Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/be0729f6-8370-33a4-95b3-7eb16a7b14de.roa
File:                     be0729f6-8370-33a4-95b3-7eb16a7b14de.roa (raw, json)
Hash identifier:          /b/QdPrD4TBI0trDqRrWVHcMtvR39X2wVec2oK7xRvo=
Subject key identifier:   F8:E3:0B:09:4D:F3:2E:40:17:1F:F3:C9:35:F6:E3:2C:C0:4D:76:18
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F43285849D62AE093DF5EFC0A66854280
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/be0729f6-8370-33a4-95b3-7eb16a7b14de.roa
Signing time:             Tue 13 May 2025 06:03:12 +0000
ROA not before:           Tue 13 May 2025 06:03:12 +0000
ROA not after:            Mon 11 Aug 2025 06:03:12 +0000
asID:                     395793
IP address blocks:        70.39.131.0/24 maxlen: 24
                          70.39.132.0/24 maxlen: 24
                          70.39.133.0/24 maxlen: 24
                          70.39.134.0/24 maxlen: 24
                          70.39.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:2a:e0:93:df:5e:fc:0a:66:85:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: May 13 06:03:12 2025 GMT
            Not After : Aug 11 06:03:12 2025 GMT
        Subject: CN=ac06385f-437f-431c-a867-be4f703b743c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fc:93:a0:83:b3:17:9d:28:fa:75:18:d1:54:
                    d3:b8:cc:78:d5:37:2d:97:33:18:97:1d:d7:55:f6:
                    21:87:f1:fd:83:96:be:65:2f:41:79:57:63:51:3c:
                    39:7d:37:5a:df:6e:ba:b9:1c:fe:56:ce:15:30:f6:
                    94:9e:90:6a:70:be:43:cd:58:4f:e0:04:0b:ec:c9:
                    7f:4a:b5:85:19:40:9e:1e:db:90:46:8c:89:09:90:
                    72:60:37:db:a7:20:77:a3:20:ce:48:15:2f:ae:d5:
                    97:db:62:88:14:c7:55:62:6e:d4:65:84:d2:1c:3c:
                    0e:6d:12:fd:76:94:f4:8e:8c:74:bd:e5:bb:d3:ed:
                    80:a0:07:7f:44:05:48:19:27:77:0e:0e:a2:f8:a5:
                    c8:00:8b:67:e6:b5:7f:59:f7:87:88:e5:0c:17:b4:
                    8c:8e:00:f2:bf:67:9b:5b:a5:d0:06:80:9d:30:79:
                    5a:00:d2:d6:61:58:36:84:85:6e:fb:6b:34:0b:fe:
                    9c:93:81:83:b6:5a:df:fd:79:4c:ce:40:7d:22:18:
                    f9:cc:c7:9f:1b:81:09:b2:67:a5:39:1a:85:1b:be:
                    70:f9:f7:2c:10:85:13:bc:17:dc:6f:62:83:1f:6c:
                    26:c1:f3:a2:4b:66:37:d8:38:41:d1:1f:4f:6c:1b:
                    b8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E3:0B:09:4D:F3:2E:40:17:1F:F3:C9:35:F6:E3:2C:C0:4D:76:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/be0729f6-8370-33a4-95b3-7eb16a7b14de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.131.0-70.39.135.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:39:63:74:71:a6:80:fe:9f:cb:e3:b4:c1:c5:cf:11:eb:8e:
         52:b9:b9:7c:78:2f:bc:c5:1b:5d:e9:da:97:1e:bf:34:dc:a6:
         94:87:9a:35:fa:69:e5:d8:17:d4:e1:1b:b1:83:1d:5d:04:ba:
         4e:67:50:dd:02:f5:b6:33:4e:0e:9c:25:bd:63:c1:e3:6a:f0:
         99:50:7f:3d:dc:04:cd:4c:5e:8c:65:28:92:d5:69:d2:6f:59:
         eb:7e:ac:8e:17:85:52:c1:a1:dc:15:a3:3a:78:12:d6:74:eb:
         b3:a1:88:ef:33:3b:37:4c:71:a4:b4:da:33:27:73:73:25:ca:
         1a:77:17:0f:8f:da:7d:1c:01:36:1b:e7:e6:47:c5:bf:07:44:
         af:08:11:3e:84:a4:52:ba:51:2b:9f:8a:15:b6:f9:8a:85:16:
         0e:f4:07:04:5b:83:d3:67:6d:c0:9a:91:18:00:38:12:70:71:
         d4:25:75:c7:0b:3a:95:d1:9f:cf:f8:20:ae:58:c7:29:08:74:
         31:90:99:00:21:3f:ea:fb:2a:cd:d2:8c:51:58:36:2b:a5:e5:
         3e:82:0b:02:93:76:ff:a3:e7:09:7c:47:bf:7a:b2:a0:7c:09:
         5d:91:ac:21:d4:93:13:5f:37:08:b0:8c:c8:83:2b:63:a2:b6:
         60:06:85:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:47:36 2025 by rpki-client