Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bedda6cd-9233-36a0-9c5e-9d370ae846ec.roa
File:                     bedda6cd-9233-36a0-9c5e-9d370ae846ec.roa (raw, json)
Hash identifier:          FdB+F+uMpb5aN5daP3qegkgWsLa/EQ6VcAMMRpAUjgQ=
Subject key identifier:   1D:CD:F5:DD:9B:1D:FB:F8:8C:02:30:C2:D6:33:FD:A6:9E:4C:E7:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A6DBB4CCD882AD9F252232200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bedda6cd-9233-36a0-9c5e-9d370ae846ec.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     33661
IP address blocks:        70.88.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:4c:cd:88:2a:d9:f2:52:23:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=429a12ab-0a8a-43bc-b4ad-baff2977454d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:63:58:7b:b8:ec:21:34:07:a9:5c:d7:a9:a2:
                    9b:02:ed:91:3f:e3:2c:ef:8f:51:cb:1f:b1:0b:c4:
                    db:62:97:d7:c8:d6:5f:c5:1a:b1:f9:0b:f9:74:01:
                    18:80:8f:49:24:74:8a:7d:9b:00:5b:23:eb:aa:0d:
                    6c:c6:0f:a5:56:b0:ed:4c:f7:c6:be:94:c6:e4:f5:
                    a7:b3:39:c7:8a:aa:aa:1d:fa:2a:f3:66:23:03:bf:
                    5f:7f:13:0a:a7:d0:d2:d4:c1:b6:55:74:60:56:e9:
                    e6:96:ca:a2:74:36:e0:1b:09:b2:22:91:85:d1:6b:
                    68:9d:ca:0d:7e:ee:b2:d1:76:bd:02:be:ed:c6:95:
                    fb:30:0b:79:47:7e:96:62:bf:b4:2b:31:9e:93:aa:
                    11:ee:0b:fd:98:b3:5a:d3:20:c1:ae:dc:08:9c:36:
                    a4:44:23:a8:e3:f7:34:b8:7c:7d:b5:59:e2:3f:c4:
                    58:87:0b:ae:96:e3:05:ca:99:95:7b:d1:79:05:16:
                    24:16:66:29:35:b6:bf:31:c5:f6:a3:59:42:d2:1f:
                    3f:56:be:27:85:59:3b:58:60:ae:a0:05:37:8b:08:
                    bd:16:34:19:97:09:07:e6:2a:83:4d:f9:79:48:a1:
                    f6:d0:e1:23:18:a5:53:fb:de:14:16:ec:49:41:8a:
                    e4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CD:F5:DD:9B:1D:FB:F8:8C:02:30:C2:D6:33:FD:A6:9E:4C:E7:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bedda6cd-9233-36a0-9c5e-9d370ae846ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.88.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:78:d3:bf:41:a1:92:8a:ce:2c:23:63:42:0c:88:79:54:5e:
         ff:d2:00:e6:f8:ae:36:ca:00:09:07:ed:b0:42:10:62:85:65:
         8e:a6:12:ab:82:42:b8:aa:07:0b:15:40:6a:15:85:13:94:93:
         1d:a5:7e:88:72:9b:36:47:4a:d9:30:bf:04:c1:08:b5:68:44:
         05:5d:b6:2f:bb:d2:8d:1f:95:92:98:5c:84:e3:63:7d:8d:7b:
         4e:7c:c6:76:ef:9f:80:76:73:26:4b:b4:5a:43:06:4e:b9:04:
         05:14:2b:1a:e0:87:f8:08:43:b0:d9:6b:5c:37:2b:60:ce:0f:
         85:15:b5:2d:bb:d0:4a:a0:d4:30:96:97:1e:26:45:f4:65:aa:
         cb:86:4c:3e:5d:1f:39:c9:5d:36:3c:c1:25:bd:68:75:d8:90:
         2b:bb:dc:2f:9a:7b:99:bd:47:15:d9:c0:0e:9a:42:3b:b9:a2:
         a7:ee:f8:2a:70:67:f5:ed:67:ac:b0:00:5d:2c:5f:65:f9:fa:
         ba:77:cf:05:35:c4:ae:77:79:8b:7e:d3:a5:b2:57:b3:e0:c3:
         44:e9:17:2e:1a:c6:cc:b4:72:a0:f6:95:6b:7e:c3:13:32:87:
         1d:6e:76:31:7d:e6:8a:ec:57:ee:72:b5:bf:ea:20:7e:0b:21:
         ce:db:f8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:42:57 2025 by rpki-client