Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/360a5317-aa1e-354c-a006-0213019ba30a.roa
File:                     360a5317-aa1e-354c-a006-0213019ba30a.roa (raw, json)
Hash identifier:          Gwr0yjhpqeJMXJLRRGF/coUg99Ng6bc04PR0QGybZDA=
Subject key identifier:   FF:EB:05:65:0F:B2:DA:C6:AD:F6:CE:1E:A1:87:99:C4:15:3B:0B:3D
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285849EA85243D094195FD17B42D11
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/360a5317-aa1e-354c-a006-0213019ba30a.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     14589
IP address blocks:        72.29.160.0/19 maxlen: 24
                          74.82.128.0/20 maxlen: 24
                          2001:48c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:24:3d:09:41:95:fd:17:b4:2d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=3d0f21df-25d3-4302-a914-f99dde75b8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:7d:df:e8:5d:73:d3:67:ff:5f:39:e7:41:
                    ac:b1:3e:4e:1b:e3:c9:d9:f7:8d:86:fc:13:6d:35:
                    f0:da:cb:f0:21:60:ba:53:ae:9e:c8:65:5e:cf:9e:
                    dd:ac:6a:2e:8c:06:29:5f:e3:0c:3b:50:5a:bc:e2:
                    0d:6f:62:15:8b:61:10:20:9a:8c:e3:ee:2b:23:fe:
                    2c:00:67:8e:08:9e:af:eb:fd:fe:f2:4f:aa:ae:46:
                    91:5b:3f:b9:84:fc:5d:e7:98:f1:55:a5:dd:75:f2:
                    84:b4:f2:83:57:80:aa:09:3a:4f:f8:cf:a1:9f:0c:
                    eb:f0:5d:96:f1:f9:aa:de:57:ee:43:32:5e:15:34:
                    8a:7a:0f:01:c3:34:5f:35:82:28:75:a1:de:36:3e:
                    a0:84:a0:e1:08:0b:0a:ac:20:f0:0c:4f:4b:e6:b1:
                    24:37:3d:80:72:05:c3:ba:d7:b4:7b:38:5b:1d:9e:
                    f1:b9:83:53:86:ff:f1:6c:7f:6a:da:c4:cc:b9:35:
                    3e:1a:fd:58:3f:1e:e6:43:f5:db:82:01:be:98:a6:
                    e7:b1:e4:3b:c9:bc:89:56:f6:5c:b0:59:20:0c:be:
                    62:00:68:49:7b:55:06:c7:61:d8:2f:9c:46:e7:62:
                    66:1e:78:8c:85:82:0e:67:6e:76:1b:d9:65:30:c9:
                    74:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EB:05:65:0F:B2:DA:C6:AD:F6:CE:1E:A1:87:99:C4:15:3B:0B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/360a5317-aa1e-354c-a006-0213019ba30a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.29.160.0/19
                  74.82.128.0/20
                IPv6:
                  2001:48c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f5:c8:e3:2b:65:b2:92:bc:f8:46:bf:c6:91:b7:a8:ef:4a:
         64:bb:fd:f2:73:ad:e0:61:14:13:ec:76:9c:d4:31:e4:85:48:
         c8:d6:cb:2e:39:f2:da:77:9d:21:f6:a6:3a:5f:ff:d1:d6:3e:
         94:dc:3a:a4:c2:47:cf:48:da:cf:ff:08:7c:1b:fb:6e:26:32:
         e7:e2:b3:c4:31:14:93:01:77:08:47:f4:23:5a:8a:95:b3:29:
         8e:25:bd:81:0a:a3:3c:d5:b2:ab:48:04:b1:f6:de:ea:14:b7:
         63:a5:b2:90:28:c4:17:61:91:4d:1f:a8:c2:70:88:b8:28:d0:
         a4:43:1c:4c:bc:a7:ac:e6:cb:ad:8f:ee:56:f6:91:6d:59:ad:
         94:5f:e5:97:26:19:d9:b3:f7:8d:0f:69:82:ca:5b:3e:b7:3e:
         3f:cd:c5:5e:f9:f9:f3:58:4a:ec:e7:46:8c:af:f6:a2:09:80:
         db:81:e7:cd:a4:0d:dc:23:39:6e:68:11:43:6c:e0:a3:a4:f5:
         46:b9:ac:de:97:7c:2f:4e:e0:45:d3:8a:b1:c6:9a:79:e8:70:
         13:a1:bd:ab:dc:f6:88:7b:75:fa:40:37:f9:c9:b7:10:45:3a:
         16:47:37:7d:34:96:10:50:cd:8c:cf:f4:40:7c:a1:99:69:b6:
         47:fc:8b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:23:04 2025 by rpki-client