b5:
         29:93:bc:e8:04:00:7d:30:54:de:1d:25:bb:d2:c8:88:e4:be:
         58:c8:7f:18:67:4f:b8:95:a4:19:b3:46:50:cd:83:05:16:73:
         13:1b:2e:56:e3:9e:ec:65:66:93:de:fa:4f:2b:5b:7c:00:7b:
         7a:09:0e:ee:40:2c:0c:1c:3f:ad:1f:de:13:85:56:1f:06:99:
         9b:60:54:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:04 2025 by rpki-client