Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/2bacfbe0-bed9-3dec-8f53-700fe3fa24fa.roa
File:                     2bacfbe0-bed9-3dec-8f53-700fe3fa24fa.roa (raw, json)
Hash identifier:          9vwOWqdNshxiOeotWGLi5EH1DHDMCLVxGcti/PDW8tA=
Subject key identifier:   80:B5:05:89:BB:11:DD:73:81:53:14:49:D5:5D:C2:81:7C:34:E4:57
Certificate issuer:       /CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
Certificate serial:       010D0C9F43285849D594CF1F79760B1D0177EDC0
Authority key identifier: C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/2bacfbe0-bed9-3dec-8f53-700fe3fa24fa.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     26141
IP address blocks:        64.239.70.0/24 maxlen: 24
                          2602:812:c000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:cf:1f:79:76:0b:1d:01:77:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=9273609f-8620-4075-9567-4f648ef365ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a8:0a:e6:00:8a:be:72:85:9a:69:6e:9b:da:
                    c9:72:0c:7d:c1:05:f5:23:b6:61:05:7a:c1:7d:f6:
                    46:36:03:07:a1:52:c2:1e:cc:24:48:60:31:d3:7e:
                    74:41:d7:c4:11:cc:68:12:3e:07:cb:7c:bf:d0:79:
                    27:ba:90:00:12:a3:14:55:04:ef:f5:eb:15:04:da:
                    1f:16:73:61:d7:43:aa:27:46:51:d2:81:de:97:ea:
                    9a:a5:3f:e0:86:55:00:cb:95:b6:36:79:5e:74:15:
                    0b:e1:63:83:13:49:e7:92:7c:62:2d:39:1a:c1:a6:
                    39:52:0e:ea:38:9e:2e:18:ba:e5:3e:58:d8:2b:9e:
                    8e:08:50:3f:6a:9a:c1:d9:29:05:d9:25:d4:f8:cd:
                    db:42:87:e2:ec:f8:bb:a0:b1:e6:79:d9:18:6b:3c:
                    7c:13:aa:a3:be:30:3b:ac:8d:f8:ae:ff:20:2b:50:
                    d5:9b:85:e9:e7:74:ba:f5:c1:3a:94:57:70:b6:05:
                    54:fe:db:38:57:00:24:74:fb:bd:66:6b:1d:b5:8b:
                    a7:6b:b9:dd:31:b9:5f:92:5e:1c:ca:2c:fe:fa:9a:
                    a0:84:61:1a:df:63:35:af:d8:78:4b:b4:d0:53:00:
                    82:45:be:46:03:73:b4:f8:30:2a:fa:77:79:d4:ef:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B5:05:89:BB:11:DD:73:81:53:14:49:D5:5D:C2:81:7C:34:E4:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/2bacfbe0-bed9-3dec-8f53-700fe3fa24fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl

            X509v3 Authority Key Identifier:
                keyid:C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.70.0/24
                IPv6:
                  2602:812:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:cb:cf:ca:be:ff:b0:65:f8:e7:f8:b2:4a:b2:42:6c:18:
         49:65:53:f5:cf:23:55:04:78:5d:73:7d:a3:ca:26:4f:6b:dd:
         68:3b:eb:77:d6:e1:99:62:e8:c1:1c:64:74:11:0f:5b:b2:58:
         ff:4c:e0:9f:fa:c6:9a:b9:06:ba:19:7d:0b:ad:19:88:fd:9e:
         11:b4:eb:2d:d2:ba:e6:dc:35:f2:4b:06:24:eb:36:44:08:7a:
         92:5a:63:c6:33:38:40:79:19:da:8b:62:d5:9f:fb:16:ff:ba:
         4c:64:f4:1a:fa:ad:9f:e9:11:f1:ee:af:8f:82:5d:c9:82:46:
         05:7a:8c:6a:a4:20:b3:ee:ef:12:48:b7:33:0c:ba:15:c0:cf:
         71:a2:5c:17:04:38:ff:41:41:be:63:2e:7a:4a:c6:4a:71:f6:
         a2:ad:47:ef:da:ca:0f:db:5a:78:ea:91:19:68:fd:a0:ed:ae:
         74:f4:41:56:06:da:07:26:79:c9:a7:d8:58:44:99:a5:66:aa:
         b3:74:79:44:c6:10:99:cb:3c:b0:7b:6c:40:d2:8c:4b:4a:e3:
         88:ea:a0:4f:0c:85:bf:a7:52:25:f2:28:df:9a:42:da:c7:d6:
         99:ec:c1:04:85:55:d2:3d:71:06:99:79:be:2f:9d:41:4c:96:
         85:6f:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:43:09 2025 by rpki-client