Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa
File:                     2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa (raw, json)
Hash identifier:          7FKmFrAY9MdTtRklGzPfMM6LFgp90zLqwn39sodJXYo=
Subject key identifier:   C5:18:4E:D7:6B:82:77:53:06:85:C0:E0:46:08:96:E1:70:93:4D:C4
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584B0746BEEB39A73F9843D0FED0
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     3695
IP address blocks:        70.36.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:be:eb:39:a7:3f:98:43:d0:fe:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=99274a21-031f-4519-a627-bdad02527b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:d6:92:b4:e4:2d:75:13:c1:1b:eb:b8:2b:
                    e8:03:79:0f:83:9a:5a:70:43:dc:4d:aa:ef:e4:3f:
                    4e:65:fc:0e:ff:4f:54:20:33:51:7e:f3:27:b8:c3:
                    6a:69:14:05:6d:6a:84:e1:68:59:af:f8:9c:43:96:
                    4e:cf:60:e6:bd:eb:1c:64:7a:2c:6a:87:30:36:d0:
                    a5:24:61:45:ba:fc:fa:f6:81:1a:cc:38:f8:18:b5:
                    4b:9d:5c:ef:76:84:8e:74:21:56:0a:44:a3:5c:f6:
                    dd:ca:4b:ea:71:6a:10:2f:b1:9e:b2:8d:0b:68:ec:
                    ee:57:e2:e5:a2:4e:9d:62:eb:0a:35:be:6f:de:d1:
                    c4:81:9a:51:81:17:8a:a7:0e:87:3a:73:85:f6:c4:
                    41:bc:ab:9c:62:cd:c3:64:d9:9d:73:1d:21:47:ba:
                    f1:0c:72:4e:ad:cc:18:20:39:8a:c0:c1:12:5d:71:
                    27:25:e5:59:66:40:6c:6e:24:38:5b:be:2a:5a:37:
                    cb:92:d5:d8:60:ff:6a:cc:00:3a:c8:38:c9:a1:4a:
                    5d:54:df:10:cd:94:cd:e5:3c:7b:0b:d6:0f:ff:f5:
                    ac:3e:9f:93:81:f7:ea:60:84:9c:bb:c9:cd:46:95:
                    fc:d9:a8:dc:7c:ac:9c:9a:d0:53:72:12:48:1d:96:
                    93:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:18:4E:D7:6B:82:77:53:06:85:C0:E0:46:08:96:E1:70:93:4D:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:5b:55:b0:77:e1:14:e0:7a:ae:b1:36:2b:f6:0c:2d:8c:f1:
         eb:69:51:94:3b:b0:f7:fb:9b:68:3f:00:9f:e4:df:cf:75:84:
         e0:a8:e2:11:46:b1:11:96:01:46:73:ff:6a:6b:92:7b:d4:4f:
         07:ce:94:0c:30:35:92:c4:74:12:33:4d:e9:db:3c:cf:32:b3:
         fd:fa:b9:b7:53:f7:3e:cc:cc:3e:20:e3:7a:47:b1:3c:ac:0d:
         14:53:2d:38:fc:21:ad:05:be:a1:24:3f:74:81:d9:e0:87:0f:
         40:99:5d:c6:84:01:e5:05:e0:05:d3:f2:f0:27:6f:c2:e1:df:
         11:83:0f:2d:6e:40:ee:a1:4b:9d:86:47:53:9a:40:e8:fe:e5:
         4f:f0:40:a9:5c:83:cd:30:e5:dd:57:dd:3d:98:30:9f:5c:5c:
         db:a6:21:66:44:74:e5:24:69:77:e5:f3:26:87:b0:23:bb:11:
         28:5a:a7:ab:43:24:67:5b:33:e1:54:5f:96:7e:cc:bf:c1:a4:
         f1:72:a4:d4:82:e6:88:3c:b0:40:f4:af:1b:8a:2f:e7:f7:09:
         de:6a:35:d9:81:f5:bf:fc:fe:e4:2a:02:43:39:5d:40:a0:1d:
         e0:fa:24:ff:1c:f0:3c:7f:86:91:9a:ab:7e:17:e1:8c:b3:51:
         d2:2d:c0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:29:46 2025 by rpki-client