Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa
File:                     79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa (raw, json)
Hash identifier:          b/TQwoVg+upgBVbpmIz+Jft6ZX3VFOx+gjjubv7yaPE=
Subject key identifier:   11:03:BC:96:3B:32:14:D7:6C:95:CB:C8:ED:36:AC:12:60:20:93:A8
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A3CE027A7BEAB0D857E33AC40
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     22652
IP address blocks:        70.35.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:27:a7:be:ab:0d:85:7e:33:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=a853e843-c86e-4edd-b57a-08af839480a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ce:3a:ed:da:fd:07:4b:84:85:e5:8e:84:22:
                    a7:d7:20:5d:aa:ed:1a:2a:6e:22:0e:b4:f9:16:2c:
                    79:a2:3c:6a:51:cf:29:bb:da:fc:fb:50:0e:fc:8a:
                    d4:09:84:2e:0f:d5:83:a4:7d:59:10:66:f5:02:aa:
                    59:0b:b9:6d:56:02:3c:76:6a:53:d0:44:f0:d8:13:
                    e6:c8:a4:14:9f:64:c9:fd:b5:e6:45:dd:e6:dc:3c:
                    63:8d:71:9e:57:e6:db:2b:0c:8c:cf:ca:34:9d:49:
                    a2:78:b6:38:b0:fd:87:4e:ce:eb:5b:c9:06:f0:f9:
                    69:5b:5c:ce:ed:f2:48:c1:c3:9d:5d:a4:ff:7f:cf:
                    e4:49:17:16:4a:1e:fa:b0:5e:ab:37:1a:13:68:91:
                    9e:d7:93:ea:e8:e3:ea:c2:e2:dc:53:1b:7b:31:2d:
                    2d:8e:ef:8b:dc:96:24:31:9a:6a:68:d5:db:ed:83:
                    bc:87:a8:2d:8a:e4:37:4d:7e:b0:8a:46:f5:31:e5:
                    f4:80:ac:9d:b4:0d:1a:e9:d0:c2:fd:1b:a3:c2:6c:
                    c9:da:2f:97:4e:e0:2b:89:6b:88:75:c7:f0:bd:97:
                    3b:2d:d4:a7:9b:52:a6:15:20:d6:96:9f:a0:4a:62:
                    21:ab:fe:5b:a8:c2:1f:4e:58:15:f1:d8:6b:77:c1:
                    64:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:03:BC:96:3B:32:14:D7:6C:95:CB:C8:ED:36:AC:12:60:20:93:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7b:29:43:be:a1:d9:ff:78:03:c4:8e:72:5c:6b:be:5f:48:
         28:d4:05:c9:64:61:ef:7c:b8:82:e6:27:6d:ae:07:52:02:79:
         82:cb:f2:50:42:ad:45:b2:33:ad:9b:5d:99:76:14:97:7c:3e:
         a9:d2:61:5e:66:3c:f5:14:4a:a5:99:ba:c9:7c:03:3d:19:f6:
         b1:f4:c2:63:5a:a7:d0:45:9f:bb:1a:03:23:a4:46:61:7d:08:
         50:f0:cb:44:e8:3a:12:b9:af:ef:c4:e2:b0:d6:3d:a2:16:a4:
         68:9a:fc:ae:9e:ad:0c:e4:f5:4e:e2:40:2e:d7:33:e1:0e:8e:
         e8:01:cd:23:fd:28:63:3d:a5:d1:f6:6f:10:3e:fe:a8:ea:e2:
         81:1b:77:0e:cf:8a:e9:ec:84:b9:40:1f:1d:6b:b9:e7:11:ed:
         e7:c0:68:ca:be:b9:21:bc:08:75:27:c8:0d:5f:6a:08:cf:85:
         88:5f:e3:9d:a0:57:3d:5e:90:09:ab:13:01:41:c4:ec:b9:31:
         6e:47:71:f9:5f:f3:cd:95:6b:ec:64:06:b6:c2:e0:b4:87:ac:
         70:e2:cd:6a:2a:20:df:d9:05:38:5e:6f:49:2f:5c:96:0d:d8:
         71:5f:0f:e2:ce:d2:8d:07:fa:86:09:21:4d:95:a5:04:06:52:
         bb:2c:b7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:08:31 2025 by rpki-client