Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/b3fa9feb-1854-3868-869b-3b5db3b813c0.roa
File:                     b3fa9feb-1854-3868-869b-3b5db3b813c0.roa (raw, json)
Hash identifier:          gIROoeixa/1ftrw8kkgTc/ETD2aIx040A7wGeaPn1oU=
Subject key identifier:   4A:99:72:32:36:F9:F9:8F:45:59:97:43:67:A8:FD:55:EB:A6:BD:41
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584B0746BF499668FDCDC581F380
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/b3fa9feb-1854-3868-869b-3b5db3b813c0.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     3695
IP address blocks:        70.36.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:bf:49:96:68:fd:cd:c5:81:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=495147b7-10c8-4da8-9e52-deb47cc98010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e0:4e:59:67:00:bb:38:4a:93:2b:34:68:7b:
                    fc:59:41:65:21:b5:5b:d6:76:af:91:dc:fe:af:3b:
                    3f:63:bf:80:ad:ab:4b:3d:14:b5:f0:22:65:a5:71:
                    e6:4c:0c:8e:54:9f:32:3c:c3:b0:c0:1b:9b:e4:9e:
                    29:a9:4b:de:0e:59:f6:0f:18:60:85:c3:9e:bf:a4:
                    10:f1:2b:9e:ac:05:65:50:34:4c:7f:b9:df:11:af:
                    5f:24:53:88:f0:fe:49:c6:09:28:03:b8:88:54:b9:
                    22:33:a5:f6:6e:54:2b:41:a9:f2:ab:6f:05:f0:d0:
                    e1:d1:e7:d6:c4:e7:6a:3d:9e:9e:ed:f6:f4:6a:07:
                    7e:cf:71:09:e2:07:d7:70:35:02:21:c3:4a:19:88:
                    ec:f8:4f:e8:8a:36:be:06:db:1c:7d:4a:3a:a0:fe:
                    59:f3:1e:c1:5f:0b:d6:45:f8:5d:ee:9b:e7:20:64:
                    fb:52:0a:62:9a:14:b0:f6:5c:76:6a:b6:3d:3d:54:
                    da:36:f9:b5:f7:ac:45:79:bc:61:17:c6:15:01:44:
                    a8:0a:86:96:86:b4:70:cf:da:d9:05:01:16:b2:2e:
                    ad:ac:07:a0:44:04:11:2d:e9:45:42:6e:ef:6f:6b:
                    85:36:ae:85:9f:c8:6f:b6:d5:42:15:cb:ff:a7:be:
                    cb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:99:72:32:36:F9:F9:8F:45:59:97:43:67:A8:FD:55:EB:A6:BD:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/b3fa9feb-1854-3868-869b-3b5db3b813c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b3:13:bb:97:dc:6c:38:60:46:fb:2d:1a:3e:f0:75:87:76:
         7b:c0:9c:b4:cf:ac:63:b5:57:e1:56:7b:85:c0:4b:62:ed:ce:
         7a:6d:04:d2:ac:c0:33:f3:ee:92:3f:ee:c3:01:9f:5f:30:23:
         21:ef:07:42:65:7e:b0:36:cb:7c:5a:ef:d0:67:21:ee:a3:a6:
         32:3f:6d:cc:b2:17:5c:1e:99:af:ba:f2:ae:20:37:82:1f:28:
         c1:39:1c:1a:4b:6e:65:ba:13:a8:11:75:a0:a6:9c:3f:7d:bd:
         9f:27:09:7a:5a:a0:17:d9:4f:5c:9c:a0:0d:7e:98:ce:7b:53:
         67:44:4f:ea:96:19:77:c8:70:05:f7:21:ba:3c:41:94:bb:61:
         6c:28:b5:4a:57:bc:4b:29:f4:c2:b5:01:7d:4f:6b:6d:00:35:
         9c:55:a6:22:26:a6:57:31:dc:e8:de:e0:2a:fb:3a:95:80:83:
         33:c0:78:c9:e5:bf:f0:dd:82:0b:9a:2e:42:45:13:33:1e:97:
         d7:cf:92:18:5b:e7:af:f3:82:96:06:0a:54:cf:20:0e:64:d8:
         2f:56:ff:03:92:4a:24:78:fa:df:45:5a:4b:3d:d8:a3:f2:e6:
         1a:3e:ad:1c:ef:a4:91:33:28:5e:4e:f5:f2:a5:3b:cb:e4:db:
         4a:da:da:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:29:58 2025 by rpki-client