Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/12727e42-cd08-3bab-b7c0-d109356e1662.roa
File:                     12727e42-cd08-3bab-b7c0-d109356e1662.roa (raw, json)
Hash identifier:          uSSIDdGUR3upbnp5bWnKwqsSlppOQxC7oClANRPXGRE=
Subject key identifier:   61:E9:0B:01:87:8F:76:09:B2:CA:12:1B:74:05:FB:82:7D:1E:EB:29
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B1D9C25F77E4057734BC1E500
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/12727e42-cd08-3bab-b7c0-d109356e1662.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22652
IP address blocks:        70.35.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:25:f7:7e:40:57:73:4b:c1:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=c4f15ad7-ca2f-41eb-912b-5d56be49fb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:06:de:a4:11:27:6c:1a:fd:ae:f8:44:21:
                    c1:cf:24:0d:01:03:d1:2d:86:d1:47:79:65:b2:25:
                    a8:7b:fc:92:fe:db:79:8f:5e:69:17:aa:81:bc:12:
                    e3:dd:3c:71:e3:7b:ce:61:c1:bd:28:bf:4d:b2:20:
                    33:5e:08:a7:e8:81:2c:8b:8f:d1:a1:98:81:f0:56:
                    c3:f4:54:3f:19:5c:7d:49:de:ff:8d:d5:81:7a:27:
                    aa:ba:89:2a:d5:41:1f:d9:af:57:42:f2:78:99:b3:
                    b0:e6:87:eb:7b:ef:de:67:9d:ed:74:39:92:5c:6a:
                    ff:c7:48:d4:26:24:1a:ad:d0:66:70:eb:02:88:5c:
                    91:00:df:5c:d0:11:dd:91:12:f5:ce:98:6d:be:33:
                    1a:a3:2e:11:55:9b:21:ee:f5:95:6f:f4:4d:df:27:
                    7f:57:f2:9b:06:12:52:c4:11:6e:ee:31:08:e8:4f:
                    a2:8f:64:fe:09:01:5e:ae:15:88:a5:dd:b3:8e:e8:
                    71:45:f4:b8:27:ac:36:c9:61:f1:8e:c5:c5:04:d2:
                    4c:25:5f:81:e6:5c:05:c3:a1:24:cd:f5:64:0c:4a:
                    12:52:1a:dd:b0:0e:5a:99:17:0e:7a:6a:c9:bb:70:
                    d9:b7:de:f8:73:d1:af:ce:43:91:f5:cc:5f:b5:3b:
                    4d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E9:0B:01:87:8F:76:09:B2:CA:12:1B:74:05:FB:82:7D:1E:EB:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/12727e42-cd08-3bab-b7c0-d109356e1662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:47:ea:73:5e:1d:f0:28:bd:3d:60:22:3d:01:f6:f9:a2:22:
         bb:2e:84:6e:d6:ca:bb:06:c8:e6:a1:71:2a:9d:92:dc:f5:f5:
         dd:25:54:8b:38:08:a6:5a:a5:1c:d4:7f:5e:ca:7e:a4:ce:96:
         fc:e3:93:eb:14:a3:12:c3:d7:69:35:42:a6:b9:bb:26:fa:c1:
         76:31:4c:f8:93:3a:0d:a1:3d:8a:0a:c1:e0:b0:a9:26:01:1f:
         bf:c6:38:ea:f2:24:9b:92:0d:95:bf:85:ca:51:b8:ff:9f:e6:
         e6:9c:e0:7f:27:a1:0b:0e:aa:00:35:1c:5f:b0:c8:8c:c9:5e:
         6d:89:15:26:00:19:20:33:4c:82:dc:b0:c6:76:8a:57:50:47:
         e7:90:15:8c:bd:66:af:ba:c6:28:ff:b3:8d:a3:a4:97:83:92:
         78:46:4e:14:57:69:0d:1e:85:59:05:82:9d:71:2b:e8:97:65:
         db:80:37:24:6c:03:02:ce:bd:ca:17:16:96:f5:4f:98:45:ed:
         d8:c2:a7:ec:c5:59:28:dc:30:3d:02:5f:2e:1a:68:03:eb:36:
         1d:0c:12:cc:71:3d:85:07:06:5a:6e:2c:f7:94:d7:00:38:53:
         6e:3f:a7:0c:93:04:1b:e9:b6:e7:1b:f7:3c:8c:6b:1b:64:37:
         e5:e0:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:41:58 2025 by rpki-client