Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a61c5744-6e34-3999-beb6-e7060977c75b.roa
File:                     a61c5744-6e34-3999-beb6-e7060977c75b.roa (raw, json)
Hash identifier:          agNApTQ5q+fKwkzPuD/7lvX8nhdv0xWYu5zpGDKDPxA=
Subject key identifier:   BD:2E:A1:AE:96:66:FA:73:57:31:C8:C6:EB:4F:48:9B:29:1C:06:E6
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F432858494733EAEF5F6C31BA299445E0
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a61c5744-6e34-3999-beb6-e7060977c75b.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     3695
IP address blocks:        70.36.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:ea:ef:5f:6c:31:ba:29:94:45:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=f873e3bb-2dbd-4bc6-b816-79974659183a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:47:bb:cb:b0:4e:0a:a3:4d:1c:cb:65:70:
                    88:bb:e0:8e:88:73:36:ed:4a:02:0a:2d:9e:58:23:
                    9a:3c:7d:8d:6b:c4:d7:9d:29:29:5b:8f:08:bb:3d:
                    70:7e:80:f9:b5:8c:0c:34:82:34:83:64:51:a8:f0:
                    db:18:ab:40:0e:e1:ec:62:72:38:d5:da:83:26:c4:
                    7d:94:0d:db:c6:63:99:8e:ea:e4:4a:b4:0b:ca:a8:
                    a3:98:07:1e:4d:aa:6a:d3:af:31:e3:50:cb:49:71:
                    61:cf:f7:a3:43:57:e5:1d:6c:31:73:80:4f:fa:2d:
                    cf:f2:a9:82:34:89:66:17:3b:83:1a:ad:75:1f:82:
                    e9:0b:cc:bc:57:78:ef:78:74:13:05:f7:4c:79:a4:
                    88:81:8f:5c:af:f4:48:de:2b:08:10:b5:9b:6e:c5:
                    be:36:0e:76:96:20:f9:fb:ef:09:89:70:b0:e6:dd:
                    a4:f4:21:df:45:04:0b:9c:87:cb:ee:78:c0:89:9b:
                    9e:63:8e:8d:f9:1e:20:ff:3c:86:e7:fc:c5:8b:a6:
                    37:3d:db:0f:9a:eb:bb:57:4a:84:98:0e:c3:a8:79:
                    26:84:45:24:fe:c9:1a:ad:44:89:bc:32:8e:eb:38:
                    7b:c5:c2:4e:1f:1f:38:a0:d5:d4:b8:f3:56:fc:28:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2E:A1:AE:96:66:FA:73:57:31:C8:C6:EB:4F:48:9B:29:1C:06:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a61c5744-6e34-3999-beb6-e7060977c75b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:94:8f:5d:d3:3a:f1:2d:6e:ab:61:8c:e2:99:0b:35:60:b8:
         93:0a:fd:02:f8:1d:21:bf:f6:46:39:d9:f6:a5:13:4c:2f:5e:
         69:d9:d0:f9:ac:b6:69:9b:2d:5f:48:f7:f8:4d:79:de:0a:8a:
         65:47:ee:87:f7:f5:c2:9d:c4:5a:06:45:8a:31:d6:dc:e1:46:
         52:c7:7a:05:3e:ec:ee:d7:e2:52:52:de:6e:1c:77:be:09:da:
         ec:ac:7e:6e:47:2f:1d:a6:74:d6:8d:33:09:26:26:30:c7:a1:
         f9:24:8f:7b:dc:13:cd:20:e2:2d:16:61:c0:23:11:4a:60:8d:
         4c:29:fd:a9:56:d1:9e:d7:a6:46:c0:d2:82:ce:3f:de:ca:f1:
         fc:28:d9:3c:08:f9:f1:2c:84:22:c3:91:a2:91:c1:b6:67:69:
         12:8e:7d:f5:3b:ee:64:08:83:28:a0:17:61:c5:cc:cf:18:1a:
         9f:b4:cb:52:67:d0:bc:6a:01:57:69:fd:72:5b:3d:69:02:20:
         a1:0d:ca:85:3b:6c:cc:2c:0b:af:9b:8b:9b:62:45:43:ec:d2:
         39:8b:5a:98:af:d2:36:50:f7:64:80:4f:88:55:b5:12:48:08:
         6c:26:86:b1:a5:8b:88:92:77:3c:16:5d:72:d5:68:1a:fc:ca:
         60:04:a2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:59 2025 by rpki-client