Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa
File:                     0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa (raw, json)
Hash identifier:          H8ZrStMw9IuM/L0joc2SYAZbvs/by9TRBB60gAYveus=
Subject key identifier:   B4:BA:37:5F:E0:B3:0B:98:BF:63:11:7F:16:5B:C1:35:69:61:6B:0E
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C01BE0A9A5BD3303DE9400
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        70.32.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:1b:e0:a9:a5:bd:33:03:de:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=ec3adef5-a593-487e-8ccd-e07ef3e2229b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:59:10:02:89:5d:8b:0a:68:27:29:a6:7a:32:
                    f3:1e:96:af:9d:fb:c1:9f:4c:58:43:8f:4d:23:03:
                    17:e5:2e:d0:40:53:7b:b8:c4:a1:3d:b4:ea:f5:10:
                    3e:5e:4c:29:e0:82:87:a6:c2:58:17:b7:e5:e4:13:
                    97:5b:2e:66:da:bc:b3:a1:d2:b5:93:60:a5:76:cf:
                    af:11:eb:a1:bd:58:a2:71:b4:4e:bc:c6:c8:4a:d9:
                    36:22:5c:30:fd:19:e6:16:6f:de:a8:43:dc:e7:be:
                    52:48:b5:5e:f1:14:93:98:f0:62:2a:2c:21:80:dd:
                    1e:49:4c:4f:6f:3d:cf:13:e5:41:15:da:84:35:99:
                    40:30:52:c5:72:bc:07:b3:61:d2:a6:d1:72:ab:e8:
                    36:6b:5a:87:d7:44:36:7b:ee:df:40:6e:fa:d7:82:
                    4c:33:7d:c9:ad:51:96:25:f0:d8:0a:2e:f4:71:bf:
                    02:b0:dc:5d:bf:89:34:54:f2:69:fb:96:c1:5c:bc:
                    6e:29:c2:92:2f:0a:b2:03:96:4d:80:f0:06:25:56:
                    5a:32:25:4c:ff:6d:16:bf:43:da:7e:25:ca:a2:be:
                    b6:31:58:5f:a9:fe:f2:49:8e:22:a2:09:a7:a7:71:
                    8f:f8:00:f6:28:8e:67:a4:55:4e:d2:1c:be:1d:de:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BA:37:5F:E0:B3:0B:98:BF:63:11:7F:16:5B:C1:35:69:61:6B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:44:59:27:26:5e:35:5a:a0:c1:1e:ae:14:08:47:55:5d:35:
         23:c6:75:a4:76:4c:c4:9b:5f:8b:12:34:d9:a4:37:fc:31:e0:
         f6:51:4d:c1:9e:67:95:f4:63:e4:87:4a:3e:51:d7:2d:d6:b1:
         a5:14:65:33:85:cb:c5:6e:7c:b4:76:39:91:bb:ef:de:62:28:
         5f:7c:c1:b4:8b:50:0d:2e:ea:a9:48:7d:c0:2a:69:93:41:e8:
         43:8a:80:57:5e:08:31:0b:f6:14:f5:ab:ce:84:64:36:be:97:
         5d:b3:ff:56:c8:8a:05:b1:db:5a:8b:24:10:3d:cf:cb:ec:a1:
         96:5f:e2:95:8a:c2:0b:92:9a:30:21:24:98:36:43:58:17:0e:
         11:87:ea:b3:79:d2:e0:b8:e4:88:c8:23:cd:2d:e3:40:3a:0e:
         f3:fd:43:69:76:ee:57:8a:95:58:cf:39:df:1b:59:cf:c7:ab:
         93:d0:93:77:30:30:42:36:49:81:1d:36:b3:00:2c:96:a5:9d:
         5d:cb:cb:50:ca:24:6b:5b:f1:5b:a6:a1:5f:8d:88:02:d2:58:
         9d:b9:bc:e8:8a:14:cb:96:9c:32:cf:40:4e:11:b3:92:f5:f8:
         04:e8:62:51:b3:56:84:58:45:e7:d5:17:18:c2:be:89:19:40:
         82:6e:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:52:12 2025 by rpki-client