Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa
File:                     caa9c6f8-021f-3be2-bae4-31f4834a4921.roa (raw, json)
Hash identifier:          CKikcDcPiTo5SOTkinNTcxjqJodwSgLtxZtk8XRxoxE=
Subject key identifier:   36:E2:28:58:95:A4:42:75:7B:60:1D:F2:1E:F9:87:4C:1D:A8:CA:ED
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A6AF092C746A9054769588D20
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     1239
IP address blocks:        198.16.70.0/23 maxlen: 23
                          198.16.72.0/23 maxlen: 23
                          198.16.76.0/23 maxlen: 23
                          198.16.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:92:c7:46:a9:05:47:69:58:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=356c1c91-71c7-433c-afa7-8f6041f2c5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a2:14:13:8b:f0:61:9d:d6:b2:61:2b:d9:9e:
                    ec:22:05:78:ba:a9:54:95:df:31:0d:80:12:5f:1a:
                    4d:13:31:95:44:84:dd:8f:c9:8b:eb:15:b4:ca:18:
                    d3:0e:55:7c:38:70:ff:c9:e1:cc:99:50:da:e4:c0:
                    2e:be:24:d5:a2:53:56:aa:82:06:69:61:80:ac:dc:
                    7d:0b:7e:56:ce:d3:2d:72:0d:09:d9:ed:60:98:4d:
                    74:c9:bf:af:19:18:34:65:4b:72:45:de:46:fa:06:
                    6d:1e:3d:09:0d:eb:af:79:93:c6:03:a6:24:91:85:
                    e6:2f:d2:3a:ee:55:7e:d5:ad:df:b8:1e:71:c6:11:
                    7f:e6:0f:fa:23:4c:0a:f6:08:2d:4c:9e:e7:73:3a:
                    a9:47:21:21:28:1a:4d:3c:18:b1:50:18:8f:76:d4:
                    d3:c3:4b:c6:38:70:fc:50:f8:71:82:87:2c:e3:0c:
                    2e:e2:ef:09:de:53:d3:4e:31:b5:b5:c4:2a:93:e9:
                    f6:9b:c2:f3:0c:26:25:c7:fc:dc:b5:1c:39:a8:3c:
                    a1:c7:dc:ff:4d:60:0f:22:2f:2d:54:da:f7:af:4d:
                    91:86:89:2a:7b:24:6f:8a:0c:68:b3:a2:20:88:4c:
                    a2:04:a6:7a:68:45:78:d7:af:5b:ac:35:b0:90:6e:
                    dc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E2:28:58:95:A4:42:75:7B:60:1D:F2:1E:F9:87:4C:1D:A8:CA:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.16.70.0-198.16.73.255
                  198.16.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:c2:fd:1e:bf:6e:4c:c7:39:fd:2b:7a:77:e7:c6:27:37:6e:
         8f:66:98:b6:17:b5:f3:45:16:8d:53:95:77:46:29:4a:7e:ab:
         5c:73:3a:a3:57:0c:72:f2:9d:95:00:73:5e:8e:02:3a:49:73:
         d2:f1:fe:b6:73:1d:49:4b:8f:ab:0e:bc:7a:a5:e9:e5:3c:f9:
         8f:67:ce:64:d7:8f:85:fe:27:5e:70:93:9b:ac:23:8c:22:df:
         71:df:9b:1f:91:5a:a5:33:7d:ea:d0:a1:5e:f2:87:d3:da:fe:
         d9:cc:30:5d:e2:56:98:51:d5:03:15:f5:e2:95:c9:c1:19:17:
         e7:27:50:0c:ec:8e:e4:cd:6c:6e:5e:56:f2:c7:36:3b:d4:59:
         b1:1c:89:36:65:5a:15:4d:0a:c5:71:47:47:5a:44:76:fd:d7:
         8e:f4:43:be:05:c0:8e:75:38:1d:6b:43:f0:e2:f5:98:2a:0e:
         c1:db:05:45:2d:a1:d6:34:ab:d2:8f:38:91:98:39:16:38:73:
         0b:93:62:dd:47:1b:86:ae:64:6b:77:3e:a6:f1:a7:98:a4:d4:
         cb:58:70:4c:ee:0b:92:45:a2:29:cc:e4:1d:5b:65:45:2b:48:
         ea:bf:5e:84:7d:f3:e1:57:cc:31:45:00:64:6d:f4:a4:e6:37:
         f4:99:83:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:19 2025 by rpki-client