Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa
File:                     ea9b1f11-cc10-3201-8210-2b8888464357.roa (raw, json)
Hash identifier:          Z/bW89ezv2bJput4xdOp3iVwobr4Iz1e7Pt9HEEOPNU=
Subject key identifier:   0D:AC:C6:3D:01:0B:60:CB:84:81:03:A3:6C:9A:3F:18:3D:0C:7E:1F
Certificate issuer:       /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial:       010D0C9F4328584941E3954C8556F1DEBC64F980
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa
Signing time:             Fri 21 Mar 2025 03:19:55 +0000
ROA not before:           Fri 21 Mar 2025 03:19:55 +0000
ROA not after:            Thu 19 Jun 2025 03:19:55 +0000
asID:                     32034
IP address blocks:        70.35.146.0/24 maxlen: 24
                          70.35.147.0/24 maxlen: 24
                          70.35.148.0/24 maxlen: 24
                          70.35.149.0/24 maxlen: 24
                          70.35.150.0/24 maxlen: 24
                          70.35.151.0/24 maxlen: 24
                          70.35.158.0/24 maxlen: 24
                          204.14.40.0/24 maxlen: 24
                          204.14.41.0/24 maxlen: 24
                          204.14.42.0/24 maxlen: 24
                          204.14.43.0/24 maxlen: 24
                          204.14.44.0/24 maxlen: 24
                          204.14.45.0/24 maxlen: 24
                          204.14.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:e3:95:4c:85:56:f1:de:bc:64:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
        Validity
            Not Before: Mar 21 03:19:55 2025 GMT
            Not After : Jun 19 03:19:55 2025 GMT
        Subject: CN=5fbf1cfa-4fea-46b4-81a4-ec4c8ae7e177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:5c:d1:09:c3:4b:0f:70:65:62:70:84:b1:
                    91:dc:4e:9a:a6:24:c4:a7:ed:04:65:e8:44:fc:46:
                    97:fb:a0:a6:b8:56:7c:d6:4e:94:0c:d2:71:6d:b9:
                    98:3f:a6:dc:d8:16:07:aa:41:10:be:15:a0:77:c8:
                    10:33:42:d7:fb:40:7c:55:7d:61:85:e5:dc:f0:84:
                    0f:bd:4f:7c:20:e4:46:63:d3:02:41:df:32:e5:16:
                    11:64:25:b0:9b:1a:ce:f4:d5:b1:3f:5e:8c:22:7b:
                    1b:f4:8b:2c:d3:d3:20:ce:e4:2c:9e:3e:41:9b:00:
                    fc:00:d3:b7:3c:2c:50:67:d8:cb:9c:6e:5a:63:2d:
                    d1:37:00:96:d4:a6:ad:0e:71:bb:c4:7c:40:ca:22:
                    37:a2:e1:e9:c6:76:fe:c9:5e:cb:af:ec:56:f3:2f:
                    3c:4b:07:b7:7c:ef:b1:51:1b:f9:df:bc:a5:c3:91:
                    33:79:39:e1:98:30:ea:0e:2e:36:11:70:d8:2b:1e:
                    a0:3a:98:7d:1e:3d:87:50:91:73:c1:8a:8b:6b:0d:
                    89:06:e0:eb:ef:01:85:ae:8a:68:62:a2:c8:ea:1e:
                    45:38:9a:10:6f:84:ba:d7:5b:f5:5d:71:dd:41:aa:
                    4e:3f:ef:e5:9b:48:e7:30:bc:94:27:4c:da:e2:df:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AC:C6:3D:01:0B:60:CB:84:81:03:A3:6C:9A:3F:18:3D:0C:7E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl

            X509v3 Authority Key Identifier:
                keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.146.0-70.35.151.255
                  70.35.158.0/24
                  204.14.40.0-204.14.46.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:af:a3:7d:5b:be:7d:6e:1e:45:fc:eb:a4:f5:fc:0f:a0:c8:
         9c:be:91:57:e6:1f:1d:20:0b:f0:37:ee:cd:e4:fa:d3:bc:49:
         3b:2a:c3:82:55:2a:78:90:da:f5:c4:c6:28:9a:bd:64:7b:b1:
         29:4b:a9:b9:cc:cd:66:b4:e4:59:b3:11:b2:17:26:db:0b:4f:
         23:e6:49:0f:af:31:13:5a:9a:9d:fe:ac:87:6f:62:01:1b:24:
         3a:53:01:7d:84:3c:78:fc:6e:af:41:d2:c9:d0:2c:b2:d6:c0:
         6b:c1:f1:38:5d:2c:4f:c6:cb:86:f8:f6:06:8d:28:c7:92:f6:
         ce:49:47:05:ed:40:91:c1:02:77:bc:60:a8:b4:c6:2a:27:24:
         6b:2d:79:49:f1:f0:fb:d2:57:18:7c:67:0a:22:ac:87:02:f0:
         02:cf:05:29:f0:ab:e2:2d:6c:37:38:5d:13:2f:af:e9:ae:dd:
         84:92:34:6a:a2:f8:68:cc:cc:33:c7:9c:b9:c9:84:dc:26:78:
         3b:08:05:93:b5:6e:60:0f:f9:85:2c:f3:98:93:98:86:ad:c2:
         9a:e5:e3:8c:da:5f:bc:33:cc:8d:9f:99:3b:49:e2:50:82:64:
         6c:9c:8e:45:b9:d5:cd:62:d3:95:b9:a5:5b:e4:a7:90:98:28:
         76:fd:be:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:19 2025 by rpki-client