Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d6bf4ef-5943-3a33-9c38-96d34f566b94.roa
File:                     8d6bf4ef-5943-3a33-9c38-96d34f566b94.roa (raw, json)
Hash identifier:          0mFgKSk/oNcbqizFTdr1wW/nMWZYuSkrnkQcHrq4zGc=
Subject key identifier:   1B:16:FE:9A:42:E9:9A:19:BB:4F:4C:EE:1E:95:73:A8:F7:D0:5E:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0E302B6D7192CAA2392C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d6bf4ef-5943-3a33-9c38-96d34f566b94.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        71.201.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:e3:02:b6:d7:19:2c:aa:23:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=84f9bcd0-3544-48a8-bf8e-dc93fd14eda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:ff:1d:b1:c0:15:a9:07:c0:af:5f:ed:c6:
                    9c:a9:1c:4f:37:75:62:74:57:2c:96:cc:7b:9a:af:
                    9d:64:fe:da:d6:bb:14:9a:ea:f2:2c:12:e7:58:4f:
                    be:6f:69:78:d1:ab:92:a3:ea:24:f0:e8:a7:b2:46:
                    b7:2b:f8:d6:d6:ea:1f:8a:36:4b:42:27:91:5f:fe:
                    b9:61:ce:e6:2e:da:35:20:56:b8:97:23:13:2f:8f:
                    9e:60:6a:5f:bb:7e:8f:d0:54:3a:22:29:14:9e:5c:
                    81:14:7c:c6:17:19:6e:b7:65:96:65:7b:a6:b8:47:
                    25:7e:ae:31:1c:3d:a4:44:53:d2:3d:42:51:21:9b:
                    5b:98:cc:2d:2c:a4:68:0c:68:0b:1f:93:ab:9e:34:
                    3d:f7:b6:02:37:74:79:b7:76:18:74:4b:09:7a:5e:
                    08:14:c8:e3:d6:48:f5:0a:61:fd:dc:2d:16:39:08:
                    95:a0:59:ea:e2:c0:9d:0a:bc:7d:60:2f:a0:3f:06:
                    4c:76:dc:03:65:0e:53:c3:a7:76:f5:b7:62:f1:94:
                    11:ed:c0:5c:69:da:48:08:23:ea:84:05:fb:92:6c:
                    7e:b7:58:fd:2b:a3:30:6c:ce:ea:7b:a4:8c:ab:35:
                    cd:96:42:4a:da:a3:d3:a5:2d:9a:1f:c8:28:3c:cc:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:16:FE:9A:42:E9:9A:19:BB:4F:4C:EE:1E:95:73:A8:F7:D0:5E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d6bf4ef-5943-3a33-9c38-96d34f566b94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.201.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:45:ce:f5:13:e6:5f:4f:06:a5:a5:96:d5:50:9c:76:ed:f2:
         89:ac:4f:06:9e:c1:08:70:85:cc:52:f7:65:b0:0f:79:ca:e1:
         7c:46:1f:e4:79:75:23:e0:22:14:88:78:f4:8d:a1:12:27:ed:
         e2:05:7f:86:fa:c5:6b:27:bf:f1:9e:76:18:f8:b6:e5:f8:c7:
         42:be:50:2c:29:25:ad:8e:ef:2a:8b:cb:81:01:38:bc:5a:61:
         15:7c:7e:39:b4:b1:32:cb:08:c8:f5:65:a9:9c:bc:c5:b8:2f:
         9a:1b:97:c0:66:71:3f:98:9a:d6:7f:57:9f:43:2e:4a:d6:b0:
         94:b1:97:10:4d:c8:36:80:dc:a4:03:de:56:66:58:72:8c:b0:
         fc:ee:8e:b9:98:6a:d4:96:02:65:fd:8f:89:88:50:41:e0:e3:
         16:a8:3c:6c:b4:4c:af:7a:35:e8:64:38:59:ab:1a:1c:55:23:
         31:4a:a2:e4:6b:cd:f3:28:ae:20:fd:1e:93:56:9e:cf:a2:bd:
         8f:6a:9b:d1:3a:e8:65:18:cf:a5:f6:1d:90:e6:0d:6a:3b:67:
         5c:e1:55:fa:08:75:19:77:09:10:c9:41:c4:32:3c:d3:fe:bd:
         0d:fb:74:0b:ce:4d:5d:65:51:30:c8:e5:39:bb:dc:12:b4:c5:
         b5:c4:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:00:51 2025 by rpki-client