Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b9ac0a15-0e8d-3331-a47e-18ac84ea6abb.roa
File:                     b9ac0a15-0e8d-3331-a47e-18ac84ea6abb.roa (raw, json)
Hash identifier:          S3PRvKtFlpc/wpNG+QhCGbrrTrRckIyXpqvHSKJ1jdo=
Subject key identifier:   0A:EE:E8:26:9B:48:AA:7D:23:D2:90:AA:B6:61:88:56:78:28:BD:8A
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F43285849AD4D20A673C99945887760B0
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b9ac0a15-0e8d-3331-a47e-18ac84ea6abb.roa
Signing time:             Mon 28 Apr 2025 14:44:04 +0000
ROA not before:           Mon 28 Apr 2025 14:44:04 +0000
ROA not after:            Sun 27 Jul 2025 14:44:04 +0000
asID:                     5065
IP address blocks:        70.39.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:4d:20:a6:73:c9:99:45:88:77:60:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Apr 28 14:44:04 2025 GMT
            Not After : Jul 27 14:44:04 2025 GMT
        Subject: CN=36d5f005-2e33-4d03-84b2-5a51d6090184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:5b:f3:38:c6:7b:5f:1e:6e:64:95:4d:5b:
                    9c:c6:f8:85:bb:77:5e:c8:c8:82:8e:25:31:ee:72:
                    6a:6c:51:58:47:0e:41:d0:ad:8b:6e:7d:45:f2:3f:
                    53:06:2d:54:b4:8b:61:81:fb:25:2f:50:70:c9:a0:
                    bc:93:e5:85:22:0c:c8:31:de:42:15:9c:e2:6d:0c:
                    17:e2:97:e5:60:d3:f9:1d:a7:cb:4e:ce:78:71:36:
                    48:f3:1c:26:45:93:42:cc:2e:dd:7e:e5:48:d5:bf:
                    44:8e:6a:87:e4:12:2f:ec:c0:fd:90:3d:b1:fc:ce:
                    af:62:ee:78:a8:6a:b7:69:77:1c:f3:de:21:0a:7f:
                    87:92:e2:62:a4:6e:91:ce:9e:07:6b:81:c0:8c:bf:
                    b3:44:ae:73:4f:07:e6:17:11:2a:80:45:0d:70:25:
                    8b:bd:95:88:f5:45:40:c0:df:bb:3e:be:80:ec:2d:
                    55:d2:41:46:e9:5b:fa:97:11:c5:cd:93:e5:5b:55:
                    f2:31:96:94:d0:b4:3d:42:ef:fb:a8:59:f8:af:73:
                    19:f9:2d:c3:68:ed:60:4c:87:0b:d0:55:b4:88:b2:
                    93:f7:ca:89:17:f0:6c:a7:f3:90:f5:ab:c9:d0:74:
                    61:99:da:0f:bb:83:2d:6a:88:10:06:26:27:79:86:
                    33:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EE:E8:26:9B:48:AA:7D:23:D2:90:AA:B6:61:88:56:78:28:BD:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b9ac0a15-0e8d-3331-a47e-18ac84ea6abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:db:50:95:b4:36:d4:fd:01:ea:12:fd:2f:87:b4:f8:ab:d6:
         43:c1:50:44:71:66:da:29:7b:6f:e9:d6:f6:7d:5a:d8:82:cd:
         d4:17:12:40:4e:59:de:4d:a1:ff:bd:cc:cd:8f:ac:24:86:98:
         ce:fe:7d:d6:92:f9:7c:37:6e:ee:d8:59:b3:fc:d7:de:6c:97:
         ce:d7:6c:73:ce:ab:db:2f:17:ca:45:1a:32:bb:84:24:4d:3c:
         8e:5a:be:81:6b:bf:13:93:71:67:e3:ca:90:c2:66:d9:5c:f1:
         ca:ca:9d:bb:b1:f5:13:67:aa:ce:53:e8:7b:84:21:f3:50:60:
         b4:95:30:e0:5e:57:9b:2c:ea:1d:f3:f9:6a:e6:62:69:39:ab:
         b0:68:5d:af:43:61:9d:06:cb:5b:3b:4d:41:81:d7:9a:65:aa:
         12:d9:59:77:34:fe:76:26:7f:96:18:fc:16:fb:23:f2:48:ce:
         4b:90:9f:58:5e:07:3b:93:ab:e7:c2:d8:1b:d3:ab:53:69:8a:
         58:0f:2f:01:c1:ea:49:ac:f5:50:0b:69:92:c6:bf:8b:9c:af:
         84:93:95:c8:7a:22:bf:ad:d3:01:84:75:1c:de:49:59:b9:13:
         5d:93:e3:8f:7d:ef:d6:05:f6:45:38:c0:3c:74:b1:1e:1b:90:
         30:71:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:49:01 2025 by rpki-client