Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/026fb763-a35e-3e4a-adb2-2204b9fe62de.roa
File:                     026fb763-a35e-3e4a-adb2-2204b9fe62de.roa (raw, json)
Hash identifier:          fMYc0UMxCE2IIIGnYMoDAZ9rvzk3mCqMHhZwmJF6750=
Subject key identifier:   64:BC:70:0D:BA:A7:80:75:0B:9E:CF:0A:1C:F2:17:49:58:95:80:11
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584A268ABFE4D6CFDDDDBC359900
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/026fb763-a35e-3e4a-adb2-2204b9fe62de.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     3695
IP address blocks:        70.36.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:bf:e4:d6:cf:dd:dd:bc:35:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=14520305-77ed-4a76-aa8f-ec40799af7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:1a:d6:4b:d0:ae:8c:8d:0e:18:d7:f5:d6:
                    f4:a6:e7:09:b6:29:c6:07:01:30:f5:9b:a5:09:88:
                    b1:0f:1a:ac:f2:01:2b:1e:3a:9b:1c:8d:45:de:91:
                    c7:65:a0:8d:01:b8:fa:1e:9e:5a:e6:0e:59:79:fe:
                    3b:ef:59:72:c6:a1:98:20:9c:8f:7c:04:19:75:cb:
                    2b:d5:da:41:98:81:22:b6:1b:86:69:88:db:64:06:
                    65:26:37:bf:52:a5:a4:db:ef:16:68:25:03:d0:6e:
                    17:0b:eb:2d:ce:f2:14:a1:29:96:25:e7:3b:f2:44:
                    ad:fd:c5:e2:2b:78:e1:95:12:2a:fd:a8:21:46:41:
                    bc:60:fc:45:7e:4e:57:d4:9c:01:34:5a:bc:41:5c:
                    bd:4b:2f:cc:ba:18:f9:03:3b:43:25:37:9c:80:d8:
                    b5:69:cc:af:a7:9b:2e:6d:b2:1e:ed:99:14:9d:65:
                    96:83:13:95:42:17:6d:fe:90:ab:5a:29:4b:d6:73:
                    c5:30:50:ab:09:d4:cb:29:91:91:c2:3c:d2:3c:4f:
                    15:9f:87:4e:1e:79:b0:08:3c:a4:87:3a:2e:9c:1d:
                    01:6a:75:34:6d:ea:ec:f7:6b:68:97:1c:d7:e3:61:
                    a5:2d:45:75:1d:b4:bd:c5:bd:a9:8b:b0:fb:0a:3e:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BC:70:0D:BA:A7:80:75:0B:9E:CF:0A:1C:F2:17:49:58:95:80:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/026fb763-a35e-3e4a-adb2-2204b9fe62de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a4:93:81:e6:35:28:d5:ea:ed:7d:52:05:b0:fd:d6:af:75:
         e6:e5:e1:99:51:57:72:bd:3f:82:be:15:51:db:17:27:58:98:
         c6:03:0d:f6:e0:28:b7:77:e9:9f:93:5b:fb:6f:61:69:f4:ed:
         6e:75:ab:c5:47:0b:c2:aa:72:e8:5f:1f:ee:ad:25:2d:63:b9:
         32:ec:56:a8:79:3a:41:69:08:c7:09:7e:48:6c:9e:fc:22:79:
         42:a0:e3:2d:c0:87:dd:e3:72:76:dc:57:ea:dc:76:6a:d3:ef:
         67:1c:42:d3:fc:86:08:27:cc:f6:80:df:1c:ef:14:36:4d:9e:
         98:d8:9d:3b:4f:34:bf:77:49:dc:b1:f1:d2:ce:10:30:cd:eb:
         82:84:53:b4:0f:92:75:33:cb:7e:af:7a:99:46:4b:4e:a6:68:
         40:b2:5e:a7:ea:e2:72:1b:a7:cf:10:9f:fc:93:8e:6c:32:63:
         80:0b:f9:12:d8:19:b6:64:0e:d4:9b:69:1e:76:d2:bb:ad:d9:
         96:2f:be:b2:93:2b:f9:0d:72:dc:c0:9c:a2:a4:eb:35:2f:ea:
         8e:17:ec:7e:47:56:b2:bf:20:0f:31:cb:d7:7b:fa:6f:c6:ec:
         f7:d0:29:70:9e:f9:1c:56:23:41:be:04:bb:8b:f6:28:c6:a6:
         2d:4d:88:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:30:38 2025 by rpki-client