Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa
File:                     7cf1b155-1ef2-3673-9779-9ab9f58972da.roa (raw, json)
Hash identifier:          K0trX1ZWnRmjhRQbCsgjgaQ7bn5MMdTg8s1y5rgTtd0=
Subject key identifier:   6D:93:20:1E:BC:DB:0A:05:EE:97:45:86:38:E7:01:24:8E:E8:CD:4B
Certificate issuer:       /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial:       010D0C9F43285849F17FC02E43F73200F9D8B5C0
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     4476
IP address blocks:        192.68.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c0:2e:43:f7:32:00:f9:d8:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=97dc1d4e-3ae9-4959-b36f-ebeb424ad3ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:8a:0b:ec:f2:b2:cd:0e:5c:11:5b:bb:1d:
                    6f:00:d9:b3:36:c1:c5:02:d8:4f:0c:80:95:a2:3c:
                    3a:c4:e4:03:98:60:9d:88:7a:55:92:06:f2:0e:b8:
                    ce:af:68:4f:2e:85:d6:87:78:0a:74:a5:69:fb:6b:
                    d7:b1:22:72:3e:cc:d9:7e:1e:60:d6:73:3b:c3:b0:
                    b6:ff:e1:77:e0:1b:da:ec:69:42:9a:df:f0:c2:ab:
                    c2:b9:72:88:ae:fe:d9:bc:5a:f5:ae:25:21:4d:a8:
                    3a:c4:28:30:c3:a2:49:92:dd:f0:38:2a:18:21:76:
                    b6:c8:0f:38:ea:ae:d6:02:3e:2c:e2:15:77:72:81:
                    49:8d:a9:b6:50:1e:20:4e:18:3d:a2:24:e9:08:7e:
                    b2:94:e5:dd:34:10:fb:85:c3:dc:e1:f0:d9:17:bf:
                    eb:82:d8:cc:1f:f0:41:27:5d:c6:eb:74:5b:d8:60:
                    35:7c:4d:fe:91:9a:d4:01:a3:3f:15:5b:ec:89:8d:
                    b7:54:f9:79:c4:8a:27:a3:44:cc:1a:71:d5:3d:fb:
                    45:c4:d1:14:aa:76:d0:0c:40:a8:3b:83:75:23:88:
                    77:4e:94:0e:bc:a0:f3:a6:83:8b:5e:86:13:48:13:
                    34:aa:1e:2a:88:75:02:4b:c6:bb:a3:1a:27:be:69:
                    f3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:93:20:1E:BC:DB:0A:05:EE:97:45:86:38:E7:01:24:8E:E8:CD:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl

            X509v3 Authority Key Identifier:
                keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:35:db:ac:92:92:ad:5f:1b:15:11:15:04:cd:ff:0f:cb:cc:
         a6:e7:eb:54:ca:58:4e:34:ea:c9:52:96:4e:e3:39:db:61:28:
         24:57:a6:98:50:53:e7:70:59:f8:e9:24:4f:59:c6:73:66:1f:
         fd:56:4f:2e:14:87:0a:84:46:84:43:03:4e:f3:4d:b4:fa:67:
         e5:d9:ff:8a:b9:8c:ff:75:3a:75:dc:58:3a:87:99:28:a6:ab:
         5a:25:f5:4b:c0:5c:ac:d9:0a:33:d4:42:21:d0:bf:8c:61:bd:
         9d:cd:0b:11:d9:16:ff:b6:9c:66:35:4b:e9:33:4c:c6:15:52:
         b5:60:88:92:26:83:48:89:b3:28:da:ee:52:c3:28:44:7a:d4:
         ec:1c:ba:c7:bd:98:3f:5c:84:93:f0:ca:da:8c:66:0f:6c:e4:
         57:36:b0:bc:02:ec:1c:f3:cf:6e:f9:29:4b:86:f3:9c:9f:d3:
         d2:85:3d:1e:b0:8f:6a:7c:84:29:ca:8f:a5:1a:91:07:55:1f:
         eb:95:71:30:91:54:ba:86:d5:2f:08:d1:a0:2d:b5:76:7d:85:
         6d:da:34:15:bf:42:82:41:78:17:c7:99:64:ce:4a:8c:3d:13:
         17:92:07:26:4d:2f:aa:1b:70:0c:8c:a2:ab:58:16:ec:e7:38:
         18:e4:5a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:06:11 2025 by rpki-client