Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/917dd06f-b3c3-3d3e-825f-4c74e7ab757e.roa
File:                     917dd06f-b3c3-3d3e-825f-4c74e7ab757e.roa (raw, json)
Hash identifier:          3if1AsxHzth2cBSy9rZwUtGJpopUKyY+1xBMXPBmdRw=
Subject key identifier:   A4:8F:D8:69:A9:F6:65:01:40:17:07:0A:AB:7B:08:7A:4E:B0:DC:2A
Certificate issuer:       /CN=17499469-12e7-4915-9db8-02bba626b87d
Certificate serial:       010D0C9F43285849AE7F40CF534280E2D1508D80
Authority key identifier: 6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/917dd06f-b3c3-3d3e-825f-4c74e7ab757e.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     396432
IP address blocks:        194.107.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:40:cf:53:42:80:e2:d1:50:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17499469-12e7-4915-9db8-02bba626b87d
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=548597d5-64c9-42f5-896c-01c75d26c300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:96:69:cf:24:a2:0c:68:1b:01:8f:0a:99:cf:
                    f2:bb:ba:12:7c:f7:b2:9c:d2:2d:8f:3c:51:67:2a:
                    ca:33:12:e8:ee:f5:57:19:c3:38:80:2d:7b:8a:c5:
                    35:7e:72:77:69:30:65:ee:b6:db:2b:4b:4e:d3:7d:
                    f5:14:15:d4:20:d0:01:e2:f2:1c:00:42:f2:35:96:
                    05:28:d8:0f:09:b2:21:d1:70:aa:f7:85:be:58:b6:
                    b3:9f:fc:75:18:dc:31:6f:56:70:16:90:89:89:75:
                    83:bb:bd:b8:ac:f9:a4:ca:80:ea:30:f6:60:50:28:
                    f6:fa:ad:31:13:85:5c:ec:c3:e3:5d:51:66:4f:45:
                    41:91:05:59:a3:64:69:51:8f:71:92:47:4d:44:83:
                    dc:74:24:cf:c0:f5:10:11:ac:b5:1d:31:e4:8a:19:
                    13:09:43:6b:a5:61:fb:8c:e1:2a:f5:d9:cf:8a:52:
                    da:f6:51:04:e7:f7:a1:25:7a:89:04:1f:76:04:e6:
                    98:35:00:98:25:3d:c3:c5:09:51:d9:e7:c7:3b:2c:
                    76:1a:97:43:b2:64:ee:2e:fa:5e:a5:c7:dc:b0:18:
                    a6:f0:a5:22:cc:80:d4:eb:8c:71:8d:15:34:34:3c:
                    83:f5:e7:ce:ac:18:d2:e4:7a:91:f5:e2:c6:f5:18:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8F:D8:69:A9:F6:65:01:40:17:07:0A:AB:7B:08:7A:4E:B0:DC:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/917dd06f-b3c3-3d3e-825f-4c74e7ab757e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.crl

            X509v3 Authority Key Identifier:
                keyid:6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.107.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:57:f8:a4:dd:21:d3:3c:12:36:41:a6:f7:c0:fb:e6:82:7a:
         17:61:82:fe:bc:ff:93:d0:dc:2c:ba:16:2a:9e:06:9c:bd:2a:
         ad:cc:9c:e0:d3:8d:3f:e6:56:81:0e:8c:a5:14:e8:e9:e6:3c:
         d8:82:17:b1:df:4a:ab:68:76:91:a3:75:8e:03:f5:29:0b:9c:
         f9:db:d8:43:17:27:9f:0b:0e:37:fe:66:be:c0:67:4f:69:85:
         39:92:88:db:d5:a9:c4:16:58:7a:a7:49:32:d3:fa:84:12:36:
         02:eb:be:96:62:00:b1:c4:fa:db:0a:99:c2:d6:02:44:4d:13:
         4d:39:b0:f9:ca:2d:69:53:2d:d9:26:a6:99:a9:b6:0a:d8:44:
         a6:44:b2:db:a0:78:4d:42:d2:2c:ed:b1:44:74:fa:e6:36:34:
         4e:b9:1d:b0:b0:49:83:a2:11:7d:8b:30:3a:c2:ab:9d:3f:8f:
         b2:9d:0b:72:a4:16:4c:52:b5:b3:25:33:f0:b3:db:35:c3:50:
         c5:da:92:7e:c5:eb:9d:1e:26:d8:0d:9a:d0:ae:9b:be:ec:6d:
         66:dd:4e:28:3e:bb:bd:2a:39:7f:be:c2:64:c0:70:8a:29:fe:
         75:f1:6f:74:f1:c8:61:82:a8:09:45:52:0a:ed:cf:2e:37:cc:
         6b:1e:db:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:53:53 2025 by rpki-client