Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ac062b2-a6b0-33eb-afd6-4bb37fcad826.roa
File:                     5ac062b2-a6b0-33eb-afd6-4bb37fcad826.roa (raw, json)
Hash identifier:          DL0MK1eFRdPtRDH7VRAlQ0ekxhQr3zFu/ceP4O4X1gI=
Subject key identifier:   77:DE:3B:97:BC:AF:D0:CC:02:27:65:1B:49:FA:95:E1:D6:A7:69:D0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA918DEDAD7290A7EBB880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ac062b2-a6b0-33eb-afd6-4bb37fcad826.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        70.55.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:91:8d:ed:ad:72:90:a7:eb:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=1485ca0b-8845-4352-87bd-b7f161efd05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:77:8f:a7:17:a5:ab:50:1a:a9:c1:44:fa:
                    28:12:e2:5b:aa:fe:76:5c:eb:da:12:c4:36:17:cf:
                    c9:9f:c6:0a:b5:a0:3c:bb:f5:01:e4:83:c7:97:d8:
                    72:f7:42:d3:16:99:5c:bf:f6:c7:6c:c4:23:96:9c:
                    49:e7:e5:75:4b:f6:5d:a1:89:e5:c0:89:80:8a:7a:
                    65:ab:a8:6e:58:04:c2:f7:83:e5:c8:3e:54:68:bc:
                    16:58:61:99:bb:dc:0e:da:da:97:5f:d5:5e:91:f6:
                    0d:16:e9:7d:fd:89:22:4b:55:ed:1d:82:e8:d8:95:
                    c2:ee:a5:42:c8:10:be:2b:2e:16:23:78:e0:7f:77:
                    ea:45:b0:3a:cc:92:dc:77:56:a9:13:b0:c0:08:c8:
                    d3:67:fe:89:95:5f:c7:9d:9c:d3:0f:4c:fe:a8:fd:
                    c1:a5:05:4a:6d:16:b4:88:7d:b7:dd:1b:28:ab:93:
                    00:4b:fc:55:b4:6b:e8:3e:7d:4e:ca:f0:ae:f5:87:
                    69:b7:13:c5:5c:4d:64:f6:0f:e1:f0:3a:95:ed:b5:
                    97:6b:3d:21:4a:f2:6f:cd:74:af:14:cf:99:9a:d8:
                    1f:3c:f1:c4:e7:46:e1:25:2d:8f:d9:e1:cf:b2:45:
                    f8:10:a5:5d:bb:c7:d6:28:6c:10:02:14:62:67:36:
                    9a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DE:3B:97:BC:AF:D0:CC:02:27:65:1B:49:FA:95:E1:D6:A7:69:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ac062b2-a6b0-33eb-afd6-4bb37fcad826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:2e:7f:6d:ac:1c:1d:75:49:09:16:6e:aa:5a:b2:32:5e:66:
         32:0c:18:25:6d:d0:81:69:2b:b3:fe:11:cf:b4:fa:39:ec:43:
         0c:00:f0:8c:44:84:57:c7:d2:f8:87:8b:3d:04:3f:31:ce:93:
         8a:da:05:0f:7a:0e:f7:37:67:7b:f0:a5:34:95:5b:ef:bc:26:
         5a:26:5c:66:e3:14:a3:a2:88:a9:97:54:18:71:10:36:77:9b:
         42:77:7d:95:96:18:1f:bc:0d:0c:61:d9:2d:83:50:67:6d:22:
         ef:36:be:dc:75:b4:e3:9f:aa:25:7e:cf:9b:93:b6:b1:98:db:
         d6:1b:6a:71:f5:fe:ff:58:e5:bf:61:5d:49:bc:23:70:cf:a2:
         15:05:1a:a2:1f:23:93:b3:ea:31:0f:a5:99:15:bd:97:4a:2b:
         8d:9e:66:4b:5a:b5:dd:a3:bf:4b:2e:98:85:26:1c:da:3c:52:
         ce:0e:38:6e:75:3e:26:c8:7e:bb:93:9f:c3:42:f9:69:38:77:
         be:d7:bf:64:0f:de:c6:71:e2:9d:0b:a3:ab:bc:b5:c7:7f:6d:
         9b:f9:67:97:97:cc:7f:49:f1:62:86:d1:5c:62:a8:97:88:f1:
         d7:9f:7b:b8:f2:fe:20:34:44:7e:c4:18:9a:2f:8f:db:5a:4b:
         0c:0c:cc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:27:52 2025 by rpki-client