Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63018bc9-f033-3d0a-bb66-1b80b6527407.roa
File:                     63018bc9-f033-3d0a-bb66-1b80b6527407.roa (raw, json)
Hash identifier:          bKkBjELwLINFvVMywQaifjph5E4RuPFCQoh5BBCmd/I=
Subject key identifier:   FB:D3:68:92:00:F0:60:15:E5:C4:17:F3:C8:B7:31:2B:6A:35:5F:97
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581984248329A11C81C8F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63018bc9-f033-3d0a-bb66-1b80b6527407.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        70.41.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:98:42:48:32:9a:11:c8:1c:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=13428fa3-73ca-4659-b877-7d6aa3551891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:90:b5:9c:99:e8:eb:68:dd:fa:07:1f:ba:81:
                    4f:11:5c:5c:b0:b5:f7:69:8f:16:45:5f:d1:89:c1:
                    e8:1c:31:9e:c4:51:d4:76:02:cb:82:b6:45:fe:c9:
                    1c:73:a1:6f:53:fd:e7:54:87:a9:43:d0:f1:b3:80:
                    eb:0e:c1:2a:fe:4a:69:10:56:da:70:70:b5:87:f8:
                    3d:7b:44:42:8d:3a:b1:d4:55:84:0e:aa:bf:17:57:
                    eb:76:3c:71:c4:9b:80:ce:76:a6:04:70:16:85:c6:
                    ee:b0:39:a3:3e:5c:11:7d:69:f3:08:ef:e9:2e:70:
                    bf:35:4c:2e:d5:00:79:2f:96:0a:aa:e0:fa:8e:04:
                    ab:05:87:5d:e4:c3:70:5c:ed:9f:24:bc:04:fb:d5:
                    cd:ec:ea:1e:28:56:37:86:34:ff:e7:39:37:1c:64:
                    b8:91:90:ed:32:b0:92:ab:27:9f:ed:55:c8:49:5a:
                    fc:01:df:f2:5e:5f:cb:c6:ae:d8:e3:55:11:49:0f:
                    0e:b9:87:21:b7:87:75:40:8b:02:5a:e1:0c:52:0c:
                    1c:03:14:24:4e:98:22:f0:7b:70:ac:cf:a4:bd:37:
                    ae:b7:24:ab:44:86:9f:da:1a:5d:56:ea:50:91:a4:
                    02:d9:fe:d4:b3:b9:62:36:44:b8:21:13:f6:cb:aa:
                    88:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D3:68:92:00:F0:60:15:E5:C4:17:F3:C8:B7:31:2B:6A:35:5F:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63018bc9-f033-3d0a-bb66-1b80b6527407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:07:98:6d:74:e2:15:38:2c:48:8d:26:d3:13:04:69:3d:21:
         e8:de:d5:96:f3:19:48:27:82:32:7b:11:b0:69:24:ea:3c:09:
         a0:ee:ef:f3:c5:a9:81:ae:92:0c:f1:c5:7d:45:9b:3e:ea:16:
         2b:94:fe:72:d9:a8:9a:a6:32:a4:3b:f0:e0:84:38:86:ae:c8:
         cd:5b:a2:39:a6:d3:da:fa:3b:e6:91:da:f4:e4:cd:1b:ac:47:
         59:24:74:d1:32:4f:aa:f2:9a:34:8c:bd:45:2a:95:2a:23:a6:
         6c:99:fa:93:02:d3:74:dd:c1:27:e3:f3:f9:a0:53:02:e5:ff:
         f6:81:16:2a:05:8b:ca:35:63:3a:37:47:94:33:7d:9d:17:2a:
         e7:36:22:40:ef:36:5e:21:40:2d:cd:a3:1b:6a:a7:7c:f7:c4:
         fb:c9:48:64:6b:35:b8:e5:65:04:38:8a:11:e9:3c:78:70:4a:
         0d:94:9a:67:a9:00:79:71:37:be:89:ad:81:3e:65:f2:39:2a:
         d7:b0:9e:c8:f9:5f:22:97:56:e0:17:82:37:fd:a7:2e:71:e6:
         19:c6:e7:7b:e8:14:00:e2:65:29:99:1b:38:31:ea:b1:82:21:
         76:94:05:05:d1:f2:b0:cd:85:26:39:91:1a:13:bc:1d:42:4f:
         1e:1c:17:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:13 2025 by rpki-client