Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/2bacfbe0-bed9-3dec-8f53-700fe3fa24fa.roa
File:                     2bacfbe0-bed9-3dec-8f53-700fe3fa24fa.roa (raw, json)
Hash identifier:          CeBosCS/5dWZxwPj25qfdKWrjlhd4p9Sx/9TKbKcOx4=
Subject key identifier:   16:E1:35:A9:34:CB:3E:29:94:0C:E5:33:2C:89:12:7A:FB:4E:4F:F6
Certificate issuer:       /CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
Certificate serial:       010D0C9F4328584AB651014E7C6552A04D1D1190
Authority key identifier: C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/2bacfbe0-bed9-3dec-8f53-700fe3fa24fa.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     26141
IP address blocks:        64.239.70.0/24 maxlen: 24
                          2602:812:c000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:51:01:4e:7c:65:52:a0:4d:1d:11:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=3ca22612-56af-4452-926f-9baed417e8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:2b:15:53:21:f6:05:5b:28:46:45:7f:1d:
                    1a:98:5a:c1:01:4a:04:0b:17:1b:e0:be:ea:d6:82:
                    b8:2b:8d:d6:aa:e8:43:7c:ba:14:ee:2d:d6:8a:8b:
                    ca:6a:11:ff:f4:61:68:e9:7a:f3:eb:bf:43:1f:3c:
                    fd:07:f6:61:62:f3:99:6a:12:49:08:c5:52:cc:3a:
                    e3:22:a9:a1:d7:b2:b6:e3:ac:b5:58:01:e5:cb:6f:
                    60:5a:8e:e3:4a:b0:ee:f8:5a:ef:6e:40:bc:26:df:
                    25:2a:11:03:b0:44:02:81:63:72:ed:b7:b6:86:71:
                    db:c4:be:25:79:44:cd:bd:e5:8e:65:db:78:3d:b5:
                    6d:a6:e2:7f:55:1a:c9:94:42:2d:85:28:ad:5c:30:
                    93:90:3d:d0:d5:e5:f0:62:7f:0b:5f:a0:9c:d6:83:
                    7c:c9:64:50:e9:0c:a6:c1:28:35:c4:a5:b9:a5:46:
                    98:7d:83:4e:07:4d:e0:26:67:38:61:26:5a:ac:7d:
                    79:20:7e:bd:4b:be:27:40:76:f4:08:e9:41:3d:bb:
                    00:00:1f:10:75:19:4a:07:d0:2e:b9:ab:1a:8d:a2:
                    3a:d2:fb:11:37:e3:ec:5f:75:c3:ea:90:cf:52:26:
                    41:46:ee:95:9c:b4:d2:9f:ea:73:6d:17:54:98:dc:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E1:35:A9:34:CB:3E:29:94:0C:E5:33:2C:89:12:7A:FB:4E:4F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/2bacfbe0-bed9-3dec-8f53-700fe3fa24fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl

            X509v3 Authority Key Identifier:
                keyid:C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.70.0/24
                IPv6:
                  2602:812:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:0e:b3:d3:b0:e9:e6:be:fb:98:71:77:3e:43:f4:46:ab:5d:
         fc:35:1b:7c:fa:a0:81:cc:31:27:37:ee:27:a5:e0:21:c5:84:
         e7:5b:46:c5:65:58:80:a2:80:97:ca:3d:7b:be:40:ac:2a:53:
         1c:62:40:5a:d2:46:6f:d3:db:44:7f:98:c4:11:ce:61:4a:b7:
         b5:c6:74:a9:1d:e2:f9:c6:b6:f3:d7:7c:1e:86:3c:3b:97:87:
         a2:a6:69:d3:4e:27:66:85:a2:3f:ec:35:cd:78:4b:c7:be:a2:
         b5:df:a7:61:9e:06:ed:cd:97:f4:44:db:96:33:9c:80:11:7d:
         9c:4f:51:59:f8:06:2f:cf:53:3b:f6:0f:b3:44:b9:cd:d3:3f:
         89:5d:e0:a3:fa:45:66:3a:6a:b6:ee:4e:f2:c6:bf:68:d4:b0:
         6f:b9:a5:af:9b:54:57:4a:36:7b:00:f7:22:46:70:8c:67:88:
         84:f3:80:85:44:64:e3:06:42:aa:00:8e:54:c2:2b:bc:f2:3c:
         7c:c3:16:e4:2b:22:d8:cd:16:21:58:f6:ce:9c:a4:a6:8b:ab:
         19:a3:ee:29:8d:34:d5:8d:70:68:c0:92:a6:d5:28:88:d2:0b:
         5b:da:29:d5:d2:86:cd:0f:fc:08:65:1c:62:92:d2:cc:ed:a4:
         8a:66:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:43 2025 by rpki-client