Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/554b2145-a7c2-3cef-8d2b-7e0dc941c705.roa
File:                     554b2145-a7c2-3cef-8d2b-7e0dc941c705.roa (raw, json)
Hash identifier:          JlEen47BAyZNOO0tqeYcXojJ3pTGWjjWIOtto453Nas=
Subject key identifier:   F7:77:11:81:B7:E3:D3:44:7B:62:6E:18:A5:32:1C:6B:5A:9A:86:2E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F835F3C9CCFDE3F4DCE850
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/554b2145-a7c2-3cef-8d2b-7e0dc941c705.roa
Signing time:             Thu 01 May 2025 17:15:15 +0000
ROA not before:           Thu 01 May 2025 17:15:15 +0000
ROA not after:            Wed 30 Jul 2025 17:15:15 +0000
asID:                     22773
IP address blocks:        70.161.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f8:35:f3:c9:cc:fd:e3:f4:dc:e8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:15:15 2025 GMT
            Not After : Jul 30 17:15:15 2025 GMT
        Subject: CN=255b722c-7526-44e0-8f03-940e5adfd3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:a5:77:23:17:44:ea:a0:81:af:85:f4:34:
                    6c:84:32:ba:1f:d9:bc:4b:b3:d3:2d:f4:08:ef:8b:
                    d9:c1:6e:6a:86:52:46:9e:5a:3a:16:4a:2b:4a:4e:
                    4f:58:13:f5:a8:8a:4d:8c:65:f7:5a:2f:50:86:f3:
                    56:43:3c:3d:05:0a:6e:23:51:ea:6e:0d:d2:4a:99:
                    13:db:42:e7:a0:77:ce:59:95:c2:16:2c:3b:f0:63:
                    3e:37:61:27:57:5a:56:a0:31:78:b2:ab:38:45:1c:
                    ac:c0:77:17:be:c6:69:2a:62:84:70:f9:e5:1c:d2:
                    34:92:5a:f5:48:35:c5:64:e5:4f:15:56:92:6b:d9:
                    2f:34:c8:ed:be:b5:8e:2b:d8:a4:a6:6b:1b:45:08:
                    c0:b7:fd:64:d4:f3:d8:77:9e:e3:65:f0:d0:58:50:
                    ed:fb:02:53:f7:08:cf:06:59:5d:59:15:98:dc:c1:
                    6b:89:a7:d6:2b:bf:97:ab:51:49:5d:8d:58:f6:ec:
                    96:d4:60:a7:f3:eb:87:46:85:3f:09:45:7f:9b:c1:
                    ea:ad:26:57:8d:42:e8:a7:7a:72:91:04:e8:e4:a9:
                    43:13:12:38:25:46:5d:3f:8e:05:13:b0:c4:3a:92:
                    27:9a:d9:bf:de:2f:dd:6f:fc:6b:4a:0e:1c:1d:d4:
                    61:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:77:11:81:B7:E3:D3:44:7B:62:6E:18:A5:32:1C:6B:5A:9A:86:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/554b2145-a7c2-3cef-8d2b-7e0dc941c705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.161.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:20:05:29:e5:ea:59:35:a0:30:89:89:66:42:17:00:cd:bd:
         0e:ec:9c:c7:29:c9:ce:54:a5:ba:1a:40:b3:e0:c7:1f:47:e4:
         b8:43:32:25:56:58:ce:32:98:34:1d:7a:d7:cb:a9:d9:55:23:
         bf:58:f4:0f:6a:85:70:1f:59:c2:eb:ec:0c:38:e1:be:92:15:
         2d:71:06:23:50:17:69:cc:4e:bf:5d:18:90:ab:97:cd:ef:43:
         6d:49:19:66:f4:eb:bb:dd:3c:e3:98:f9:17:40:2a:3c:aa:6d:
         e2:3e:5e:ed:3b:10:1a:66:5c:c1:a5:6e:a0:eb:e2:81:1a:bf:
         b7:d7:fd:13:17:aa:5b:a0:47:5d:85:ce:f7:35:ce:44:54:94:
         30:9c:20:bf:04:7a:93:23:b2:6e:6e:70:a1:4d:e6:00:8f:99:
         ad:40:92:d3:3e:2f:1f:7c:56:54:71:b2:70:ad:6b:e7:0d:b0:
         4b:48:4d:dc:9b:92:1d:70:74:27:9c:af:8c:eb:dd:ee:02:a9:
         7c:fe:df:c8:4d:65:58:24:dc:99:7e:da:8d:63:95:60:d3:9b:
         a2:b8:7d:ac:69:11:43:48:2d:9c:40:c2:90:37:08:22:4a:be:
         40:b4:28:46:5e:f9:b2:14:74:15:6f:0c:10:cf:4c:0c:23:f3:
         bc:bd:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:50:45 2025 by rpki-client