Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa
File:                     a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa (raw, json)
Hash identifier:          kuJg+tKdh/nWqY3eJst4bi1evrr7mkW965S84EPsO70=
Subject key identifier:   09:23:36:73:37:2C:41:02:0B:60:FE:C3:A0:40:37:5F:6E:11:3E:F0
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F43285848DEA11427C413D541B5E1CA80
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     1239
IP address blocks:        65.160.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:14:27:c4:13:d5:41:b5:e1:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=9105c154-63f1-48ab-be38-2fb44e35e063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:06:2f:35:75:af:95:bc:d5:45:b3:e8:91:
                    07:10:5c:fe:e9:42:fb:13:d8:d9:9a:58:ae:bf:e2:
                    ad:64:2b:32:e4:b3:c6:c9:fa:a0:c5:6b:4e:0a:1a:
                    6b:f2:2e:ad:4d:eb:cf:4e:9d:eb:8e:91:37:9f:91:
                    bd:72:6a:a2:f7:f9:93:d3:83:f3:e5:e9:10:33:88:
                    c2:c5:a0:c7:9f:1a:61:c3:f3:b7:92:6a:49:30:7f:
                    a3:78:1c:ed:39:22:ed:80:c8:a8:5f:74:1d:b9:f8:
                    5d:02:f3:31:b2:31:9b:c6:ce:de:35:58:0b:36:01:
                    65:99:4d:4a:6f:c4:c1:b9:47:58:cf:76:1a:ce:c3:
                    a2:15:3d:c2:bd:d8:7b:1c:92:fb:0b:94:5e:e7:48:
                    1a:22:dd:fa:51:35:30:7f:70:1e:5b:a4:30:b6:c4:
                    40:d3:a0:9a:ab:1f:ca:54:66:11:d9:45:6d:57:dd:
                    3f:ca:75:91:ed:d5:95:1c:2c:70:2e:06:bc:f6:39:
                    e5:e4:b1:66:d1:a0:87:87:8b:52:37:20:d8:44:2f:
                    18:dd:14:83:d9:df:97:98:be:55:53:36:d8:4d:3d:
                    ec:b3:98:ac:70:86:a0:70:4a:17:36:d2:0b:57:37:
                    63:c5:80:c7:97:9b:ee:f8:ef:3d:a4:0b:71:ff:38:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:23:36:73:37:2C:41:02:0B:60:FE:C3:A0:40:37:5F:6E:11:3E:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.160.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:57:e6:9b:7b:9f:81:85:b2:51:7b:b1:e0:00:5d:52:75:5e:
         53:47:d5:bb:70:07:92:3f:e5:06:de:cb:3e:9c:23:63:f5:7a:
         6b:cc:e6:35:8a:e7:ff:85:d4:d4:ac:dc:17:b5:1f:09:87:91:
         4c:c0:04:3e:9b:0d:df:ef:2e:2a:64:27:41:40:58:8b:53:a1:
         47:9d:53:f3:d0:c4:9e:32:fc:fb:53:84:04:3a:67:f0:06:3c:
         ff:e8:6c:4d:1f:67:75:dc:ba:5c:d7:ca:25:16:86:48:e2:f5:
         83:d1:fb:03:da:74:9a:28:a4:51:88:99:e5:e9:74:e0:53:08:
         22:85:00:a6:38:62:e6:2a:97:0f:a5:07:04:b8:4f:6c:ed:cf:
         66:3c:d6:e5:13:73:a2:a6:e3:bf:3c:d1:d9:b1:64:68:d4:da:
         cc:56:5f:28:b8:cb:c0:8d:bd:7b:56:80:b2:f5:e6:0d:60:07:
         db:39:bf:93:f7:cb:a6:84:bd:ba:a4:b8:b5:73:f6:ba:db:41:
         63:08:4c:f6:9c:cd:ee:c6:d4:cd:d0:ed:bb:ca:7e:06:c4:e7:
         8e:3b:d2:97:16:fd:fa:f2:ab:52:57:48:de:2a:0e:35:58:4a:
         99:3d:ac:cf:53:91:e3:5b:0f:0d:83:44:b3:1e:72:66:2a:69:
         63:fa:4c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:43 2025 by rpki-client