Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa
File:                     8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa (raw, json)
Hash identifier:          xNfB9QxK2+XbR8iL+u/BRm3i/oprxbvdZC+KtwSDLAQ=
Subject key identifier:   89:DD:B4:9C:62:9B:E4:6A:9B:EE:7B:50:61:DC:CE:69:A4:CE:68:05
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584A268AC05484A889DBFE5B4F80
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     3695
IP address blocks:        70.36.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c0:54:84:a8:89:db:fe:5b:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=f13722cb-8cce-4f4c-92fd-9774f78b9a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:55:9d:45:0b:3f:5b:7f:1a:bc:de:ed:f4:6c:
                    50:61:77:98:7d:fd:9b:06:b4:28:df:55:c6:6d:6f:
                    30:4b:72:93:c7:ac:12:e3:b4:b1:6c:ab:2b:f8:5b:
                    64:85:1c:c2:31:8d:1b:ce:77:88:42:b2:f5:4a:da:
                    de:78:ad:bd:81:39:5b:02:d4:70:4e:09:40:4b:97:
                    41:2c:7e:49:b0:e9:2c:d8:fa:75:e0:39:ae:95:ce:
                    17:e0:3f:36:d6:d7:6e:a3:e2:99:fe:c1:44:fd:ad:
                    ed:c4:82:9f:05:9d:c8:cd:e5:6c:98:f2:84:81:9e:
                    d8:2e:32:8d:6f:6e:4a:e9:32:15:8a:e7:9c:d0:f6:
                    7f:09:e5:24:ec:19:af:69:ca:c7:07:51:f2:21:af:
                    48:62:7f:09:2f:2b:13:35:23:a6:3b:1c:48:f8:0e:
                    4a:d3:43:b3:bc:06:39:63:aa:09:85:34:ea:3c:5e:
                    12:1a:6d:bf:20:d2:93:24:d7:53:97:d7:28:d1:83:
                    62:8e:92:66:f4:f8:77:80:cc:08:25:b2:49:3b:2c:
                    1b:65:d1:ee:12:24:f3:d3:6f:c6:52:c9:fd:14:25:
                    be:72:44:43:48:6e:0c:aa:33:78:52:7c:ac:74:d6:
                    07:ba:25:dc:3a:2e:f3:2a:84:ff:71:c7:f8:b0:f8:
                    62:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DD:B4:9C:62:9B:E4:6A:9B:EE:7B:50:61:DC:CE:69:A4:CE:68:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:87:b7:5c:10:80:aa:a2:65:7e:de:3f:c1:cf:58:fc:d8:0d:
         d5:c5:91:3b:d2:58:33:13:88:1b:5f:73:c1:df:cc:6c:0c:b1:
         48:c5:47:c6:64:12:74:bd:22:8f:12:25:83:59:06:ad:d7:6c:
         37:50:c6:b4:91:ea:38:e8:d6:3f:cf:d5:57:83:29:c6:20:5c:
         86:f1:83:c5:a8:93:03:e0:a7:ed:7f:ed:59:2a:d3:87:7e:91:
         37:cc:cf:7e:c4:f3:dc:04:38:eb:f5:e1:05:d7:2e:75:1c:5c:
         a7:36:c5:26:61:3c:42:da:f0:f9:e3:25:19:1c:45:73:ba:3c:
         83:6f:2b:3b:8e:53:8f:08:ff:f4:81:59:84:ef:f1:03:44:90:
         16:7f:49:ab:32:f8:91:1a:7f:2d:76:b1:78:ec:21:00:b3:58:
         83:45:71:65:4c:9f:1e:8c:f9:79:4f:63:2d:1d:1b:aa:9a:cf:
         87:3b:59:50:3a:6d:fd:04:83:13:5c:23:b2:17:02:45:04:e0:
         82:a1:7e:6e:a3:fb:56:dc:c4:85:79:21:37:16:2c:ac:1c:dd:
         73:93:75:4a:7c:12:9d:80:c1:e4:f5:bd:69:ff:72:dd:ea:c6:
         1e:71:b6:dc:9f:f0:a7:07:0c:68:0d:be:28:d2:8e:35:ee:60:
         a8:c7:ad:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:44:38 2025 by rpki-client