Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/79d7da34-2a7b-3c25-955b-2ac224bba0c0.roa
File:                     79d7da34-2a7b-3c25-955b-2ac224bba0c0.roa (raw, json)
Hash identifier:          eWlRd4Y5bQ9ahIqYlHyw2YF6r2IHzs19RzFEIPwl+pk=
Subject key identifier:   2F:4A:CB:AE:8E:43:2A:0C:99:51:08:64:6C:E8:FE:07:A1:C9:58:96
Certificate issuer:       /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
Certificate serial:       010D0C9F4328584B2A2C3BA1EF4963790C849F00
Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/79d7da34-2a7b-3c25-955b-2ac224bba0c0.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     8070
IP address blocks:        137.70.158.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:3b:a1:ef:49:63:79:0c:84:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=b26252f4-24a2-44b0-acb7-98bd2bddfbd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d1:d5:1b:f8:c1:ee:ea:f5:fe:72:77:df:5d:
                    d8:75:7d:40:18:dc:c0:9c:22:f9:26:16:54:7d:28:
                    ec:08:b4:0a:b9:f9:1f:fc:b3:8b:a0:3f:ce:2c:92:
                    d5:7a:8a:11:57:47:eb:2a:33:b3:e4:5f:61:dc:1d:
                    54:dc:8a:84:fe:b2:a3:90:d4:7b:09:2d:6a:15:0c:
                    dc:97:59:d0:d8:b3:39:26:25:bf:3c:55:14:70:c7:
                    41:8b:96:04:20:20:86:31:e7:92:a4:6a:5f:55:5f:
                    eb:70:05:f5:37:30:e6:25:dc:a2:28:ea:81:45:a8:
                    b1:c5:ac:77:70:7e:9a:3f:4c:d4:87:f7:9e:99:4a:
                    2a:89:6e:48:3c:a7:94:5c:e7:5a:76:aa:22:ed:73:
                    aa:9a:07:45:4f:06:c3:32:9a:11:2f:40:5d:8f:62:
                    ba:d7:14:49:f3:ed:44:30:a4:5a:36:62:97:d8:24:
                    3b:4a:8f:6d:1a:b1:80:47:ca:42:02:db:5c:0d:60:
                    45:ec:d0:20:b0:71:cc:36:db:26:8b:cf:b6:94:10:
                    16:a5:56:c5:cf:15:a3:1e:6a:c0:7e:7f:6e:34:b1:
                    8e:a2:4d:41:ff:7e:3c:67:eb:48:ce:09:c0:6e:75:
                    b9:87:35:c7:1e:e6:f4:23:4c:15:e1:f8:70:20:14:
                    80:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4A:CB:AE:8E:43:2A:0C:99:51:08:64:6C:E8:FE:07:A1:C9:58:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/79d7da34-2a7b-3c25-955b-2ac224bba0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl

            X509v3 Authority Key Identifier:
                keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.70.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:3d:3c:75:7b:3d:96:c1:e3:4e:8a:6a:ab:58:fd:93:6e:ff:
         08:ed:ef:bc:51:ae:7c:8e:81:ee:ce:d8:24:01:58:d7:e4:8f:
         6e:82:22:d2:7f:fd:3a:70:33:04:0d:4b:19:92:fa:ff:78:2e:
         d1:5b:22:91:d4:ab:4a:3b:46:1b:bb:bc:9c:55:26:96:fb:41:
         dd:80:e6:31:e9:13:27:65:51:95:a6:20:6d:bc:46:89:81:e6:
         40:2e:96:56:78:ff:35:8f:62:b3:50:f4:10:6e:99:b2:63:99:
         12:2d:b2:cd:51:5a:c9:75:3b:bf:80:1a:05:4d:09:c8:66:cd:
         53:db:3d:4a:cf:b9:d5:16:9e:9c:71:7a:81:83:9b:ea:f2:d0:
         05:8e:b8:36:ba:f4:88:c9:c8:7b:96:45:89:b2:4c:40:af:c2:
         a4:07:87:f9:f9:bc:e1:f2:cd:fe:71:dc:e5:93:db:ba:06:f3:
         8f:78:ac:0a:70:5f:45:3c:91:e6:4a:e2:9d:b9:24:0c:6b:47:
         47:69:12:0c:70:75:0e:56:92:3f:fe:80:2e:1a:2b:e3:5b:2b:
         04:db:3d:e6:17:97:01:0c:54:7e:7e:4b:ea:67:4e:aa:97:18:
         3e:7b:67:d5:f6:ed:7e:b8:70:8f:fd:c2:d2:cb:74:f1:31:58:
         3d:d0:01:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:33:04 2025 by rpki-client