Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa
File:                     aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa (raw, json)
Hash identifier:          uPG9JSApj8xjTaOEffQs/f1uF1+1i4Q4dvdj8+ZkURE=
Subject key identifier:   5A:14:7F:67:EE:66:56:B6:80:E2:E8:E0:08:1A:6D:93:30:36:CD:CB
Certificate issuer:       /CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4
Certificate serial:       010D0C9F43285848B35B61F73F7F82B9E30485C0
Authority key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     394470
IP address blocks:        216.10.70.0/23 maxlen: 23
                          216.10.70.0/24 maxlen: 24
                          216.10.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:61:f7:3f:7f:82:b9:e3:04:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=aab41e9f-0fdb-4e31-874d-b38fd81321ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3e:49:d3:00:c8:78:63:76:6d:db:b3:3d:7a:
                    ac:d6:26:13:3f:17:ee:66:15:c4:e1:56:d5:ec:6e:
                    1e:45:1f:2a:38:76:50:01:7c:3e:6b:d2:8e:d1:43:
                    18:b2:78:6a:40:80:94:05:9c:1f:c1:39:1b:8e:d3:
                    c7:c7:f6:6f:9b:2d:bc:6c:7d:41:b0:33:d3:0e:5b:
                    97:54:c7:2e:e4:25:b2:2f:f7:bb:2d:46:46:f7:74:
                    d6:c2:b4:32:c2:73:e4:ed:5e:82:6f:12:e6:ae:73:
                    60:69:29:ec:a0:b0:92:10:3a:a5:19:25:a1:9e:fb:
                    80:8f:57:b2:35:c6:69:e6:da:40:b7:fa:61:55:0d:
                    d2:84:f2:7f:de:8b:3c:f1:a2:f5:9e:31:30:56:54:
                    a7:7b:f8:91:ea:70:50:12:7e:c1:74:df:8b:5a:79:
                    20:e7:f5:a7:44:d4:fa:29:79:a0:dc:b4:06:d4:d0:
                    95:6e:a2:12:8e:69:9e:57:2d:4f:4f:da:f6:08:c8:
                    1b:5e:23:24:f5:18:4f:b1:e2:3f:34:47:26:4d:59:
                    dd:4f:c8:e0:74:c6:79:9f:8b:d1:0f:5d:79:ea:c3:
                    08:eb:94:ff:a5:af:d9:c4:68:b8:75:3c:0f:5d:c5:
                    73:db:d8:f8:f6:37:0f:67:f2:24:84:17:8b:33:64:
                    69:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:14:7F:67:EE:66:56:B6:80:E2:E8:E0:08:1A:6D:93:30:36:CD:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl

            X509v3 Authority Key Identifier:
                keyid:29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:6d:30:75:dc:d3:2c:30:f1:03:8d:97:98:78:54:b7:30:a7:
         4f:6f:a0:ba:4e:7d:c0:60:40:20:2c:08:51:02:f2:9c:a2:d9:
         58:81:86:57:78:70:9b:4f:0a:1a:e5:ef:4a:f9:9e:54:da:fc:
         77:ca:f3:f4:d7:bf:6a:cf:b8:91:d9:c1:ca:87:ef:fb:cd:9a:
         95:e4:3c:b1:c5:ef:46:44:1f:dd:fa:ce:55:e0:d8:1e:ae:06:
         ae:05:bf:89:1c:c3:58:5b:c4:e8:c2:26:bd:92:4c:a3:c9:e8:
         59:45:b3:1d:57:c6:14:a5:f1:79:f3:3c:8c:0e:2d:eb:aa:4c:
         3d:b7:1e:f0:fe:c2:e8:56:e7:ed:6f:3c:17:94:b2:d6:80:b6:
         fd:15:90:58:b4:ba:46:50:88:f9:e4:a2:99:2e:9d:de:b7:77:
         d3:6e:00:61:d0:f8:56:e5:dc:8d:e1:e7:0f:a4:15:97:0c:0b:
         07:e2:41:4b:39:34:4c:61:c7:e2:56:22:8a:34:a3:f1:a4:46:
         fa:68:a0:44:05:06:23:97:77:02:e5:fb:85:1e:4b:94:19:6c:
         75:32:02:1a:df:0a:c5:2c:cb:d3:4b:31:f2:48:eb:34:c7:50:
         e0:a3:f8:d4:ec:c8:dc:54:47:35:e6:6e:f6:26:b1:ff:e5:5f:
         3c:a6:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:32 2025 by rpki-client