Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2957fc85-8830-394a-b555-15a6a4ffb5ca.roa
File:                     2957fc85-8830-394a-b555-15a6a4ffb5ca.roa (raw, json)
Hash identifier:          4QwT3SbP10QnVelZ93i3pBrHXaGXfFn8BVE3kMi7QA0=
Subject key identifier:   4D:20:7B:2C:E0:98:FE:49:82:36:4B:1F:63:6C:9F:24:43:4D:97:E6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858490B4C2981EF6AA2845E3E3B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2957fc85-8830-394a-b555-15a6a4ffb5ca.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     701
IP address blocks:        70.105.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:29:81:ef:6a:a2:84:5e:3e:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=161bafd8-e892-4bee-9f92-8c47a6dc415f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1f:4b:1f:cf:5f:4c:8f:08:6a:ac:0b:8b:bd:
                    6c:cc:15:63:6a:29:c4:80:52:89:26:1e:73:28:30:
                    5c:ca:4e:bc:ba:ad:51:da:08:58:fa:1c:a5:0c:4c:
                    b1:35:94:19:18:02:c7:ba:98:96:1e:d0:3b:bf:3e:
                    6a:58:07:5b:b1:c7:09:a3:7d:b2:36:08:71:36:12:
                    10:c6:04:ad:96:27:0a:f8:e4:b8:fb:4b:82:fa:3f:
                    59:d4:c4:5c:05:57:df:b0:26:b8:e1:99:ff:1b:d6:
                    53:2d:79:79:26:8c:57:74:8b:23:c4:1a:76:5a:1d:
                    b5:ea:00:d1:d8:38:6d:9b:ba:e1:42:3d:6b:1f:ce:
                    ac:c7:1d:74:16:cd:49:be:d0:d1:1a:dd:f3:a5:e7:
                    3b:c9:c3:6a:05:ea:60:5c:40:88:eb:38:25:45:95:
                    67:b8:fc:05:6e:46:45:4b:dc:c1:02:03:58:7d:a3:
                    1a:9d:56:a4:ed:d5:82:e5:d3:e7:42:8c:7b:61:e3:
                    78:90:ea:60:1a:d3:2f:e4:a8:77:f9:bd:01:73:5c:
                    52:70:2a:38:dc:ec:d0:f9:5a:59:87:8e:1c:16:5c:
                    f3:b4:1c:07:68:d2:52:85:5e:5b:6e:52:28:fa:f6:
                    44:61:c1:45:e8:4e:da:11:2a:16:a4:c9:6c:f1:73:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:20:7B:2C:E0:98:FE:49:82:36:4B:1F:63:6C:9F:24:43:4D:97:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2957fc85-8830-394a-b555-15a6a4ffb5ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.105.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:7b:a7:4a:60:e1:9e:3b:02:14:79:df:5b:d5:4f:61:22:b3:
         86:19:f3:4d:06:5e:9d:38:77:27:f3:e7:04:55:cc:c6:64:f2:
         b3:0e:ba:08:7d:24:2d:cc:8c:c7:39:43:1e:52:e5:a9:ff:9f:
         a5:d7:98:f5:bd:4b:be:13:4a:9b:f6:69:a3:2c:d7:0f:1c:12:
         22:b5:ba:9d:62:df:38:88:52:49:3b:af:a2:55:ab:bf:7e:08:
         43:bf:15:d0:83:72:1e:d5:16:b0:0f:ff:9c:b5:46:ce:ee:49:
         fd:ea:02:ca:bc:17:b3:40:74:d8:95:3a:64:c3:a2:17:6a:0f:
         97:9c:d6:78:70:5a:28:25:fc:17:66:67:0f:1a:b9:ba:81:93:
         22:40:07:77:45:23:8d:e6:2a:4b:60:10:38:a3:98:3a:22:c7:
         be:46:10:05:ca:30:8e:18:da:2f:89:a6:de:0d:2d:ff:e4:38:
         d6:13:cf:2a:bc:63:ae:26:fd:07:98:48:0c:b1:6c:4f:8d:b7:
         6d:9b:36:ed:d7:52:f7:38:39:ea:b9:31:53:0f:fa:d4:08:02:
         a3:18:dc:66:c0:6e:8c:41:4a:06:22:be:09:54:22:62:28:74:
         8b:94:08:0b:85:11:63:82:60:44:3a:c0:6c:7f:ec:32:7f:e7:
         e8:b4:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:21 2025 by rpki-client