Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e447257f-6027-3564-bb02-14f549327bc4.roa
File:                     e447257f-6027-3564-bb02-14f549327bc4.roa (raw, json)
Hash identifier:          3cAhNrIKMjfYWyTbZdbVLjDe4XuEtA8isk/kqoBE1eI=
Subject key identifier:   8A:A2:BB:A4:19:6B:F2:7C:A2:0D:53:E0:98:EA:65:61:6B:13:B3:4C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB40F209C8FC436D7FA170C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e447257f-6027-3564-bb02-14f549327bc4.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        70.105.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:f2:09:c8:fc:43:6d:7f:a1:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=137eef77-14fd-4519-9ff7-70f862832746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:0b:bf:57:70:67:45:41:f7:b8:64:70:9a:
                    88:a1:c9:b2:8b:fe:2e:e1:c2:38:0a:d2:24:ff:14:
                    f0:fe:d8:c6:ca:b5:d8:26:f2:fc:28:9c:65:42:6d:
                    f8:cc:48:8f:4e:f2:32:07:ab:ae:c0:1a:2b:45:0b:
                    f5:af:3f:70:19:13:f2:a3:a1:47:b7:bc:ae:5d:1e:
                    2a:21:ae:4c:41:49:ab:a2:23:36:22:aa:13:6d:50:
                    2f:01:c0:71:a9:b1:2b:fc:e6:f4:70:ab:ad:e9:0d:
                    15:75:02:3c:f5:6f:53:ec:d6:03:ef:45:23:6b:23:
                    8f:c8:02:6d:7d:ef:97:72:66:9d:df:2d:55:50:e5:
                    29:41:b1:d8:d8:10:fa:d7:0f:8a:31:7c:fd:3a:cc:
                    c5:cb:4d:1e:b4:d7:81:b2:ee:4e:ef:d1:cc:9c:95:
                    ca:ce:8d:d0:cf:47:65:a8:29:23:09:6a:76:a3:0a:
                    52:0d:fa:a4:99:9c:8b:df:ef:cb:f3:df:0f:90:19:
                    c3:1e:1e:06:8b:8c:b4:ae:c9:00:81:49:e8:7e:52:
                    5d:73:10:e8:3a:b2:31:4f:8c:5a:38:93:09:28:9e:
                    89:35:8c:8a:32:1a:8d:1d:52:60:ce:23:4d:a8:c8:
                    20:bd:95:54:b8:87:bd:43:e9:d7:fc:ca:ac:03:e6:
                    e6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A2:BB:A4:19:6B:F2:7C:A2:0D:53:E0:98:EA:65:61:6B:13:B3:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e447257f-6027-3564-bb02-14f549327bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.105.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:c7:b6:d9:c9:64:15:19:70:10:01:9a:3e:11:d9:2d:de:ef:
         65:59:27:a2:4c:16:b7:d6:19:b3:3d:56:0f:84:c9:6c:08:4e:
         4d:72:92:a0:ee:17:38:97:b8:20:6e:fe:9a:33:4b:e5:d6:82:
         9d:9d:8b:98:62:1e:f0:71:98:12:ba:1e:d0:3a:ef:64:d3:3f:
         98:d6:cd:93:02:3a:07:49:8f:ad:8b:d1:8b:73:57:bb:14:76:
         ea:aa:1a:af:f9:00:46:4b:44:79:9f:2e:11:9a:05:c5:b6:e7:
         9a:4a:5a:a1:30:79:0a:ee:f0:78:b9:ff:78:33:31:04:d7:15:
         d2:a8:d9:bc:19:b4:e4:0a:06:56:e6:4a:70:de:cd:ca:ec:fb:
         f9:fc:40:53:19:0e:94:e5:e2:e9:26:6f:0c:78:72:46:ec:2f:
         cc:84:01:b5:01:6e:be:90:e7:c2:04:96:58:ac:0d:88:c1:eb:
         86:74:bb:23:fc:54:98:f2:86:e1:1e:80:1e:3e:50:64:e0:fe:
         5d:00:02:ef:8b:eb:05:36:5c:6f:f2:76:aa:f8:4c:fd:0b:88:
         96:20:3b:05:e7:c9:cc:e2:9a:31:25:48:f3:48:0c:05:63:ba:
         e4:b6:60:60:f7:f3:bb:b0:be:69:d7:ea:59:13:2d:cc:cc:ab:
         ec:d8:31:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:52 2025 by rpki-client