Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e9d63068-d8da-3fba-bf52-4495a1330232.roa
File:                     e9d63068-d8da-3fba-bf52-4495a1330232.roa (raw, json)
Hash identifier:          y70h5zfrH7FHOvN7wX2TY7U6AXCK9TRS30S2cTrRkxQ=
Subject key identifier:   AA:87:F9:25:A5:B0:30:BB:95:4D:98:D3:0A:CE:18:1D:CC:7D:9F:61
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584A331AF6CF5D63D50FF0374680
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e9d63068-d8da-3fba-bf52-4495a1330232.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     8560
IP address blocks:        70.35.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f6:cf:5d:63:d5:0f:f0:37:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=536f6ea5-bfe9-4e23-a3fb-888baf80f6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:1d:76:92:29:ed:dd:ba:27:05:eb:50:0b:
                    67:c2:24:eb:4a:0a:09:b2:be:c7:13:c6:39:8b:d9:
                    bc:07:4d:00:58:52:85:16:c2:a1:5c:a2:82:4c:4b:
                    72:a7:32:71:05:55:8d:c2:9a:67:f1:86:f0:06:89:
                    0b:e6:98:c0:8c:d3:06:93:a7:f7:a3:12:4a:04:31:
                    38:96:e9:29:6f:1a:95:c5:21:48:f8:ef:65:d8:68:
                    12:38:e6:5e:96:d6:a5:43:0f:01:51:2b:96:63:45:
                    79:49:33:04:c7:81:4f:f0:76:b7:0e:24:1e:d9:1e:
                    40:ee:7b:db:f8:d2:5c:fe:24:15:15:76:10:52:5f:
                    94:3c:e0:3a:32:e4:73:59:b3:e6:2e:7f:40:49:75:
                    77:e7:68:4a:bc:46:f9:68:27:a8:e5:ee:86:d1:b1:
                    ed:24:16:fa:54:c6:cb:3e:a7:f8:c3:60:35:2e:a7:
                    6d:34:99:f6:85:11:8d:e7:b6:ad:ca:bb:0d:b8:23:
                    8b:dc:74:aa:47:61:4c:8d:8a:6c:c0:95:c3:db:de:
                    f1:c5:8a:75:b5:93:48:ad:e9:d2:27:02:f8:65:2e:
                    cf:9f:2f:6e:4d:53:da:00:42:c4:00:28:b3:fd:b6:
                    e8:73:f0:b6:42:fe:48:79:f4:b3:1a:ae:6b:e2:83:
                    32:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:87:F9:25:A5:B0:30:BB:95:4D:98:D3:0A:CE:18:1D:CC:7D:9F:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e9d63068-d8da-3fba-bf52-4495a1330232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:32:2e:09:4c:0f:89:42:c2:51:d5:e1:32:30:04:a8:cc:d0:
         a9:04:0d:0e:0e:d2:4e:54:cf:61:ff:e7:7a:64:00:71:6b:dd:
         a7:d2:bc:10:7e:c4:cd:bb:d3:5c:87:93:10:cf:95:77:78:1c:
         79:14:77:37:cb:2b:2f:21:38:9b:2c:72:c6:cb:95:01:a9:e6:
         61:5e:0c:b1:36:67:a2:2f:9d:4a:c5:d4:f7:19:85:9f:ce:44:
         bc:90:67:d5:e1:c8:e7:e6:1a:2c:27:ce:91:57:8c:65:7d:91:
         8f:4d:ff:d7:e0:9f:01:bf:7a:81:ff:83:55:6e:74:15:43:88:
         90:ec:e2:42:1c:10:15:7c:9e:3f:a6:6b:21:d2:d0:0f:17:5c:
         95:9d:e1:00:d6:1d:08:49:48:3c:63:d4:f3:dc:0d:96:7d:6a:
         e1:be:2f:2d:27:f4:0c:99:88:90:d3:01:31:b0:23:ba:05:af:
         bd:99:5d:8d:9e:61:03:47:2b:ff:ce:8d:90:1b:ca:e4:9e:a9:
         95:d2:f1:40:cb:c8:fc:78:79:37:20:ff:42:bf:9b:66:96:21:
         c4:4a:c6:67:08:11:a6:90:34:fd:88:42:6f:ad:8e:3f:47:a3:
         76:98:64:2b:76:74:13:cc:4a:89:b5:ce:1c:76:8c:f8:7c:30:
         79:88:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:05:59 2025 by rpki-client