Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa
File:                     d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa (raw, json)
Hash identifier:          OuPdIic8J9NEj8mt0siDEyZOrVg/r4OLuGYBSG99SJw=
Subject key identifier:   9C:EC:3F:FC:F1:0A:62:0F:34:E7:54:4E:E5:13:AD:F4:1A:B4:F5:44
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA8525636DE487910D558C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        70.105.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:25:63:6d:e4:87:91:0d:55:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=46e6d73c-0fa7-46db-a584-37b543dc0113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a5:d5:f8:41:b0:48:46:09:d7:79:e8:63:cd:
                    04:4b:b7:52:ba:9a:03:ae:aa:ff:0c:d0:34:29:8f:
                    ff:06:31:03:a2:31:09:92:1f:4e:dc:b1:9d:b2:e1:
                    6f:18:09:a6:3d:88:f2:73:10:07:e2:07:dc:60:ab:
                    d8:e3:8b:73:73:30:e7:c9:ae:4a:9b:21:a1:b0:6c:
                    65:dd:c4:f5:6a:f4:83:e4:47:c0:42:1f:2e:47:fe:
                    ad:bd:c2:64:7c:e4:d3:4c:80:31:cb:02:08:c5:2f:
                    cb:ab:e6:d6:10:aa:0c:c9:1c:6a:e9:73:83:c7:17:
                    d3:ec:4c:83:74:27:f3:51:94:16:15:cd:4a:1f:cc:
                    5a:00:24:07:fb:12:4b:09:1a:f5:ea:07:d0:38:01:
                    1d:55:a4:d1:6c:a5:e7:47:78:62:2f:4a:b5:ed:21:
                    79:51:10:5f:59:92:38:08:f2:55:45:9c:76:e3:dd:
                    36:e5:f1:2c:e2:da:78:ac:86:8c:7d:dd:ee:0c:ea:
                    bd:49:fb:1f:60:72:50:1c:ea:67:f2:e2:e1:d4:a8:
                    8e:03:2f:82:86:15:3d:8a:4a:17:62:95:fd:14:12:
                    f8:b1:6b:d9:09:c3:73:20:39:7f:6b:95:9d:13:83:
                    08:0b:53:94:ea:1f:4d:87:46:9e:b4:eb:89:ef:79:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EC:3F:FC:F1:0A:62:0F:34:E7:54:4E:E5:13:AD:F4:1A:B4:F5:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.105.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:56:38:06:0a:39:d2:58:23:c1:4e:d0:00:75:42:24:f1:ec:
         f4:4c:58:c7:62:3a:2c:13:b6:e7:85:58:16:e1:df:db:6e:11:
         6a:9b:95:84:75:72:b9:78:d6:e0:64:82:9e:e0:ab:9f:6d:fe:
         80:ee:46:c5:98:0c:a3:03:85:7b:a1:16:49:12:7e:55:eb:91:
         82:51:50:7a:72:85:b3:f5:05:3d:33:db:98:36:cc:3d:d9:52:
         7b:47:71:d0:da:89:50:45:22:93:de:d4:3b:19:f4:c1:4a:fd:
         d0:c3:b7:87:ec:fb:79:17:27:99:77:09:8f:6e:86:86:16:aa:
         d3:3d:95:fa:a9:97:c2:d5:57:9b:28:68:2f:9b:56:af:18:2b:
         d6:49:8d:cb:71:c3:a5:6f:1a:48:d9:70:90:4c:74:1b:b1:24:
         fd:b0:77:79:9c:af:02:dc:73:5b:f9:41:fe:0d:17:47:fa:83:
         1d:d0:03:2c:ea:e9:97:4e:da:27:27:1f:7b:dd:2f:f5:0b:8d:
         67:b2:58:59:98:25:d7:32:3c:50:e5:38:95:b9:0a:4a:ba:81:
         3f:a0:92:54:d3:5c:d9:01:db:8d:21:11:15:54:95:4f:d6:85:
         ed:d5:a3:d8:1b:28:c6:df:98:9b:2b:48:d5:f2:12:aa:70:27:
         4c:cd:fe:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:34:55 2025 by rpki-client