Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619/1adaa403-5a37-3e29-8ee0-2e614bd0b1e6.roa
File:                     1adaa403-5a37-3e29-8ee0-2e614bd0b1e6.roa (raw, json)
Hash identifier:          /mm56mlxl59Tm04w1+7WypR5yCE+2tG0pQMUMyg2ivc=
Subject key identifier:   41:97:FE:9A:33:1C:8B:62:BE:F3:C0:39:E2:43:BA:B2:90:3E:95:CD
Certificate issuer:       /CN=634613cd-882c-480b-9819-1d4c1787c619
Certificate serial:       010D0C9F4328584A3B7AEF5C669FBBD23AE38440
Authority key identifier: 66:98:D7:09:5D:6C:78:8A:23:34:53:FC:0D:67:37:36:16:91:E5:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619/1adaa403-5a37-3e29-8ee0-2e614bd0b1e6.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     17060
IP address blocks:        70.39.36.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619/634613cd-882c-480b-9819-1d4c1787c619.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619/634613cd-882c-480b-9819-1d4c1787c619.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:ef:5c:66:9f:bb:d2:3a:e3:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=634613cd-882c-480b-9819-1d4c1787c619
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=5599d5b3-b7c9-4afc-8ab4-2ee7b1f8aa3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:2b:be:8c:49:45:1b:73:f5:2f:08:ba:a6:
                    71:51:90:d1:13:df:f7:ac:48:b0:29:44:6b:54:fb:
                    a2:08:c1:b2:d2:27:a2:aa:98:69:a1:cb:34:57:77:
                    0d:03:42:02:8e:6c:06:50:94:2f:c1:81:6f:52:71:
                    95:91:74:da:dc:d5:01:63:cf:90:2e:c4:e2:b6:e4:
                    3b:83:b8:97:5e:28:e7:8e:91:f0:9f:49:16:1a:71:
                    4c:37:4e:0e:9e:43:c8:ff:f4:e9:91:e0:23:1d:da:
                    af:30:ef:18:ca:e6:f8:3a:c0:dc:00:9f:47:02:eb:
                    e1:2e:e4:62:c2:a3:de:bb:fa:ac:92:ab:f9:76:ee:
                    c5:53:5b:b9:79:94:82:3b:f6:e8:96:24:30:5f:38:
                    e4:37:7d:29:3d:6c:65:6d:6c:e3:8f:c9:da:f8:5e:
                    b6:f8:36:4f:3a:b9:44:0f:50:e1:e4:ec:26:18:f0:
                    19:34:d9:c0:80:d5:5a:60:dc:8e:31:19:96:cc:df:
                    b9:b9:68:a1:26:6d:65:55:85:2c:d7:7f:56:19:5d:
                    76:a4:3c:8b:2a:ee:ea:af:ea:38:31:5b:9b:b4:44:
                    c2:18:11:61:6a:16:d3:18:fe:b6:f9:02:6a:11:15:
                    32:63:9c:a0:c9:5b:ba:8b:b7:49:d7:23:f6:60:d0:
                    8d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:97:FE:9A:33:1C:8B:62:BE:F3:C0:39:E2:43:BA:B2:90:3E:95:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619/1adaa403-5a37-3e29-8ee0-2e614bd0b1e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619/634613cd-882c-480b-9819-1d4c1787c619.crl

            X509v3 Authority Key Identifier:
                keyid:66:98:D7:09:5D:6C:78:8A:23:34:53:FC:0D:67:37:36:16:91:E5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ef:12:99:a2:02:c6:b2:12:83:f2:6c:13:2f:84:9b:bb:92:
         2c:36:53:17:38:34:f8:75:18:f1:a9:87:cb:8f:96:1c:56:93:
         68:ab:56:9d:88:80:25:35:e4:45:fd:48:a0:d5:22:9a:ad:29:
         82:ed:4c:de:89:bc:69:37:db:87:35:ba:5a:64:46:3a:04:5b:
         cb:da:b6:dd:50:bb:e2:df:5b:44:1e:08:7b:98:79:27:82:05:
         21:f0:62:58:8c:6e:49:9a:e4:4d:3e:32:59:04:7c:9b:9a:d9:
         4f:97:7c:e6:28:47:e7:14:f0:e0:51:41:93:45:09:54:8f:f6:
         90:e5:9f:df:ef:87:83:f1:1b:46:87:31:ed:d9:6b:d1:0d:79:
         cb:4c:84:aa:11:c0:7c:88:d0:4f:4d:c6:a7:1f:91:8b:ef:35:
         0a:eb:8b:10:92:3d:6d:bf:d6:cd:43:ca:21:f0:d4:c2:88:e8:
         94:aa:df:7b:e3:d3:bc:fb:02:4f:7d:4b:19:d2:1c:55:98:a5:
         3a:9f:3f:dc:b7:16:fa:94:d6:12:a2:f1:d2:24:f2:61:d3:75:
         a4:67:a2:08:66:9a:2e:b6:b5:5a:8b:7c:8e:06:a8:0a:99:f8:
         0e:f2:12:39:b3:79:37:d4:b4:d6:48:c9:d1:56:68:36:97:6a:
         28:42:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:48:33 2025 by rpki-client