Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26b6d07f-ca55-3ae1-98f6-71ebdaec577b.roa
File:                     26b6d07f-ca55-3ae1-98f6-71ebdaec577b.roa (raw, json)
Hash identifier:          PQ7mebVkohaTDDl13FvZVHq2FHDCPYx3U3EqIue+mMI=
Subject key identifier:   46:17:19:AA:AF:CC:34:74:7D:02:F7:C4:EE:FA:6F:79:DD:C7:AA:93
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A3FAAD81C3561AE5B6CA51C40
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26b6d07f-ca55-3ae1-98f6-71ebdaec577b.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     22652
IP address blocks:        70.35.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d8:1c:35:61:ae:5b:6c:a5:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=0ecd267d-73de-49ac-a168-6696e5ae3fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:64:ae:15:ba:82:a6:81:11:bd:a0:49:76:
                    b4:bb:8d:1e:97:6e:d2:7e:b4:ed:61:21:7c:93:4c:
                    67:cf:1e:65:3b:1a:cf:fe:60:41:20:39:20:a9:e5:
                    bf:a0:a9:46:0d:c1:a1:42:cf:d6:5a:f9:07:f4:af:
                    08:ea:22:44:9a:2c:ce:76:d1:70:bb:32:6b:cd:07:
                    4a:cd:01:78:ab:15:c8:be:2e:ac:37:ea:a7:59:b4:
                    3b:7c:ac:85:5c:68:63:b8:39:2b:36:11:a6:40:fb:
                    ae:33:d0:93:94:b8:81:9a:f1:a1:36:78:7d:e3:30:
                    a6:87:a0:a3:40:04:cd:59:64:5a:90:90:34:23:9f:
                    6f:b7:05:43:76:36:55:d5:ba:ed:4e:3b:33:58:da:
                    9a:02:bf:df:e3:2c:98:99:13:c5:27:12:e7:f6:b5:
                    4e:ba:d8:1d:4e:2d:54:0e:ea:b4:d8:f9:35:9f:e5:
                    d6:95:91:32:4f:03:cb:d3:ca:45:64:7e:eb:e0:e1:
                    65:be:74:e3:c4:d0:9a:71:b4:7f:45:67:3e:20:ba:
                    06:b3:67:5a:10:ec:73:ad:4e:b0:9c:1d:78:5e:fa:
                    86:5d:cc:71:5e:f5:9b:aa:86:93:0d:e3:10:8d:de:
                    da:22:9d:76:d5:81:fd:b6:a9:86:4c:a9:65:f5:36:
                    04:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:17:19:AA:AF:CC:34:74:7D:02:F7:C4:EE:FA:6F:79:DD:C7:AA:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26b6d07f-ca55-3ae1-98f6-71ebdaec577b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:97:5e:86:c3:5c:42:22:d6:20:93:31:52:e7:be:db:2f:d9:
         4a:f3:ed:8f:bc:2e:7b:1c:bd:e0:ac:0b:02:bb:98:33:e4:e0:
         83:b9:4a:18:dc:b9:11:c5:0f:1a:0a:56:34:47:0a:f0:d1:b4:
         1e:7a:40:bd:25:84:2c:d0:82:22:20:70:9f:4f:b7:33:9c:da:
         93:2a:05:35:b2:36:02:24:48:3b:ff:4c:ce:7c:4f:b4:d9:d5:
         41:2a:a1:86:c7:86:ed:2a:4b:1c:80:77:c6:52:8f:c8:ef:33:
         b5:b1:d2:39:f0:3b:90:f7:f2:05:26:67:61:61:55:93:08:f6:
         de:7b:93:89:f7:2b:cb:c6:5f:82:6b:38:73:1c:ed:1d:73:00:
         3d:f2:13:d1:cf:9a:a9:1e:bd:23:80:5d:a6:dd:e3:ac:ae:d9:
         53:c2:0f:a0:05:34:45:57:62:85:ad:aa:b8:87:46:68:d6:b2:
         d7:45:af:26:e2:82:ac:af:2e:72:67:9a:8c:46:53:07:17:55:
         3b:d5:09:8b:2a:73:f1:ec:4e:85:fd:f9:eb:6a:84:30:31:f3:
         42:0b:03:b6:62:72:a4:a6:17:6d:d3:b5:bd:5f:0f:85:ff:b3:
         94:3b:64:81:32:11:c4:05:45:40:13:1b:33:2e:e6:b4:42:ab:
         59:94:18:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:23:26 2025 by rpki-client