Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2e8aec8c-21e7-31f6-8ff3-9da670688bee.roa
File:                     2e8aec8c-21e7-31f6-8ff3-9da670688bee.roa (raw, json)
Hash identifier:          KidYjZbFICeTWtF1Jo3pSDoPQCAucFhbtlIiAxgWa90=
Subject key identifier:   93:20:7D:62:C6:78:14:57:B4:1C:AF:C7:02:7C:78:FC:8B:6A:64:3F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1619233673A984DE9C1B840
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2e8aec8c-21e7-31f6-8ff3-9da670688bee.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        70.62.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:92:33:67:3a:98:4d:e9:c1:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=c74ec684-3476-4289-9b79-91f8c78314d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:23:86:a9:a2:3c:ea:45:f6:7d:cb:d0:5c:
                    f2:03:1f:f8:54:10:31:eb:42:4d:0a:70:94:22:05:
                    7b:3d:8e:2b:fd:74:3b:d2:26:b3:40:ed:32:ba:0a:
                    63:e2:76:51:fb:9b:16:6b:5f:5a:7d:fc:58:9e:16:
                    4d:4e:4b:6a:42:01:e4:22:30:54:25:70:ba:e2:a9:
                    4c:67:ec:19:37:81:b1:72:9a:39:84:93:c7:16:dc:
                    51:60:bf:49:e6:c3:94:bc:fc:66:0c:70:37:ab:63:
                    93:f0:b3:2e:4c:ce:12:4d:ba:05:c3:f5:22:de:50:
                    e4:22:13:5f:f7:f4:5a:e8:0a:05:03:79:83:4c:d9:
                    32:ac:54:1e:b9:cf:fa:7e:d3:81:08:b2:69:5d:b3:
                    c3:9a:38:28:fc:ed:73:47:7d:8e:87:d9:97:e4:f2:
                    0d:1f:c4:c9:92:e4:53:6b:06:fc:2d:e2:42:ae:59:
                    11:a6:7f:76:b0:86:67:eb:92:e9:3a:66:d2:ba:f2:
                    5e:dc:2a:d7:4f:1f:3d:d6:54:33:9b:24:06:15:92:
                    ca:38:c7:6b:ef:b2:3d:46:2c:ea:55:5d:40:53:0e:
                    94:bd:19:4b:0f:b8:41:4c:e5:c3:0e:da:31:be:64:
                    1f:0b:44:d0:21:34:4a:8f:92:46:1d:54:b9:15:2f:
                    10:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:20:7D:62:C6:78:14:57:B4:1C:AF:C7:02:7C:78:FC:8B:6A:64:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2e8aec8c-21e7-31f6-8ff3-9da670688bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.62.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:78:83:96:8b:fb:2a:31:67:86:cd:97:1e:89:32:de:75:42:
         2c:b8:cc:3d:39:51:24:a1:87:58:dc:a6:65:bc:47:b4:d2:28:
         50:cc:58:7a:af:f9:a7:79:0e:e5:98:b9:c4:47:22:78:f8:ab:
         24:84:04:7d:e7:09:0d:0b:0a:93:ac:b2:3e:b8:61:61:48:eb:
         a9:13:f8:82:07:5e:0a:cb:2b:79:d8:79:6f:a3:2f:5a:bb:aa:
         48:7a:66:b0:61:fd:b0:a0:11:3d:59:61:f7:8e:37:8a:0a:e6:
         7b:56:29:05:0c:21:a0:a3:a4:7e:f3:8b:cf:05:79:43:ba:cb:
         2d:c3:48:5f:04:5b:c1:85:41:a9:0b:41:c5:74:7d:74:2f:ae:
         cf:c0:08:3f:17:24:aa:ab:57:fc:0e:fc:f3:f7:94:2c:3e:c6:
         c3:53:5d:eb:10:32:0f:cd:33:09:d9:bc:ed:8b:63:56:43:0c:
         64:5b:66:60:c3:b8:f9:da:03:de:c3:35:1c:c1:c6:0f:e7:9b:
         10:1e:6e:b8:45:45:18:a5:dc:93:83:5e:77:24:bf:12:89:1c:
         98:03:b6:03:7a:75:78:57:7d:00:b0:47:80:29:bc:d0:95:32:
         a8:e7:59:15:ba:b1:07:3d:b3:0f:96:e4:ed:25:34:35:85:f3:
         49:b2:78:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:41:00 2025 by rpki-client