Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa
File:                     70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa (raw, json)
Hash identifier:          e6pFVXWOYhgEjpL10c7E7NqBJAGDX1w4QhZfnZYLE+A=
Subject key identifier:   40:29:52:5B:90:C2:84:24:94:C8:CC:98:75:5D:D7:C6:5C:16:CA:43
Certificate issuer:       /CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186
Certificate serial:       010D0C9F43285849DF5A730B4993FC6A92D67A80
Authority key identifier: 9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     400633
IP address blocks:        23.226.160.0/20 maxlen: 24
                          64.190.44.0/22 maxlen: 24
                          168.100.48.0/20 maxlen: 24
                          216.246.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:73:0b:49:93:fc:6a:92:d6:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=b45aca62-fd6d-4d8c-98d5-f4299a5c9bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:a3:e1:2e:e1:1b:af:03:a6:0d:a5:52:9e:
                    39:d9:fb:ea:9b:b3:ac:f3:a3:44:f8:4b:14:23:7f:
                    3c:87:e8:da:4a:74:32:55:db:73:60:49:ef:6e:3d:
                    68:3b:8a:13:f9:f4:e8:38:3f:2c:f7:49:f3:a6:f3:
                    b0:6c:52:75:10:fe:03:89:96:9c:24:62:f9:03:5e:
                    38:1c:a4:be:f1:0c:d2:62:51:6d:86:4b:bc:85:3d:
                    6a:d5:7d:bf:1b:60:19:90:3a:1f:4e:d8:be:f6:48:
                    47:46:14:91:10:07:ca:63:ef:d7:6b:ee:4d:36:30:
                    b6:6b:2d:b9:f7:2f:a0:9b:b3:2e:d2:84:8b:05:11:
                    75:d7:ce:a0:47:eb:7a:2e:82:11:0e:95:f3:1b:2f:
                    b4:25:7e:d1:27:b4:15:59:72:b5:43:40:4b:c4:92:
                    47:57:02:df:7b:2f:22:cf:79:20:39:c6:63:d2:80:
                    46:fd:98:a4:27:04:58:da:9d:62:07:ea:a7:10:44:
                    be:ea:b3:9f:1b:f1:53:ff:87:fe:d2:ec:5b:be:dd:
                    0a:1e:1b:df:ea:c8:50:8e:cd:ae:2d:cd:f4:d4:fe:
                    a2:25:42:d3:1a:97:bb:5d:17:6b:21:78:11:41:70:
                    90:85:c6:b9:e9:03:ee:d2:61:eb:8c:85:7d:f4:71:
                    cc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:29:52:5B:90:C2:84:24:94:C8:CC:98:75:5D:D7:C6:5C:16:CA:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl

            X509v3 Authority Key Identifier:
                keyid:9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.160.0/20
                  64.190.44.0/22
                  168.100.48.0/20
                  216.246.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c6:d2:94:e0:a4:6c:26:d9:4f:2c:af:e6:3c:0b:f5:e9:c8:
         4b:e8:15:3e:f6:1e:a8:d4:b8:68:2d:2e:eb:75:ed:5d:d6:9d:
         7d:31:95:43:85:61:ab:e3:e6:ef:1a:8d:fb:14:9f:13:35:0b:
         c7:69:0e:3b:a4:fd:88:7e:13:f8:d7:f4:3f:56:f7:7a:10:c9:
         08:74:b5:fc:52:d6:f6:10:fe:6b:65:c4:73:e0:fd:26:8b:b0:
         02:ff:20:7a:42:c2:ea:d0:7b:30:c9:bb:4c:4a:35:57:8b:64:
         e2:73:ef:f4:a8:e0:b5:58:c2:7a:52:82:d2:b7:de:74:cb:e1:
         b9:a6:5d:22:35:ab:ca:04:f7:4e:35:ec:7f:cc:03:8b:3e:78:
         88:c2:e1:84:a7:5c:db:02:42:57:f8:10:34:fd:fd:58:13:84:
         ba:01:94:65:cd:39:cc:d6:10:30:6d:f1:84:a9:80:20:eb:7e:
         55:e1:3d:80:db:a3:41:65:d0:48:45:7d:d2:62:b2:58:8c:c4:
         35:f8:43:6b:93:af:4d:75:47:1c:b2:a8:92:48:d5:fc:7d:57:
         01:91:ed:04:d0:83:3c:85:d8:4b:42:5b:e1:f9:ec:7a:c0:54:
         ab:e0:2f:bc:34:5c:87:57:f6:a7:da:51:af:78:16:78:64:8c:
         d0:cb:13:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:12:50 2025 by rpki-client