Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/d55da693-e506-31b8-be3f-ec86fb9e0b12.roa
File:                     d55da693-e506-31b8-be3f-ec86fb9e0b12.roa (raw, json)
Hash identifier:          cdte2nWLoSPoUORZVUC2rZSoY23kQQHYtSAkC38MXMM=
Subject key identifier:   11:ED:E7:4E:7C:D1:DC:1D:01:86:96:36:EE:52:90:18:93:BF:B6:C5
Certificate issuer:       /CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
Certificate serial:       010D0C9F43285849BF3F5D6B6B0A1B6CD7D36F80
Authority key identifier: C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/d55da693-e506-31b8-be3f-ec86fb9e0b12.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     400731
IP address blocks:        64.239.70.0/24 maxlen: 24
                          2602:812:c000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:5d:6b:6b:0a:1b:6c:d7:d3:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=12906d9e-1f09-42eb-9402-3b14213b9383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4a:d0:03:cd:10:69:fd:56:72:4a:ad:96:2f:
                    9b:26:cf:1f:e7:11:2e:1f:a1:30:a6:8b:f5:03:f1:
                    48:97:67:17:fa:36:6f:e5:f9:8c:e2:0f:ff:75:d9:
                    ef:de:2e:9f:d5:74:6d:f7:76:96:5f:4f:21:6c:9a:
                    27:04:2a:d3:90:9f:c6:54:e5:1d:4c:72:be:14:e7:
                    33:2b:6c:59:f3:df:9b:6b:9c:2d:67:15:1d:17:25:
                    29:07:21:0c:08:ad:37:95:4f:49:ba:f9:c4:21:16:
                    51:11:97:b5:a5:2f:d8:e7:1e:7d:79:32:19:d5:25:
                    b0:90:ef:a1:e5:e9:f5:bb:75:d5:6a:d4:f5:87:44:
                    55:11:11:b3:02:cc:5a:e8:b0:97:e3:26:1f:a4:69:
                    4f:e7:22:d8:07:72:5a:b3:86:51:f6:35:ac:cf:84:
                    bd:fd:42:26:3b:df:37:80:e4:f3:50:fe:39:cb:c7:
                    70:fb:15:9a:91:de:7f:6f:ae:6f:a3:dd:9d:8d:6b:
                    f2:3a:79:e7:e7:ea:4f:35:99:85:bd:92:56:f1:19:
                    b4:00:dc:cb:a8:20:86:1d:ab:7d:8d:05:f7:27:21:
                    fe:8e:bd:96:9a:c2:82:6d:ff:7a:e0:25:e3:93:69:
                    c9:77:2f:09:95:ca:0b:0c:fc:af:13:56:ee:64:9a:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:ED:E7:4E:7C:D1:DC:1D:01:86:96:36:EE:52:90:18:93:BF:B6:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/d55da693-e506-31b8-be3f-ec86fb9e0b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl

            X509v3 Authority Key Identifier:
                keyid:C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.70.0/24
                IPv6:
                  2602:812:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:7a:3e:4b:6e:ab:22:61:59:10:96:f7:6d:63:55:2a:7e:cb:
         b3:44:20:2c:73:bc:7b:93:fc:ce:26:4f:ba:89:a2:67:84:d5:
         05:1a:70:06:7c:ab:32:93:0f:7f:76:92:ac:25:43:86:49:cc:
         d9:14:56:67:c0:82:0c:33:88:02:d0:ba:a4:3c:6c:2d:bd:73:
         67:56:e6:2d:c5:74:04:91:ec:20:b0:e0:5e:36:d6:20:94:a7:
         8e:96:50:2c:e3:76:bd:ec:d5:81:ae:29:86:02:77:da:a8:45:
         7b:55:72:b2:99:9e:0e:f4:31:40:2d:b3:7c:45:15:d0:04:46:
         f3:5a:9a:82:84:04:38:e1:21:7e:58:f2:69:1f:f2:54:34:af:
         f1:38:1c:c8:31:d7:34:f8:94:5b:68:61:2e:bd:27:dd:70:2a:
         fe:45:02:de:93:6f:3f:35:82:33:f6:d4:d0:72:bf:00:ce:28:
         17:82:2a:42:1f:7b:0d:59:57:19:b1:ad:dc:57:51:a5:ae:56:
         2b:de:86:33:c8:3c:30:63:cf:b9:3e:d8:bd:70:9f:29:61:96:
         0a:81:7f:fb:0c:a1:97:b6:85:24:f5:fd:ee:0e:53:50:cf:d6:
         d1:e3:f2:b6:6b:a9:86:85:f0:47:d6:44:e1:63:63:be:dc:99:
         a0:b0:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:45:40 2025 by rpki-client