Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5f0ed6d6-b378-389f-a879-b2aece898e8b.roa
File:                     5f0ed6d6-b378-389f-a879-b2aece898e8b.roa (raw, json)
Hash identifier:          ZM8f4GoWAX7ibYr2jkems4JoVRhbeNmX3GWBCAmZz4E=
Subject key identifier:   A8:DA:C8:D9:70:3F:EB:E9:79:55:60:22:70:72:8C:B5:24:C9:34:D8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921342F94D9F3037B23F275C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5f0ed6d6-b378-389f-a879-b2aece898e8b.roa
Signing time:             Sun 09 Mar 2025 10:20:39 +0000
ROA not before:           Sun 09 Mar 2025 10:20:39 +0000
ROA not after:            Sat 07 Jun 2025 10:20:39 +0000
asID:                     36522
IP address blocks:        76.70.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:2f:94:d9:f3:03:7b:23:f2:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:39 2025 GMT
            Not After : Jun  7 10:20:39 2025 GMT
        Subject: CN=099037c3-368c-44df-9b82-44048ac69eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:4e:70:07:56:61:66:12:39:d2:af:72:ef:
                    c0:c0:8d:dd:fd:bc:65:ff:27:19:a6:99:2c:37:d1:
                    55:b1:46:d1:ce:9e:6f:e8:36:86:e0:91:93:96:61:
                    83:ff:23:96:19:4c:6c:fa:dc:43:66:7f:13:0c:0b:
                    71:39:3c:b6:a6:f3:d3:9c:52:82:33:d6:ca:e7:cc:
                    cb:24:6a:1e:6e:bb:3a:72:e7:97:8e:17:6a:5d:86:
                    71:27:81:5b:91:3f:a6:6b:43:c0:e4:80:0a:17:a8:
                    41:f7:c5:2e:1f:45:a5:1d:9f:86:ec:63:45:17:4c:
                    1d:1f:ae:81:b3:2c:f6:95:6c:a6:4f:5c:41:aa:9d:
                    66:f1:20:25:f7:a2:09:91:0a:2b:29:8c:1d:66:bc:
                    3c:dc:3c:e3:77:27:ee:fb:d0:06:a0:af:a1:36:e3:
                    09:93:fa:27:68:96:e1:af:6c:c7:3f:33:84:28:da:
                    1e:d6:82:1b:40:8a:65:80:45:26:e7:71:9f:78:c1:
                    dc:8a:f3:cf:68:7a:dd:cb:86:d5:c0:33:03:7f:ea:
                    3c:aa:76:d0:3f:8f:10:e6:55:87:62:f9:fb:6b:dd:
                    18:54:38:49:e5:d0:65:25:b2:00:fa:2c:8b:6e:9c:
                    a7:69:82:a9:b3:08:47:9a:e0:4a:42:ed:e8:1b:44:
                    3e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DA:C8:D9:70:3F:EB:E9:79:55:60:22:70:72:8C:B5:24:C9:34:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5f0ed6d6-b378-389f-a879-b2aece898e8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.70.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:fd:e6:86:76:e6:ef:3e:fa:e1:51:a6:4b:27:91:0a:0c:b7:
         2e:dc:cd:e1:fa:0a:2d:33:ca:e4:1d:1c:5c:e6:e9:ed:db:1b:
         e3:86:cf:1c:80:e6:c3:da:05:6c:3a:24:5a:97:36:be:50:18:
         0c:33:77:52:60:1b:8b:d2:2f:9b:04:3b:36:b7:aa:5e:05:a6:
         cb:08:74:bf:ef:53:9b:16:b6:67:5d:ef:60:df:ce:9e:93:6b:
         48:79:51:ba:2f:c5:95:90:c7:1d:c0:30:cd:79:3b:b9:6f:08:
         89:63:d7:36:9b:e8:83:20:e4:32:3b:d4:76:cc:e6:a1:8e:23:
         03:82:c7:56:5d:38:16:86:69:0a:f7:18:96:4f:74:b4:26:4a:
         8a:e3:2c:5a:18:bb:be:f5:ef:4a:00:4f:27:b6:3e:bd:49:64:
         28:a7:c2:75:2b:1f:43:ea:a7:73:14:39:be:ab:56:a5:46:92:
         e2:2e:7d:32:39:15:b3:10:b7:20:f1:86:cf:83:2f:a9:e2:13:
         e9:f0:8f:cc:0e:64:3c:4b:66:2a:e8:82:da:7b:17:a4:42:d8:
         8a:8b:bb:16:90:a5:12:a4:52:e2:c0:ed:2a:d5:2c:4e:e9:d6:
         82:54:dc:8a:32:48:3f:3f:8c:f1:89:6e:4e:15:2e:dc:c2:8b:
         64:4a:29:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:15 2025 by rpki-client