Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa
File:                     caa9c6f8-021f-3be2-bae4-31f4834a4921.roa (raw, json)
Hash identifier:          77qbV/DRpg4YEXiX6xVTOURmZDycjRbX+YnrpEO1tpA=
Subject key identifier:   FD:92:6F:C3:93:AD:DE:EA:38:10:5A:A8:7D:CF:6E:14:16:6D:D5:B3
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858498B99D00AA69BA5D681861A00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     1239
IP address blocks:        198.16.70.0/23 maxlen: 23
                          198.16.72.0/23 maxlen: 23
                          198.16.76.0/23 maxlen: 23
                          198.16.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:d0:0a:a6:9b:a5:d6:81:86:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=15b3aa8e-c119-49ba-a7f9-8c2207372188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:8d:c3:5b:e1:77:18:e9:95:18:9f:48:76:
                    09:70:47:04:d5:dd:6e:67:3e:62:61:00:36:5f:e0:
                    58:24:d4:18:b5:a5:76:12:1e:80:12:a8:c5:df:4f:
                    07:ad:81:88:75:b9:fc:f2:53:bb:a0:e7:cb:d1:0a:
                    39:a2:60:9f:e9:55:fe:c1:e6:c7:99:fc:1b:32:a0:
                    da:fc:e3:01:7d:5e:85:f3:89:29:37:e8:db:dd:5a:
                    6c:a9:79:be:fc:14:ad:38:0a:02:9d:dd:f3:98:af:
                    ae:07:b3:71:06:2d:63:7e:be:6b:32:4c:5c:77:22:
                    2d:a1:0e:4e:3e:8a:dd:2d:1f:b4:f8:bf:fe:6b:d7:
                    46:93:95:f4:ad:0c:8f:53:4b:94:ce:ea:ab:bb:24:
                    48:82:25:83:fc:bd:6b:29:8a:f7:bb:6c:f1:4c:37:
                    98:b2:0b:75:3c:10:86:bb:b5:30:17:7d:93:56:7a:
                    a3:c4:94:26:21:4d:24:7a:60:a5:b7:5a:9b:b1:2e:
                    9e:0f:99:59:16:33:77:d5:43:8f:74:83:a4:62:fb:
                    c2:49:81:6d:0f:1e:b5:d5:c8:74:eb:39:bb:bc:43:
                    2f:af:89:b1:6f:0f:b4:65:2c:dc:f8:58:c3:54:74:
                    9f:16:ac:02:12:a2:72:c0:10:70:67:aa:58:36:65:
                    6b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:92:6F:C3:93:AD:DE:EA:38:10:5A:A8:7D:CF:6E:14:16:6D:D5:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.16.70.0-198.16.73.255
                  198.16.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1c:fc:a8:1a:a0:9e:b6:4a:2b:bd:63:ab:7f:24:2a:ae:e2:
         e8:07:54:ff:5b:aa:f8:1a:53:7c:74:a3:06:9a:73:eb:c4:ba:
         8d:ca:af:ee:5e:2e:1b:07:cd:7d:e4:ad:4b:b7:0e:19:c1:33:
         73:70:c7:37:53:0f:41:a2:81:ae:43:c1:20:76:a0:85:30:ad:
         80:a5:9d:09:5f:8c:4e:3a:de:1a:23:24:ec:0e:b4:34:ec:98:
         74:b4:8b:ed:c1:67:55:ce:78:09:50:21:3f:0b:7f:17:a3:c1:
         96:f6:e5:a8:4b:a5:91:92:37:11:6f:ad:27:b2:8e:40:76:a6:
         cd:58:80:5b:20:a3:cc:87:06:86:29:b3:b1:16:09:60:42:58:
         8e:9f:ef:53:8f:3f:fd:f7:a5:0a:c1:26:59:ee:13:d2:0a:fc:
         66:f8:46:16:36:3e:a8:34:f0:67:8e:8d:cf:59:e7:bb:d0:a7:
         01:fb:5b:1d:2e:86:25:0a:c9:d6:8a:04:ac:9e:70:4d:dd:75:
         2d:9c:a6:8d:b3:2b:14:33:47:6b:97:9b:48:a1:8a:b7:b2:0e:
         50:81:17:3a:31:6d:de:fb:a4:62:dc:b6:48:32:d7:34:02:d6:
         ca:69:90:37:d3:39:e7:30:db:dc:3c:a9:d6:14:f6:c5:45:9c:
         6b:a7:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:18:57 2025 by rpki-client