Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa
File:                     8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa (raw, json)
Hash identifier:          lKl311QeCnVKRpqFLU3oRk7hWg+O70IqsTWqF7QJFdk=
Subject key identifier:   B1:8F:7B:49:26:0B:C0:7B:31:F7:FF:4C:9C:E4:08:D1:2B:D6:10:53
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584B0746BF712671D2515B60CF80
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     3695
IP address blocks:        70.36.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:bf:71:26:71:d2:51:5b:60:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=64804be3-e1a2-4455-a0b9-6a9d57d83202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:80:1a:14:72:ba:c5:eb:6d:53:d6:03:f6:
                    fb:f4:b8:b7:ec:10:1d:a9:a8:8c:10:59:45:3f:7e:
                    0c:c0:3e:e8:c2:26:74:bd:b1:0c:18:bf:ab:76:dc:
                    a1:64:30:6e:9a:59:ee:c0:32:1c:0a:01:42:7d:8e:
                    6a:85:58:f5:d4:21:1b:e2:93:fd:9b:f0:31:04:f7:
                    8b:7f:0c:dd:cb:db:84:0b:37:c5:67:e8:d4:06:42:
                    2f:90:8f:11:fa:32:d0:65:6e:67:88:2c:2c:27:e1:
                    6d:2e:e7:c6:ef:c4:34:bb:48:7a:2c:30:3f:14:c5:
                    e3:d0:b7:af:09:78:0b:17:15:04:bc:43:f9:7e:2b:
                    52:f8:65:a1:31:bd:9e:ea:b8:bf:22:3e:fe:7f:1c:
                    82:db:68:18:e3:0d:cd:4a:fd:fb:5a:1e:f7:45:0b:
                    a0:0d:72:e8:ad:d7:1d:32:b3:7c:cc:16:d9:41:18:
                    3b:72:3b:d8:a5:bd:ce:6d:96:8b:e1:9f:ad:a8:7e:
                    72:ea:84:a3:20:86:a6:a6:82:ca:8f:d5:8e:75:b2:
                    cf:19:42:28:91:a4:eb:5c:ff:6c:5b:78:79:bf:46:
                    f6:4f:5e:59:77:2b:a2:e6:39:a3:90:68:26:60:fd:
                    15:24:41:4a:71:e2:2c:97:65:52:9b:06:e6:5c:eb:
                    90:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8F:7B:49:26:0B:C0:7B:31:F7:FF:4C:9C:E4:08:D1:2B:D6:10:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d8:4a:2d:b4:cb:c6:34:58:01:51:53:d4:84:a2:73:3d:b8:
         4c:00:b4:d9:f1:8a:08:dd:c6:07:28:59:14:7d:e8:9a:0f:a6:
         3d:72:d7:5e:df:dd:e7:24:45:94:db:10:2a:65:bc:20:9a:fc:
         e5:44:f7:c0:61:0e:28:08:9b:3f:8c:fb:1f:f8:1f:91:ca:21:
         45:06:60:61:cd:d8:9a:5b:ef:29:d1:82:a9:7e:c1:51:4d:69:
         30:c2:8f:05:08:85:a8:4d:06:1c:c4:48:9f:6e:5d:6f:bd:31:
         39:05:85:5a:eb:c8:3e:f2:ae:e6:ae:3f:84:53:fd:71:cb:c1:
         ff:4d:66:1a:67:10:56:71:79:ce:6e:4c:5b:88:c6:11:b4:ab:
         a7:db:69:23:71:26:89:4a:21:ef:71:7b:43:59:4f:30:a1:b5:
         f8:1e:67:1a:c2:53:98:63:fa:63:ba:94:74:f0:52:a7:6e:ce:
         d7:ac:c2:18:6c:10:b3:12:77:3d:5a:aa:70:23:ac:e8:b9:04:
         1b:9a:70:46:e2:f3:f7:f5:72:e8:a1:ec:fc:10:94:fa:a7:f0:
         57:e9:b6:eb:fb:30:0a:44:94:c2:f5:a3:9d:6b:23:4a:07:f3:
         dd:22:5b:6b:6e:36:c8:b9:16:6a:e0:2c:30:c4:03:cd:ee:aa:
         16:8e:78:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:38:36 2025 by rpki-client