Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31a7d06e-f401-374d-a3e0-58275ee35373.roa
File:                     31a7d06e-f401-374d-a3e0-58275ee35373.roa (raw, json)
Hash identifier:          zcYS/PchXkpr/VJeMOB83vFrfLPrUI8QZBSMYj2OkAs=
Subject key identifier:   34:52:70:0F:4C:66:92:1A:C1:D0:46:CE:20:5F:20:85:17:9F:B1:FF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA90E6F4EA8B5C0BEE9A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31a7d06e-f401-374d-a3e0-58275ee35373.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     855
IP address blocks:        70.31.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:90:e6:f4:ea:8b:5c:0b:ee:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=abe9b62d-c26d-4215-8630-1a5de885257d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:ae:32:07:7a:0f:86:be:7c:fa:62:c4:56:
                    87:e2:ea:30:00:a8:b8:69:18:df:14:86:49:6e:39:
                    cc:f2:e2:dc:15:a2:6c:6d:6a:40:1e:d6:0a:87:dd:
                    94:f1:48:78:60:b2:03:13:1b:7d:e4:e2:8f:40:00:
                    14:50:a8:56:1c:de:ab:d8:b5:30:9b:79:e8:e7:18:
                    dd:12:ef:3f:a4:06:1d:b5:1b:de:1c:0f:f4:44:db:
                    5d:2c:f3:f7:44:79:90:4f:75:2f:b1:32:39:71:f0:
                    bc:e6:4e:da:83:b0:04:8b:2d:8d:85:91:83:47:bd:
                    d0:a6:98:6c:df:f0:5c:df:7a:b5:d0:22:0d:6d:c5:
                    60:81:72:47:94:98:3c:4b:04:24:43:1e:b3:e1:08:
                    93:e0:ee:ac:06:1c:e0:ab:66:d7:96:01:c1:02:23:
                    66:f5:c7:2d:eb:56:9e:df:de:3d:cf:49:01:b3:4a:
                    95:1f:18:f2:29:04:f5:74:3c:a4:5e:30:8b:36:14:
                    a9:da:d0:e6:8f:1c:50:be:de:0d:d7:0a:a9:07:b0:
                    ac:04:b6:b2:ae:7d:91:78:b6:17:cf:d1:0f:f0:86:
                    2e:86:12:b5:0e:56:d5:89:60:6e:01:34:dc:1a:1e:
                    fe:8f:b5:d3:18:b3:50:34:07:d2:e0:d3:99:9b:2c:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:52:70:0F:4C:66:92:1A:C1:D0:46:CE:20:5F:20:85:17:9F:B1:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31a7d06e-f401-374d-a3e0-58275ee35373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.31.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c4:09:a0:9b:51:4b:fa:8b:67:be:9d:f5:f1:b5:e3:fb:f8:
         03:bd:97:95:5f:a3:27:7f:d9:e4:bf:03:59:cc:2d:64:38:ca:
         34:52:ce:4a:48:ff:bd:13:f2:61:90:a4:80:5c:6f:c3:39:58:
         54:80:8f:13:7b:3e:d1:e1:62:53:89:70:6b:4b:73:ab:e4:c8:
         0d:a3:3c:6d:9e:61:58:45:50:21:aa:ac:9d:94:b6:c8:0d:52:
         c9:ae:47:6e:a3:3c:b3:44:d6:02:0d:c5:4b:19:95:59:f4:0d:
         76:17:c7:fe:06:51:81:1f:52:7b:57:ec:46:ab:10:be:1e:2a:
         93:3f:09:9f:b9:7a:fa:96:27:c4:16:5c:86:b4:2f:72:79:9e:
         5c:bf:07:d5:e1:65:c6:3a:40:54:df:77:3e:89:47:cf:6e:ec:
         12:7b:bc:6c:9b:d5:42:87:0c:c1:d3:05:de:08:ea:dd:13:e4:
         72:73:85:78:4b:1a:28:8c:4e:0a:c4:3f:51:78:03:e4:3e:09:
         f0:9a:32:dd:6f:ea:4e:4e:22:dd:b2:e0:4d:96:87:44:59:00:
         e4:9f:5f:d0:af:89:d7:dc:a7:f4:56:d1:ee:fe:f1:7a:5f:d4:
         cb:e4:52:6c:93:aa:ee:7f:0d:ce:e1:fb:f8:4e:13:c1:55:6e:
         ac:c6:b3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:31:23 2025 by rpki-client