Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95afddb7-3acd-3969-b156-7ae54bc275ab.roa
File:                     95afddb7-3acd-3969-b156-7ae54bc275ab.roa (raw, json)
Hash identifier:          U+FX2Y47IDSpDPrjhCOI7tgcORBglsFmsDg0Nw2U3iE=
Subject key identifier:   7A:09:F9:6D:E4:40:7E:62:67:29:92:D8:D3:1D:3B:E5:EF:6D:D0:92
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161B7149EADFAD71BCF0F40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95afddb7-3acd-3969-b156-7ae54bc275ab.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     398741
IP address blocks:        70.62.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:b7:14:9e:ad:fa:d7:1b:cf:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=a6069d61-cf81-47ef-8cef-4476534882b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:0a:7a:8e:19:fd:5a:0a:14:44:a7:48:5f:
                    0e:02:4d:8d:91:31:16:6d:6c:66:e4:c7:5b:77:21:
                    2e:c5:79:25:23:e8:87:80:06:29:41:e5:3e:43:32:
                    73:32:d0:c7:05:f6:f4:04:bd:3c:9b:29:8b:fb:e0:
                    10:7c:a5:88:1f:bb:0f:93:37:2d:2f:98:f6:2d:07:
                    a4:46:f2:a9:c6:03:ca:c2:10:7a:83:77:9f:90:50:
                    a4:ca:32:1b:fb:00:66:88:9f:85:13:ca:3a:ac:a4:
                    d9:e1:74:fd:97:70:26:d1:90:d9:20:0a:c9:93:31:
                    f3:18:85:a4:5c:95:2c:8f:20:2e:2d:be:2a:d2:c2:
                    65:d8:ef:71:5b:8d:96:ab:38:7f:6c:07:70:ab:44:
                    2b:6c:33:10:45:ba:44:ee:f5:1e:c2:a0:92:a5:be:
                    f9:ef:a1:7e:80:c8:fb:74:b4:0c:a0:01:44:92:67:
                    61:94:a2:92:d6:e0:32:4c:1e:0c:7c:72:19:ec:9f:
                    e8:25:2b:14:cf:79:4b:c2:60:21:a3:b2:c5:78:d7:
                    9c:ec:ef:be:03:25:af:72:62:e0:12:b1:bd:8b:71:
                    a6:e2:6a:17:c2:2d:c7:91:a0:ad:5d:9c:16:56:f2:
                    01:f6:1f:95:f3:03:1c:a0:d4:19:6a:c8:6c:6b:5f:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:09:F9:6D:E4:40:7E:62:67:29:92:D8:D3:1D:3B:E5:EF:6D:D0:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95afddb7-3acd-3969-b156-7ae54bc275ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.62.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:56:e5:df:45:2f:4c:2d:8d:a1:a6:70:de:18:a6:a5:34:5a:
         f6:83:bd:a0:cc:56:22:6a:66:b4:23:74:2e:59:6e:2e:98:dc:
         7f:61:4c:d7:75:0b:51:ca:3f:81:6e:c0:17:01:7b:9c:79:75:
         0b:03:a7:4f:69:82:0b:72:c2:78:92:d6:f0:0b:12:f0:13:ff:
         86:07:a5:ab:8c:21:09:34:b3:c7:7f:ee:a9:94:25:ca:1e:2c:
         89:9f:d1:a6:d9:1d:52:bd:01:61:5e:d3:95:dd:6c:2a:ee:40:
         d6:16:1b:2b:e6:8d:39:44:11:2b:ca:bc:90:57:60:d8:7c:c2:
         2d:2a:33:fc:95:42:62:2f:a5:cd:8e:1a:e1:88:68:b9:b2:58:
         36:a6:a4:53:e1:f5:3e:ef:fa:20:1a:81:b4:97:51:47:91:76:
         9f:e8:67:b3:a3:68:36:5e:6d:62:35:b8:ae:e8:98:52:b7:81:
         7e:ad:0c:f5:aa:3c:a8:94:4a:0e:f4:4e:26:0b:ac:61:49:96:
         be:d1:91:8b:ac:b7:69:77:a2:47:25:c6:ae:c2:44:6f:c0:2f:
         f3:8c:d1:ae:43:ea:3a:60:59:41:36:8d:ba:a6:83:2c:06:ca:
         cc:71:86:f6:bc:ac:df:30:3d:39:2d:e0:9d:e7:5c:84:72:a7:
         db:4c:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:46:33 2025 by rpki-client