Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/bd9e7ce5-e62e-3ef3-81a9-aad2be7b50ff.roa
File:                     bd9e7ce5-e62e-3ef3-81a9-aad2be7b50ff.roa (raw, json)
Hash identifier:          QCB3osrxDeysJ7+Ks6lv7yNukDc7zQghGS0ty67PDys=
Subject key identifier:   30:4B:F7:4F:D4:62:EB:48:A9:8A:63:7C:3F:48:C3:94:E8:E5:6A:56
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F432858494733EBBF927619EA35E3A480
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/bd9e7ce5-e62e-3ef3-81a9-aad2be7b50ff.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     3695
IP address blocks:        70.36.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:eb:bf:92:76:19:ea:35:e3:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=e7924db4-a942-42d3-b1d1-b3e2748107f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:b6:63:63:75:f6:c9:1b:8c:23:7a:6d:0d:
                    a9:b1:2a:00:16:ae:aa:f9:72:b6:3c:cf:5a:16:c2:
                    bb:9d:82:59:9f:f9:3d:28:86:a0:17:da:ff:1e:cb:
                    d1:3b:b1:f9:ef:5e:77:b9:0f:80:12:08:21:09:06:
                    81:b8:51:1e:0b:7d:5f:01:c0:d3:b0:6f:a4:82:56:
                    36:78:3a:14:0f:6f:25:27:73:dc:4e:cf:37:79:b4:
                    02:0c:53:9f:79:1a:11:aa:67:cf:9b:46:9c:6c:29:
                    ab:90:1c:63:b6:d1:2b:f6:bd:83:fb:ec:cc:81:e1:
                    b4:d5:6e:37:82:3f:0c:ab:8f:40:ac:b2:89:5a:d6:
                    c1:df:35:6d:b0:d9:e6:d9:bd:76:2e:06:bb:96:cd:
                    6e:a2:9d:c9:92:83:b4:26:c8:3a:3a:ed:3a:67:59:
                    8d:ff:cd:47:8d:be:a3:0d:ad:5d:d2:86:54:c8:65:
                    db:67:d8:2d:6f:5c:45:72:d4:14:01:28:b7:a8:b0:
                    0b:c0:db:77:c0:42:6e:7b:a5:ea:d5:01:64:6a:6b:
                    3a:2b:b6:3b:7f:f1:9d:e7:94:f7:ca:11:34:35:7f:
                    ba:e3:ef:ef:38:e2:c0:6b:86:cb:42:55:3a:27:17:
                    01:a9:8e:78:73:4c:29:3e:47:8c:dc:76:94:1b:86:
                    7e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4B:F7:4F:D4:62:EB:48:A9:8A:63:7C:3F:48:C3:94:E8:E5:6A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/bd9e7ce5-e62e-3ef3-81a9-aad2be7b50ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:1c:3d:e3:52:94:d2:4e:82:60:08:bc:1a:75:38:de:de:d1:
         72:38:fc:68:17:26:f5:3c:5f:a3:2a:12:38:34:27:2f:7b:6e:
         d6:b7:cc:a6:9d:51:d2:f8:55:94:77:6f:f7:14:33:e5:84:98:
         7c:d6:15:9a:94:52:b1:e2:1e:70:79:81:a6:81:57:3a:b5:ca:
         0c:c3:32:ea:4b:1a:4c:65:70:0d:06:fb:59:ea:ac:59:54:d1:
         8d:3b:03:8a:fc:4b:53:70:aa:d7:a7:79:d8:81:61:72:7d:c3:
         19:b6:cc:03:e4:55:8c:5d:3c:7a:ef:84:a2:8e:b2:d2:24:15:
         4b:50:cd:23:35:d2:b3:ce:e9:45:95:91:b4:3e:9b:d4:40:e4:
         d8:d7:5c:9f:3e:35:90:f4:e1:fc:b1:98:bd:b4:49:f2:80:d3:
         e8:21:01:0d:cd:33:ab:46:68:bd:6a:be:c7:32:4e:42:56:df:
         c4:f0:3f:b5:23:93:b8:ae:91:6a:e5:92:ec:15:a4:3e:87:ea:
         8c:1f:32:b5:6a:87:c0:7f:85:2b:a8:30:02:a5:0b:86:3f:fa:
         24:b3:41:46:47:02:28:28:9d:37:57:a5:bd:ea:d6:c7:7e:f5:
         7f:6f:97:9d:9b:3f:ca:4f:3b:cd:25:80:b7:c1:cc:68:71:94:
         ca:14:c2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:24 2025 by rpki-client