Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa
File:                     b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa (raw, json)
Hash identifier:          ADptVRFz6wKyv1osPZcln2yseqD6QboFXo93t+Y5lNg=
Subject key identifier:   D1:FC:7C:BB:7B:02:AB:FD:20:E2:A0:7D:B5:C7:A1:0A:27:15:34:DE
Certificate issuer:       /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial:       010D0C9F4328584A5335A2188C83488F0EFD3900
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     23465
IP address blocks:        70.96.220.0/22 maxlen: 22
                          70.97.86.0/23 maxlen: 23
                          70.97.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:a2:18:8c:83:48:8f:0e:fd:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=68022d4f-28f0-4ce1-8579-808a9b9e55cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9d:74:3c:a5:e4:af:cd:5e:f6:de:ea:4e:4c:
                    5c:53:ce:18:1c:d7:36:bc:53:c8:f2:8d:1f:de:f0:
                    67:fe:97:b6:33:bc:1d:70:2c:07:5e:02:f7:4d:54:
                    6a:e8:2a:f8:de:c2:62:27:16:56:46:f0:f1:81:00:
                    8c:32:1c:f6:16:2d:b8:78:3a:db:36:ed:70:bd:07:
                    eb:43:d4:90:36:68:2e:02:59:33:ec:30:81:b6:89:
                    31:60:d5:c4:fe:08:ee:d1:a6:d1:b1:1e:20:e4:9e:
                    19:d1:e3:52:fb:36:c0:8e:ce:71:5d:69:62:f6:c8:
                    2b:c0:1f:6f:d0:fc:2f:13:4c:38:a5:a6:a5:0a:93:
                    64:57:42:81:47:19:c9:92:32:49:30:7e:e2:4f:e0:
                    3b:39:f1:df:22:34:3b:87:f9:4c:bb:5f:1a:57:75:
                    67:be:47:f1:36:c0:20:94:fe:13:bb:c7:67:be:ef:
                    85:4c:46:5a:30:8a:b5:cf:9d:2d:e3:e9:39:2e:22:
                    6b:1c:1b:8e:a1:7a:e3:18:5d:b2:3c:57:54:24:95:
                    ce:60:7e:bd:74:b6:4d:ae:60:34:54:c5:e4:5e:12:
                    39:26:c9:15:7f:e5:93:a5:97:7b:1b:86:4e:1f:ff:
                    16:56:5d:d3:ae:89:9e:b9:3e:20:7c:a2:ae:ca:a7:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FC:7C:BB:7B:02:AB:FD:20:E2:A0:7D:B5:C7:A1:0A:27:15:34:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.96.220.0/22
                  70.97.86.0/23
                  70.97.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:90:6e:60:d5:2b:99:c3:20:0c:38:99:b7:67:7e:c0:d3:1a:
         5f:bb:31:2f:6f:a9:88:cc:23:a4:5f:7b:66:a3:c0:25:5a:d4:
         8b:71:7c:61:8e:ab:1e:91:5f:58:7f:27:43:5e:8b:21:dc:99:
         18:ab:ce:e2:43:60:8c:24:c3:f8:33:c4:6c:20:d0:db:50:55:
         19:71:80:37:1f:1f:a4:3f:e8:88:5e:0d:67:1a:b1:0a:97:54:
         a8:76:24:5b:b3:f4:34:2a:4d:ff:58:cb:00:7d:cf:e1:97:d5:
         e1:84:a6:e0:44:34:bc:f9:5e:52:33:dd:55:99:d0:8d:0b:46:
         f3:ce:f1:b7:f8:b3:1c:c7:6e:bb:ae:df:41:ac:7e:fc:03:41:
         9c:6b:78:d7:ae:5d:19:c5:1b:a3:39:85:6a:9b:4e:09:f7:d7:
         12:6c:d1:8e:2e:b0:99:03:34:e2:11:6a:42:31:56:ed:cb:1d:
         b4:d4:cf:f6:07:66:a2:0a:e1:17:6a:91:66:0d:95:ec:0c:f6:
         e9:24:57:a1:03:f5:67:ed:ab:0d:1e:b8:2c:2b:8b:0e:1a:38:
         2a:96:d0:2d:db:10:fc:25:8a:67:f1:82:0e:04:e7:06:f7:a0:
         a1:d1:d9:7d:90:7a:ad:4a:cf:d8:b7:83:15:6d:3a:4a:e2:f2:
         bd:59:66:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:18:08 2025 by rpki-client