Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/ab44a81c-6a2b-33f1-ac92-b03d5cec4df1.roa
File:                     ab44a81c-6a2b-33f1-ac92-b03d5cec4df1.roa (raw, json)
Hash identifier:          YZWmQh43CO0HlJ4lZV/3PAKPFkxhQBrHFtZ+lP0JNrc=
Subject key identifier:   1A:70:D6:AC:BF:DE:60:F4:43:5E:88:56:95:41:DA:E0:10:0D:1C:A8
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F43285849D6217894E0C2B39F9B2BD180
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/ab44a81c-6a2b-33f1-ac92-b03d5cec4df1.roa
Signing time:             Tue 13 May 2025 05:44:15 +0000
ROA not before:           Tue 13 May 2025 05:44:15 +0000
ROA not after:            Mon 11 Aug 2025 05:44:15 +0000
asID:                     174
IP address blocks:        70.39.128.0/24 maxlen: 24
                          70.39.143.0/24 maxlen: 24
                          70.39.154.0/24 maxlen: 24
                          70.39.156.0/24 maxlen: 24
                          70.39.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:21:78:94:e0:c2:b3:9f:9b:2b:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: May 13 05:44:15 2025 GMT
            Not After : Aug 11 05:44:15 2025 GMT
        Subject: CN=d6a98987-d301-442b-bcf7-85a1cc55e844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:65:3d:0f:ec:9d:3b:f4:79:86:8a:d7:56:d2:
                    0a:bd:ba:41:ce:71:f3:04:8a:c9:53:e7:c0:34:56:
                    8a:76:d6:fa:58:28:1c:7a:5e:ac:9b:d9:7c:1f:13:
                    96:79:25:45:3b:51:72:22:95:f5:b2:a1:ce:2d:a9:
                    11:30:82:3d:08:7c:ae:71:87:f6:fb:5c:cd:64:37:
                    60:16:d1:1f:8d:07:7f:fe:27:68:c1:df:a1:a9:4c:
                    dd:bf:bb:d7:8e:52:23:f0:b7:5a:4a:15:4f:a4:3e:
                    d8:21:13:57:a0:f5:bf:ff:63:7c:7d:b5:d1:0d:2e:
                    6b:61:5e:b5:67:b4:a5:47:90:db:36:22:1c:31:d8:
                    be:08:64:47:fd:ea:91:86:19:a3:19:0a:48:49:25:
                    2a:28:22:a0:88:ce:d3:38:4b:9a:7d:fe:10:d7:d7:
                    3e:71:2c:26:14:7e:c1:a5:eb:d1:fc:81:79:13:e2:
                    6a:b5:59:4a:c4:85:d3:ab:9a:01:bd:ce:b8:c1:60:
                    e5:40:49:10:8d:74:29:66:bd:38:b7:b6:9e:f5:00:
                    d4:36:4e:77:4c:9d:d7:12:03:d2:59:4f:c7:da:db:
                    b9:1e:99:31:04:1e:b1:d2:81:90:b7:a3:78:27:50:
                    bd:12:6a:c0:4b:02:c7:74:d7:84:6c:16:ad:d9:fc:
                    2e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:70:D6:AC:BF:DE:60:F4:43:5E:88:56:95:41:DA:E0:10:0D:1C:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/ab44a81c-6a2b-33f1-ac92-b03d5cec4df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.128.0/24
                  70.39.143.0/24
                  70.39.154.0/24
                  70.39.156.0/24
                  70.39.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a5:17:3f:5e:39:c0:97:b5:e5:fb:00:2f:73:db:e9:9b:eb:
         c3:3c:73:c2:f0:a7:64:7c:36:e8:46:8f:cb:0b:0b:25:71:55:
         8f:fd:8b:22:cf:bc:0e:08:57:5f:c7:2d:98:2c:eb:7f:52:ee:
         c6:8d:14:08:bd:9c:f1:b0:7d:a1:1c:b4:64:b9:9f:1d:8c:87:
         ba:44:dd:cc:0b:f0:a1:bb:34:52:6f:ef:71:24:e4:34:01:4f:
         17:a9:cb:9f:3d:bf:e2:6a:61:79:5b:07:b7:5e:48:32:ec:86:
         7d:ca:d9:41:b5:21:c3:23:7b:db:62:64:80:95:ec:3a:ce:14:
         33:43:c6:b7:d3:8e:ea:8b:d7:a8:67:21:7d:82:94:42:66:45:
         4e:c2:32:2d:63:9c:11:71:ee:ec:08:cd:d1:66:d9:9d:f4:5d:
         9f:16:25:5d:fd:bd:4d:01:33:3a:40:a1:7a:e9:2b:42:23:8f:
         4e:6a:86:c8:fe:c8:a6:3d:bb:b9:b0:bf:e5:89:2c:cc:49:e6:
         d7:09:01:0b:78:ec:a6:57:c8:1a:08:0c:45:99:53:c1:20:d7:
         65:c3:73:0d:97:29:4b:54:6a:1f:94:01:48:c4:2f:f1:d7:36:
         83:f2:df:ad:5b:91:2a:aa:46:0b:ae:41:de:fc:a1:80:5f:fe:
         e0:38:29:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:54:57 2025 by rpki-client