Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/017b31e6-1929-34d5-9f64-255ce7d509ef.roa
File:                     017b31e6-1929-34d5-9f64-255ce7d509ef.roa (raw, json)
Hash identifier:          MNqo2JXbMVMVPUvCTZsjgAP5flUL5EcCzXPI6tyMXsU=
Subject key identifier:   24:3A:D8:CE:E8:2F:1A:8F:10:D3:58:11:BD:E2:A9:72:04:2C:D8:94
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849EBEA857A786673BB480762C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/017b31e6-1929-34d5-9f64-255ce7d509ef.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     62957
IP address blocks:        70.165.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:85:7a:78:66:73:bb:48:07:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=a251a870-5b13-4c48-90ef-56cdeb420492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:71:04:a9:34:5d:40:4e:ba:c0:c3:67:43:e3:
                    aa:dd:de:51:8f:6d:b2:21:59:5c:54:47:83:21:49:
                    ec:f4:16:fd:84:5b:6d:32:d5:34:df:35:53:b4:94:
                    f1:f8:df:01:16:f1:ec:a0:16:3f:7a:00:1b:ea:33:
                    31:98:f7:c0:dd:38:7a:72:e5:34:bd:1d:9f:71:b6:
                    22:4d:91:b0:6c:40:43:ed:73:65:64:b4:ec:af:ed:
                    39:5c:79:61:c6:e2:35:d0:6c:ca:ba:28:93:9c:a4:
                    95:b1:9d:9b:b8:02:19:e5:f4:60:4b:f7:11:90:52:
                    01:43:a5:f9:76:d6:29:58:78:43:ca:09:b9:20:0d:
                    ac:6a:28:05:27:3c:1a:3b:66:82:1a:ba:3f:6c:d7:
                    81:81:22:16:6a:a2:88:74:27:cc:4a:5d:91:50:be:
                    1c:a8:1a:f3:29:c3:ef:16:b7:78:79:5e:98:79:d8:
                    77:be:bd:fe:f1:40:8d:c6:ee:e4:a0:28:3e:e2:3f:
                    99:75:3f:20:1f:95:c1:72:8d:85:42:40:b0:b8:d3:
                    e1:b2:c2:f8:fb:ca:ce:1d:0f:5a:0e:bb:a1:83:31:
                    05:81:56:f5:75:2a:66:ce:d4:5e:1d:9b:3b:d2:d8:
                    71:bf:12:c1:00:c1:d6:98:2e:ab:d6:7b:a0:9f:41:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3A:D8:CE:E8:2F:1A:8F:10:D3:58:11:BD:E2:A9:72:04:2C:D8:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/017b31e6-1929-34d5-9f64-255ce7d509ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.165.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:79:df:0e:22:54:87:dc:a5:8a:05:63:25:ed:23:34:3f:c8:
         9e:2c:b8:f4:76:5e:17:98:e3:6b:c6:4c:48:01:36:66:da:3f:
         ee:58:80:b9:df:e1:24:5d:a5:e6:7a:7b:73:88:27:0d:6a:0c:
         6b:a2:8c:69:e4:cf:07:ab:2f:ec:ec:0b:f7:2e:65:7b:8b:3b:
         6b:80:ff:fc:86:0c:de:bb:c7:0e:08:55:fc:46:7b:57:e7:15:
         dc:a3:d7:d7:cb:b5:2b:03:ee:76:3a:9c:18:16:67:ac:93:e8:
         30:44:29:dd:62:62:51:16:3b:12:b6:0c:27:c2:ec:8f:45:6f:
         da:b3:73:d5:ae:c5:fb:62:04:35:1d:2e:87:51:5e:ff:44:cf:
         1b:c8:c1:52:d3:87:10:b7:d7:3e:61:59:f7:0e:5a:a9:92:b2:
         9b:c8:7f:8b:3b:24:e3:52:3c:7d:5d:70:c3:ad:18:e3:5f:16:
         5f:eb:b6:06:a7:fa:07:99:c0:8c:c0:39:1a:85:d6:bf:5e:06:
         50:7f:8a:c0:e3:9f:dc:b2:17:36:db:11:57:61:3e:8f:12:92:
         2f:7b:36:e4:e4:2b:f3:bb:f8:ff:b4:d3:9e:f7:f5:8a:d6:90:
         8b:ac:6b:09:7b:8e:ee:47:fa:c6:1f:16:27:3b:ce:e4:42:e0:
         4c:ac:ec:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:05:27 2025 by rpki-client