Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/18fb07f7-a249-3be9-92a5-6fcce55d697b.roa
File:                     18fb07f7-a249-3be9-92a5-6fcce55d697b.roa (raw, json)
Hash identifier:          +OlyhoptecENPekqWVcuakNkBNKPxeo2cVcVWPdR80E=
Subject key identifier:   D7:DA:82:BD:78:EA:64:2B:CD:7E:8C:71:CD:4F:FC:AA:65:B8:6B:91
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F43285848CDB52E857F01803C996F5F80
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/18fb07f7-a249-3be9-92a5-6fcce55d697b.roa
Signing time:             Fri 07 Feb 2025 12:32:39 +0000
ROA not before:           Fri 07 Feb 2025 12:32:39 +0000
ROA not after:            Thu 08 May 2025 11:32:39 +0000
asID:                     18934
IP address blocks:        142.202.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:b5:2e:85:7f:01:80:3c:99:6f:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Feb  7 12:32:39 2025 GMT
            Not After : May  8 11:32:39 2025 GMT
        Subject: CN=8703102e-34fa-4443-8459-d8d4b19353dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:85:94:9e:4b:e0:ab:fc:13:68:5a:8e:b6:
                    a9:ee:65:d2:fe:af:73:88:f7:3b:86:b1:61:27:59:
                    f6:34:7b:ec:04:1e:d5:ae:01:68:50:be:c3:36:d3:
                    4a:d7:f2:5f:c2:69:38:fa:df:ff:1a:3d:bf:10:b8:
                    08:b7:db:16:5d:e5:51:4a:44:79:9f:8e:02:63:1d:
                    af:78:de:c3:32:80:25:4e:1d:d5:27:18:1e:56:dd:
                    84:2e:0c:1c:83:ac:ea:aa:b6:83:64:05:a4:a0:57:
                    45:9b:3a:bd:dc:fc:e8:fc:db:52:a9:e6:e8:5e:14:
                    13:1c:4c:0e:7a:a8:27:1c:e0:63:ee:96:7f:6e:ae:
                    80:1f:55:2f:b1:4a:3d:4e:4c:97:34:83:67:57:6c:
                    51:a8:55:35:24:41:d9:6c:eb:00:94:d8:8c:d8:46:
                    63:63:75:d8:32:e3:7d:f2:82:a9:89:16:f4:ba:17:
                    b9:9a:09:63:01:4d:e1:ba:c5:df:76:0f:aa:2c:ee:
                    82:d6:39:d6:06:11:21:03:32:d3:68:29:1e:f2:ec:
                    3a:55:0f:dd:12:c4:b1:ce:a5:0e:90:13:d6:ac:18:
                    1a:9b:1a:6f:27:2d:2d:9f:cd:d0:c2:cc:f6:19:a1:
                    88:f4:6d:44:0b:eb:ba:d0:f4:5e:ca:46:cf:88:f7:
                    d7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DA:82:BD:78:EA:64:2B:CD:7E:8C:71:CD:4F:FC:AA:65:B8:6B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/18fb07f7-a249-3be9-92a5-6fcce55d697b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:51:dc:ff:9c:4f:03:a7:cc:4c:b9:c5:6a:22:88:28:99:83:
         7e:b9:c0:aa:ff:42:7b:11:d0:61:d9:c6:2a:2d:57:9a:c8:b2:
         a0:89:dd:ee:38:87:5d:73:a0:d5:e3:a4:d4:c9:7c:da:3d:8f:
         19:7a:ea:2a:1c:21:f6:4d:9b:33:1c:9d:d2:06:c9:9d:06:f1:
         3a:c8:c1:ab:4d:77:ea:ac:74:2d:4c:41:ec:32:92:ff:15:ec:
         9d:dc:80:91:37:28:f6:1d:8d:76:cc:48:6d:95:1d:3a:4a:f1:
         11:45:54:d6:96:97:78:17:6a:02:5e:9b:b4:e2:5a:41:0c:61:
         87:61:35:f8:13:41:cb:41:b6:04:a8:bc:a0:5b:9e:4b:40:63:
         0e:df:2a:f6:97:46:60:32:2b:5c:dc:3d:0f:f9:83:52:03:7b:
         b3:41:c5:6f:dd:ca:d7:51:c5:2a:8c:68:93:55:6c:83:ed:da:
         03:bf:61:0a:fa:62:73:f6:a1:89:c4:19:e3:66:14:6d:82:7f:
         23:08:a5:f8:e9:1a:da:d8:fc:60:68:28:69:71:3a:ed:14:de:
         6b:17:9b:2b:39:08:25:b0:3e:96:04:6d:f4:f2:83:2b:ad:0a:
         98:c8:1d:31:f1:40:21:96:af:2a:12:f1:9c:73:cf:27:26:cb:
         58:8b:52:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:43:00 2025 by rpki-client