Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b027d75a-f671-368f-97e0-375bc4794277.roa
File:                     b027d75a-f671-368f-97e0-375bc4794277.roa (raw, json)
Hash identifier:          tWva5WqtY/VSB7n0RTDxTJR27dj+v52wSUFAxlzGch0=
Subject key identifier:   54:C9:CC:CD:77:D9:F2:19:A1:18:6B:83:1A:F1:CF:56:E9:42:6B:EC
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285848FD56C98E6C997CAE4053D180
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b027d75a-f671-368f-97e0-375bc4794277.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     53508
IP address blocks:        206.255.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c9:8e:6c:99:7c:ae:40:53:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=9f08f963-7835-4548-a575-0a6e938d23d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:84:f4:fc:93:83:a5:0b:d4:a7:fc:65:bb:d4:
                    57:c8:c9:d4:ff:9c:50:90:a3:35:ee:76:a1:dd:64:
                    80:49:ef:a3:93:b3:78:8e:93:7d:73:aa:cb:3a:31:
                    97:c2:c8:f1:05:a2:a6:10:57:35:7a:12:b5:6a:67:
                    a1:5e:f1:a1:03:f5:61:0b:e3:56:a3:39:cc:50:09:
                    f4:34:30:60:38:cf:26:4e:ba:19:71:42:84:38:d3:
                    5c:cf:f6:6b:ba:84:e0:27:72:a2:69:d7:b9:3c:3f:
                    b7:75:a2:ff:62:71:a7:e8:3e:f6:ff:ca:66:4a:88:
                    bc:b1:c1:6e:fa:c2:ad:6e:19:45:48:6c:a5:92:ce:
                    f1:3a:4e:24:d1:db:ca:13:76:3b:1f:19:59:ac:e5:
                    10:8b:6c:3d:1e:79:bb:11:2c:e1:75:08:9d:84:15:
                    87:c9:50:b9:c7:8e:33:b0:da:57:71:ab:b5:8b:60:
                    34:d6:48:5e:b2:5b:dd:82:81:40:56:03:ee:89:47:
                    ce:f3:a2:1b:93:26:d8:39:19:61:70:b9:13:c5:46:
                    7f:1e:9d:32:ea:07:d3:a3:d1:b9:e6:99:92:64:2a:
                    21:75:26:c4:de:3f:95:a3:a2:0b:e1:c6:f3:95:04:
                    2c:f5:37:7a:e7:09:b2:d2:78:2b:8b:4a:5e:c7:d2:
                    f4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C9:CC:CD:77:D9:F2:19:A1:18:6B:83:1A:F1:CF:56:E9:42:6B:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b027d75a-f671-368f-97e0-375bc4794277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:8c:ea:3c:5f:f7:cf:a8:47:4f:22:24:6d:2b:fd:86:53:e3:
         92:57:31:d9:08:01:72:c6:42:aa:a3:eb:8a:2d:9b:68:51:19:
         21:a7:8c:a3:b4:97:70:fb:45:ad:52:92:a2:84:ad:b0:d2:be:
         5c:8f:d1:db:a5:5b:a5:2b:dd:02:c8:ca:f0:32:8e:ce:79:75:
         ed:85:e8:7d:ab:c4:6e:d5:67:00:b9:f6:3b:29:a6:10:e7:45:
         6a:e8:4b:bd:f2:06:26:a1:c8:a6:10:97:11:1e:ae:e8:e9:86:
         e4:75:4a:e1:02:d5:34:69:45:dd:b6:26:1a:35:4a:f9:b4:7c:
         c1:f6:71:a4:78:dc:64:7c:4f:1e:33:bf:78:6e:51:e4:de:48:
         f2:a6:f2:6f:81:68:02:bc:ef:47:a4:c5:06:ca:2b:3f:b7:e4:
         80:99:8c:b8:ea:f0:ca:9e:0d:87:d7:14:17:13:f0:5f:81:55:
         c8:2e:3b:3b:a0:c1:92:92:8b:8a:b6:dc:b3:91:67:a0:8d:b4:
         eb:f9:18:93:4f:33:58:d6:e1:3e:61:ec:a5:0e:1c:d0:ba:f0:
         24:42:80:12:84:1c:b9:f4:2f:4d:be:5d:90:19:60:99:90:32:
         ed:4a:87:b9:a5:eb:f0:dd:39:e2:b9:2b:e9:b5:e0:38:e1:eb:
         9c:d2:20:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:44 2025 by rpki-client