Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/6fd99c21-281a-36a9-bea0-daae7520319b.roa
File:                     6fd99c21-281a-36a9-bea0-daae7520319b.roa (raw, json)
Hash identifier:          vFQxRTSUQlOVeCRLIHo+nxarDGobBV5hRC19ZnMSSro=
Subject key identifier:   E8:2E:E9:EB:26:F8:E9:BF:A4:68:1C:13:21:EF:8A:A9:9C:EF:E1:39
Certificate issuer:       /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Certificate serial:       010D0C9F43285849DC8FC33A88C408997E4FF600
Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/6fd99c21-281a-36a9-bea0-daae7520319b.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     3561
IP address blocks:        208.70.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c3:3a:88:c4:08:99:7e:4f:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=58e62bec-c009-4ecd-829b-c6bbc13f76f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:3d:f3:22:72:09:e5:e6:45:03:9c:37:28:
                    4d:9e:3c:26:fd:b8:6f:b1:66:5d:40:45:e0:cf:8e:
                    61:c9:d7:4e:cf:5f:bb:ef:f9:1b:39:7a:37:fc:e9:
                    0f:bc:b0:ed:f4:d8:f3:69:8b:45:5d:a3:10:2e:75:
                    79:3a:72:80:5e:72:e1:c2:1b:ba:65:55:13:f7:06:
                    7d:2a:20:2f:91:03:19:25:5f:d1:93:85:40:8a:18:
                    7f:73:e1:17:d7:f6:b2:fd:6b:fa:f6:6e:4f:24:2c:
                    cb:4b:56:54:3a:db:55:e7:b6:12:14:8f:d6:e2:3a:
                    43:a7:86:73:79:3e:c2:da:8c:09:c1:50:e0:a8:c4:
                    d6:51:b9:82:19:d6:00:d0:ba:52:d3:a6:5f:30:a5:
                    20:dd:8f:c6:13:13:d2:ac:df:4e:91:ca:4e:4c:aa:
                    66:40:4c:54:a0:36:a8:8d:50:a9:a1:5d:f3:8c:8d:
                    8f:07:be:e4:b4:b7:71:b2:31:d4:b6:50:28:b0:24:
                    42:e8:a5:b9:9f:4c:9a:e1:00:15:e4:ef:99:ba:b8:
                    0d:e8:67:53:8c:e3:2f:1b:95:83:a7:05:be:e8:ca:
                    05:55:6c:31:0e:8d:96:5b:21:31:52:bc:89:33:f4:
                    48:b3:42:60:2c:61:c2:ec:28:fa:d7:e6:59:2c:48:
                    f4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2E:E9:EB:26:F8:E9:BF:A4:68:1C:13:21:EF:8A:A9:9C:EF:E1:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/6fd99c21-281a-36a9-bea0-daae7520319b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl

            X509v3 Authority Key Identifier:
                keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:38:81:8b:ed:ee:70:18:66:9a:68:cb:0a:16:07:59:ce:52:
         33:72:e7:eb:ea:c5:82:8e:70:2a:9c:00:da:db:5b:90:ae:57:
         95:d7:00:d7:85:59:1e:ea:4d:6d:38:2a:11:45:22:bb:71:3b:
         9a:70:1f:25:27:c0:31:02:df:e2:61:cb:45:c5:63:12:dd:f5:
         64:b3:0c:7e:7f:2c:65:7b:8b:05:35:97:a8:c1:00:bd:39:7b:
         bf:75:b2:3b:06:a3:b7:ca:a2:7c:c9:39:72:ab:b5:6b:4f:d1:
         79:74:53:0c:82:77:1e:d8:6b:b3:ae:aa:fe:ea:a1:4d:29:2b:
         d6:9c:91:28:40:fc:27:5a:d6:7f:5c:f7:ea:01:86:00:f6:f6:
         30:69:1f:0b:b6:bb:54:44:24:a7:0c:fe:06:2c:e7:05:62:5f:
         ea:4d:3a:79:ec:da:c1:9d:b3:e4:48:dc:8c:69:97:46:7c:28:
         a6:d9:c1:e6:da:ca:40:d4:c9:49:62:9b:9d:4a:e3:cb:ce:6c:
         99:8f:56:be:0d:28:28:b5:5e:70:e6:bc:9a:7d:b3:1f:dc:0d:
         f5:39:2b:1a:62:a5:45:a5:85:59:38:54:79:4c:ee:0e:e4:45:
         b3:c2:8a:46:ec:ae:4b:d8:4b:21:b9:9e:a7:26:32:1c:36:b8:
         49:13:fa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:34:27 2025 by rpki-client