Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c94d0824-29ac-34b2-ab7f-b0fa9f787086.roa
File:                     c94d0824-29ac-34b2-ab7f-b0fa9f787086.roa (raw, json)
Hash identifier:          2vWhaue049/xm0DiBofmA30exgXtS3qg/FvM3O01/qE=
Subject key identifier:   97:24:56:D2:A0:BF:BF:11:32:DE:4E:E0:BA:E4:1A:4B:F6:C2:C8:65
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B36CCBD1FB4F5E547FA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c94d0824-29ac-34b2-ab7f-b0fa9f787086.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     701
IP address blocks:        70.16.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:36:cc:bd:1f:b4:f5:e5:47:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=d2065767-f456-4c6d-9813-d4b693245dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:de:0a:6d:51:67:b1:af:ee:12:ac:71:01:8b:
                    db:2c:33:4f:a5:41:dd:4e:96:2c:aa:0f:bf:a1:5d:
                    71:79:bb:7f:56:a5:be:f7:e9:48:fc:df:b9:7a:48:
                    60:40:1a:8c:95:2c:90:a4:d7:8b:6e:25:f8:fe:8d:
                    85:1e:f6:0e:08:49:ea:99:fa:61:29:e7:3d:4b:c9:
                    6e:8b:08:e4:38:ca:59:37:30:01:c1:59:2f:8c:f8:
                    c6:22:45:08:5c:02:9b:45:5e:29:3b:5a:3a:01:70:
                    d3:16:ea:71:15:2b:68:c6:49:19:0c:d7:54:2b:20:
                    77:64:f7:82:40:9f:d5:dd:2f:50:79:d3:08:b8:5d:
                    44:c8:f2:8a:05:1f:5d:43:6a:5a:c5:4b:db:ab:e4:
                    02:fd:55:45:ec:37:81:6e:a4:44:b2:4e:58:f4:44:
                    bd:da:45:bf:fc:96:64:b1:f0:5e:f9:b5:3e:8c:4e:
                    16:fe:70:ed:92:44:c6:4a:7b:6b:8f:7f:9c:2a:8e:
                    2d:35:06:d6:61:df:22:8d:02:36:ea:e4:00:f8:06:
                    0c:11:6d:38:7e:3d:a7:64:a1:32:4a:65:54:c2:8c:
                    38:2b:8d:b8:69:54:d0:ea:25:2f:56:79:91:da:95:
                    1a:9b:14:59:9f:1e:c1:79:fe:54:f2:d1:fe:00:4d:
                    dc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:24:56:D2:A0:BF:BF:11:32:DE:4E:E0:BA:E4:1A:4B:F6:C2:C8:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c94d0824-29ac-34b2-ab7f-b0fa9f787086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.16.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:2c:de:94:14:25:bf:4f:5c:3c:f4:93:af:f6:12:cd:37:
         10:0c:4d:84:e8:75:03:ed:54:e9:69:a0:8d:22:57:09:c8:c0:
         91:80:6f:ef:1c:f5:a9:fc:8e:02:db:37:36:ea:8f:8f:ee:48:
         b0:3b:38:87:a6:f2:54:80:a1:50:9f:92:70:1c:52:d5:08:1c:
         c0:58:0b:57:dd:0a:71:51:30:56:f5:d4:1f:d2:44:7b:50:73:
         7d:28:2f:00:6c:ba:49:f1:42:ad:97:18:aa:1d:22:95:ac:d0:
         a9:eb:75:07:8d:b7:12:bf:5e:e1:ab:d6:32:19:30:62:6d:1a:
         f7:7a:2c:22:2c:e8:b3:b8:2f:01:ac:94:5b:fd:61:87:7c:dd:
         d7:b0:cc:e4:62:0e:c7:81:a9:b7:76:d8:c4:f4:a4:0d:e5:d8:
         e9:ab:ce:7b:91:32:68:2f:1a:17:59:04:9a:f3:fd:eb:89:12:
         9d:a7:a6:82:6a:13:54:95:e1:42:83:19:04:84:8e:d5:a7:d2:
         f9:5f:ae:6e:d8:2c:4f:ad:a7:1f:38:24:35:9a:6f:15:75:42:
         6a:cd:b5:51:3a:a9:96:f2:53:df:5d:a2:a9:65:b5:9f:ff:c0:
         bc:d9:dd:d4:90:1d:83:52:54:71:15:b5:51:78:9a:02:75:de:
         e8:44:1f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:30:36 2025 by rpki-client