Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/2bacfbe0-bed9-3dec-8f53-700fe3fa24fa.roa
File:                     2bacfbe0-bed9-3dec-8f53-700fe3fa24fa.roa (raw, json)
Hash identifier:          2hR51zolg6zOFYb21TC2OQHppFo9gsIdz/FScV75FbQ=
Subject key identifier:   78:20:D7:95:C5:53:97:ED:0A:C8:A5:19:BA:C0:CA:B2:9E:12:49:62
Certificate issuer:       /CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
Certificate serial:       010D0C9F43285848F59B792E47F0F0223EF8AD00
Authority key identifier: C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/2bacfbe0-bed9-3dec-8f53-700fe3fa24fa.roa
Signing time:             Fri 21 Feb 2025 19:33:12 +0000
ROA not before:           Fri 21 Feb 2025 19:33:12 +0000
ROA not after:            Thu 22 May 2025 18:33:12 +0000
asID:                     26141
IP address blocks:        64.239.70.0/24 maxlen: 24
                          2602:812:c000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f5:9b:79:2e:47:f0:f0:22:3e:f8:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
        Validity
            Not Before: Feb 21 19:33:12 2025 GMT
            Not After : May 22 18:33:12 2025 GMT
        Subject: CN=2144aa21-77d0-4e74-b87d-e73c1f4ff7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:75:d9:69:a7:69:02:90:d6:9c:28:ed:05:
                    57:ba:c2:a4:a1:a1:69:bb:ca:e2:ad:e6:3c:d8:68:
                    37:d1:13:4f:07:f7:eb:75:7f:78:11:a2:01:4c:3d:
                    67:9c:4e:78:d9:84:96:52:74:bf:ba:ae:da:31:6e:
                    6a:cb:7f:a9:e4:1e:28:0b:c4:de:da:23:d8:05:ad:
                    57:a0:5d:2b:b4:ea:d8:f6:da:5e:4c:e9:4e:e1:0c:
                    6c:69:9a:95:df:eb:11:bc:43:77:54:62:cb:23:83:
                    fc:ca:25:f2:43:6c:f5:dd:d5:7a:13:0e:d4:5d:1e:
                    f9:3c:72:aa:7c:87:f5:c4:04:91:87:be:65:d8:ed:
                    14:ec:bd:5f:b3:86:b7:c2:1e:e0:e4:fa:8d:ea:a0:
                    bf:bb:96:28:0b:c9:74:a4:bb:57:89:fc:fb:05:4f:
                    ab:e4:4e:c7:4b:ea:86:e5:cf:0c:aa:5e:69:ee:f1:
                    04:d9:39:2c:b0:ff:8c:41:44:8e:86:4b:7c:79:06:
                    80:2b:7e:1c:4e:67:1b:dc:14:86:3a:bc:8a:15:c0:
                    b7:0e:13:13:22:3a:72:dd:bd:d7:5a:ff:25:bf:a7:
                    e9:e9:f1:31:d7:77:3e:5a:fe:5b:ce:e5:5d:94:a2:
                    1f:09:79:29:59:49:93:01:27:12:25:db:6b:33:d4:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:20:D7:95:C5:53:97:ED:0A:C8:A5:19:BA:C0:CA:B2:9E:12:49:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/2bacfbe0-bed9-3dec-8f53-700fe3fa24fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl

            X509v3 Authority Key Identifier:
                keyid:C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.70.0/24
                IPv6:
                  2602:812:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:93:97:ca:f6:a7:e7:75:c7:5d:93:fd:30:3a:55:55:5d:73:
         28:f3:88:4e:76:d3:58:3f:8c:ce:db:1a:26:26:f7:09:7f:2d:
         ed:b8:08:97:07:ba:a4:c7:d9:f0:42:59:54:5a:dd:fd:34:d3:
         4a:4d:79:0e:e4:5d:05:5d:2b:9e:53:8c:68:de:24:d1:29:3f:
         a5:f6:cf:5a:f6:73:d0:c2:fb:84:89:89:86:31:4d:f1:6f:e3:
         54:d1:43:1f:f9:52:6f:c6:06:dc:8f:3a:9e:b9:ef:f6:ea:26:
         e3:36:57:e3:22:14:b4:82:1b:e9:d9:4b:5a:b5:02:23:53:11:
         97:7f:b2:3f:92:df:a5:3e:f2:0d:8b:f9:1e:22:01:d6:7f:44:
         15:4b:be:ef:ae:69:62:f8:af:65:c9:fe:eb:51:e8:02:7b:1a:
         ea:ab:ff:73:59:eb:b1:61:1e:d3:f1:0c:60:10:e9:3c:ab:0c:
         be:3b:e8:5d:89:6e:73:66:83:e3:45:b4:cc:00:b8:e5:f3:76:
         c8:bb:4c:c1:bc:b3:23:12:a3:53:a9:2e:a9:7d:89:67:05:3c:
         0e:61:84:c7:cd:86:1e:8c:e1:e0:43:31:1e:cc:f1:73:e9:3f:
         fd:df:3e:d4:1a:e0:8c:a5:58:fe:08:4b:eb:3b:7d:36:4d:bd:
         0b:0b:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:44 2025 by rpki-client