Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/34b9c606-ab1a-3521-bc4d-770e76616417.roa
File:                     34b9c606-ab1a-3521-bc4d-770e76616417.roa (raw, json)
Hash identifier:          2OA7BM2c/P0JxiML7BqpvZynl4oiR6QF07sfFdatR3E=
Subject key identifier:   60:E7:29:75:1F:6C:64:E8:CA:3A:8D:24:53:C3:AB:AA:01:CE:24:7F
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584AC87632A18C0BC560890A6F20
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/34b9c606-ab1a-3521-bc4d-770e76616417.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     27281
IP address blocks:        192.184.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:32:a1:8c:0b:c5:60:89:0a:6f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=7e3e0ed0-7027-4199-9cdd-501b43a4253f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:33:5a:a5:9d:6c:34:1e:1d:43:e2:29:69:
                    66:04:76:2c:76:05:b3:8c:66:56:98:35:69:59:18:
                    22:e2:2f:b7:b1:a0:70:fa:57:44:20:eb:54:dc:94:
                    33:53:a3:2a:72:9a:91:50:40:7f:17:70:46:81:1d:
                    6a:57:14:56:f2:e3:3e:0b:67:07:84:5f:db:d2:e4:
                    03:9c:dd:83:d7:1c:e1:4a:c7:f9:d1:a1:d8:62:2c:
                    43:67:cb:56:c0:f5:7b:4f:ba:01:02:74:ff:2f:54:
                    99:63:00:a0:43:f8:af:8a:a0:d9:9b:17:23:e0:7d:
                    15:9b:ed:89:06:e1:d3:18:37:6f:f1:fc:31:a7:5f:
                    e3:5e:a4:af:47:bf:16:bc:58:15:c9:6d:ce:92:c6:
                    f0:ba:7e:af:bd:58:d6:e2:65:c1:23:ef:e1:8d:dd:
                    11:60:e6:69:6d:1e:36:3c:16:23:03:84:f4:6e:7f:
                    a0:3e:19:0b:46:1b:9a:15:21:2a:5c:47:01:90:0b:
                    c7:30:7e:ee:09:db:57:d7:d4:bd:34:79:d5:c1:47:
                    9c:20:1a:4a:f1:5e:0b:eb:29:0b:8a:15:ba:80:80:
                    ca:e6:7f:d0:7b:e0:84:56:a7:f7:50:d2:b0:d1:e3:
                    0a:09:61:0f:6a:52:62:77:e5:b8:08:f7:17:ab:2b:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E7:29:75:1F:6C:64:E8:CA:3A:8D:24:53:C3:AB:AA:01:CE:24:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/34b9c606-ab1a-3521-bc4d-770e76616417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:09:e6:e2:24:4f:d8:ed:27:1c:13:fe:61:47:62:21:c0:cb:
         80:e0:b3:de:8d:94:f3:e3:c0:61:4b:cf:16:f6:1e:f0:63:af:
         a3:b4:81:53:24:61:66:cf:5a:d3:98:fc:13:4f:fb:9f:fa:14:
         00:71:12:af:9b:14:92:38:6e:ba:32:10:f0:83:45:3c:80:87:
         57:7c:1f:0a:23:b0:ec:e0:36:01:e2:24:b9:b8:63:91:3e:8b:
         5b:e1:01:a3:a3:83:d9:01:08:10:1d:4b:6d:f8:ad:09:5a:93:
         d1:25:01:99:a3:9f:13:88:0c:79:fd:a2:57:08:dd:db:1e:27:
         0a:0d:6f:d5:e3:72:46:3e:ae:65:9e:fd:ca:a7:a5:4c:42:ac:
         ca:62:af:76:42:b4:46:67:49:55:50:6f:7a:5f:b0:5c:f1:68:
         44:29:ad:2d:99:3e:76:9c:cb:ec:fd:0b:84:76:46:9c:9a:a0:
         90:fe:03:4f:3f:d7:f7:0c:a0:c8:42:ee:7b:28:c5:b7:35:12:
         37:a5:a5:74:52:b8:95:6f:31:f9:b0:6e:d1:8f:d0:d1:68:57:
         c4:5f:b5:10:95:5d:11:63:96:08:45:c5:d7:78:f6:d6:18:d2:
         7f:e4:1c:67:01:33:6d:67:c6:6e:db:a7:c6:84:86:1f:25:b3:
         f6:83:1b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:07:48 2025 by rpki-client