Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/74c824e4-4562-3705-89a2-2170b4d3d88a.roa
File:                     74c824e4-4562-3705-89a2-2170b4d3d88a.roa (raw, json)
Hash identifier:          njaPG8uhgrGGtQ49rEHWgs6gDPId657EQV8WnVXiZs0=
Subject key identifier:   97:FB:CB:B3:8A:05:41:8A:4B:67:AA:58:65:80:91:DD:F0:78:4C:B0
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F4328584A374AD0D81D09D09255528780
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/74c824e4-4562-3705-89a2-2170b4d3d88a.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     33362
IP address blocks:        70.35.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d0:d8:1d:09:d0:92:55:52:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=b2169707-e35e-413f-a3f9-f19214e1ab17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:9c:d1:6b:53:58:e7:ab:c7:8b:c6:70:e3:
                    c8:b5:6f:80:96:ff:15:17:57:fc:bd:53:38:76:96:
                    47:d2:3c:64:14:18:e0:52:55:cd:ae:14:b9:5f:39:
                    15:4e:2d:3f:20:76:fd:cf:43:16:27:ed:09:bc:2b:
                    ff:e8:24:b9:53:47:5d:84:2c:8e:8a:25:e0:36:d4:
                    93:fb:a4:01:40:59:1c:c7:0a:f3:f3:e2:a7:d1:68:
                    a2:e5:9b:59:69:f1:5b:60:86:8f:22:f9:ec:f0:dc:
                    2e:3f:2e:78:ee:7d:cb:a1:61:e3:f9:84:bc:3e:46:
                    6f:79:18:01:e1:1a:fa:56:2d:ec:50:c2:b7:f8:ae:
                    07:18:10:96:7d:73:37:54:72:da:77:dc:04:b4:78:
                    bb:27:3e:32:3c:c7:23:1d:bc:1c:25:94:a5:bd:9e:
                    fb:e0:2e:8f:73:ee:4e:31:13:78:e0:70:e3:af:16:
                    d5:cd:b9:94:44:53:7f:43:65:2b:e4:e5:31:e5:5d:
                    9e:3b:61:e6:d6:ed:60:90:c6:04:67:18:15:46:ee:
                    bd:30:ca:f4:a7:e1:50:9e:b9:19:0c:be:65:e0:32:
                    03:fd:d1:21:f0:f8:a3:e4:fe:5e:fd:c6:87:ff:a6:
                    18:fd:e7:dd:e6:f3:5b:16:36:1a:45:3f:d5:6a:c4:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FB:CB:B3:8A:05:41:8A:4B:67:AA:58:65:80:91:DD:F0:78:4C:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/74c824e4-4562-3705-89a2-2170b4d3d88a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:78:c3:27:5c:a0:df:37:01:81:bd:30:da:8a:26:74:86:f7:
         39:89:ad:f7:8c:4a:3c:d0:27:51:00:de:51:3a:05:99:f8:d1:
         16:ec:c6:ca:d9:a0:e2:41:f2:cd:e3:7d:87:21:d3:e0:21:ae:
         51:69:2f:69:a9:85:47:00:74:98:a6:35:fa:3c:16:d6:9e:82:
         9a:0c:b1:a6:33:ac:3d:d5:a5:68:dc:8f:84:8b:a2:f3:3b:9e:
         07:ee:cf:4a:ba:60:83:b8:ef:36:98:41:aa:29:f8:6d:fb:8b:
         3e:78:c3:8a:df:9e:ff:68:6e:32:e7:b2:6c:74:a5:ae:2c:e8:
         cb:bd:f2:0b:69:80:d6:37:0e:61:69:87:47:be:f0:c9:5a:55:
         a7:2f:da:29:f4:b9:a3:d5:b5:0e:fb:34:eb:6e:53:80:e4:dd:
         35:63:76:b5:1b:fd:8b:c3:c5:37:94:2f:ae:48:d7:30:46:0d:
         b0:7b:85:71:95:f4:6e:56:3c:d8:3c:11:21:ef:d8:33:e8:a7:
         f0:0c:5b:59:49:3c:16:2a:38:d2:b1:7d:ee:73:5e:a3:8d:a7:
         10:78:a9:60:3e:ad:27:b4:34:87:0c:21:64:3a:6a:d2:94:41:
         6c:ee:33:d2:a5:7a:25:ad:7a:3b:50:e4:4d:91:b8:c5:75:23:
         07:13:79:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:40:14 2025 by rpki-client