Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ae1ec52-0e49-31cc-bb94-b92b4513fe76.roa
File:                     8ae1ec52-0e49-31cc-bb94-b92b4513fe76.roa (raw, json)
Hash identifier:          pc1L5RkbKAEw7JNRd12QUvgHY+rGyZfABTPSWXssGys=
Subject key identifier:   F3:35:15:0F:21:60:CC:8F:92:2C:26:B5:92:D0:19:AA:CA:6E:E4:6D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F17FD8DB5DC34846A4ECCC40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ae1ec52-0e49-31cc-bb94-b92b4513fe76.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        70.16.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d8:db:5d:c3:48:46:a4:ec:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=c4b65a70-928f-4bdd-9dbd-75206d21adcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:c7:6e:02:c9:4e:e4:30:c3:d1:33:12:2e:
                    c1:14:36:48:ce:b8:11:74:90:64:98:fc:29:86:31:
                    c5:a7:6a:27:35:00:6e:e8:f7:e7:e7:fc:44:87:5a:
                    48:66:38:dc:7f:f9:d7:dc:ca:ba:b3:2c:91:a6:ee:
                    d0:b7:59:1d:03:5f:2c:3f:43:a0:9e:82:3c:ac:ae:
                    ac:36:e4:74:8b:f6:8a:84:f4:a4:ac:fd:9c:eb:d5:
                    5b:bd:f7:a9:e4:33:11:e1:cd:fb:1e:6d:99:f0:75:
                    1f:24:66:00:60:96:ed:48:2a:f4:3e:9f:12:98:c6:
                    c5:39:e8:19:d2:c0:84:11:0e:9f:e5:e0:d0:b0:a8:
                    1b:42:4b:21:0a:72:5e:ea:12:81:07:70:89:31:82:
                    63:87:c5:1d:40:b0:a0:5e:2d:38:74:ea:20:22:55:
                    c5:fb:33:16:9a:5c:d8:34:0e:4f:58:3a:73:87:cb:
                    06:05:6f:75:2e:c7:bd:c8:c3:cf:e6:9d:b1:f8:e9:
                    c9:e0:3f:35:c2:7e:c5:b0:3f:94:ea:2d:d1:18:7f:
                    fc:a2:b6:eb:da:d7:4a:ba:b5:d8:5a:6f:f6:79:5c:
                    d2:da:43:41:f0:ff:ee:ba:9b:5a:b2:8f:aa:7f:bc:
                    a3:13:3b:7d:a5:b3:e4:bf:6e:a5:ea:65:e4:ed:fd:
                    b4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:35:15:0F:21:60:CC:8F:92:2C:26:B5:92:D0:19:AA:CA:6E:E4:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ae1ec52-0e49-31cc-bb94-b92b4513fe76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.16.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f1:b5:67:fa:00:30:73:cc:4f:94:bf:3e:8c:c7:ac:a2:c2:
         1a:d8:ce:ee:24:1d:8e:84:bb:2e:37:9a:9b:56:bb:cd:f4:ab:
         10:92:19:8b:93:a4:2c:91:44:f9:e5:0f:ca:ab:cd:94:eb:bd:
         f2:15:40:42:12:78:88:19:9a:f4:33:44:0a:7a:e8:66:97:5d:
         14:ff:61:37:a5:31:d1:d6:af:c1:e5:c9:c4:5a:d9:4a:73:0e:
         53:30:88:34:f9:0a:8d:17:7b:fe:6f:fe:ec:3e:de:40:66:b8:
         46:7b:ae:36:df:66:4c:16:ec:93:17:d6:57:c3:c5:c4:5b:fa:
         4e:38:d4:b0:1a:de:c0:0f:b9:ba:7f:c3:91:e0:74:37:71:f7:
         b2:98:48:33:77:ad:2f:da:50:3a:32:5b:9c:ea:d7:a7:1e:24:
         bb:8c:5f:4f:8c:7e:e7:e1:64:04:d3:31:94:97:50:b6:15:95:
         c3:3a:3e:48:f8:40:df:6f:f6:94:0f:1f:e6:7a:d8:d2:76:10:
         b1:f9:2d:3b:96:a9:8f:4d:75:1e:b3:97:a4:5d:1b:20:6f:ee:
         7d:61:cf:b8:71:ad:cb:11:77:33:df:f4:c1:e3:27:cd:6b:2b:
         40:76:12:d1:d2:79:41:22:b7:33:4d:6c:ef:0d:a0:3f:4b:05:
         58:d7:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:57:31 2025 by rpki-client