Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6d8ff79-f3b4-3910-b34a-7541888ce171.roa
File:                     f6d8ff79-f3b4-3910-b34a-7541888ce171.roa (raw, json)
Hash identifier:          QtHkncFtXuReyF7pV9DIF9yKRK63JkuFyxk+KPFVXZY=
Subject key identifier:   E5:09:8B:A1:8F:91:23:F9:3D:30:C7:BE:20:8C:93:AB:CD:FD:1B:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C244C5270760C75E4451400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6d8ff79-f3b4-3910-b34a-7541888ce171.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        70.108.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:4c:52:70:76:0c:75:e4:45:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=05d4b1ab-e9db-461f-b442-aaacd47b7c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:85:17:b7:99:e1:d1:7a:f9:18:ba:94:49:90:
                    e7:77:f6:78:56:84:3b:61:86:f9:7f:4f:23:85:2b:
                    56:02:04:63:16:11:d1:d6:90:81:20:a4:b5:d7:ed:
                    6f:af:85:9f:67:4a:a3:a0:b8:06:74:dd:a0:ab:18:
                    68:06:85:e3:c7:0e:04:cc:0d:d6:96:1f:35:47:28:
                    df:61:8f:d6:51:13:c1:04:cd:9c:71:a4:ae:fa:2f:
                    e1:f1:c7:36:a4:ee:6a:31:57:e3:60:5e:0a:d1:e0:
                    65:83:4c:8e:e0:82:33:ed:27:46:b6:83:07:fb:6a:
                    24:e2:86:5f:cd:fe:3f:06:92:9a:d5:54:c4:dd:2b:
                    ae:1a:0d:e6:8e:6a:68:40:70:f4:d0:2c:f2:69:8d:
                    30:2b:9b:80:ef:3a:1f:92:68:c3:04:a5:4d:2f:68:
                    d3:8b:75:8d:11:f5:ee:06:32:c9:d2:16:9e:12:ee:
                    29:fc:ea:56:d2:60:cc:7b:6c:19:a4:c8:73:43:9e:
                    be:66:29:f4:10:0b:1a:58:37:7e:9c:51:c8:bd:8f:
                    39:b3:8f:c7:f4:70:0f:79:e4:94:ba:83:a1:00:0b:
                    dc:ea:73:af:b1:b9:3e:c9:26:db:6e:47:57:1d:0a:
                    fd:e4:8f:1f:eb:73:4a:5d:25:a1:01:61:ec:94:89:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:09:8B:A1:8F:91:23:F9:3D:30:C7:BE:20:8C:93:AB:CD:FD:1B:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6d8ff79-f3b4-3910-b34a-7541888ce171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.108.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c0:62:1c:46:30:42:8a:86:b0:be:aa:a7:74:36:0c:47:dd:
         f4:3f:5a:36:f7:58:d8:ea:19:43:b8:8b:61:f8:38:c8:98:54:
         19:c9:39:8c:e0:62:f6:8c:87:b3:c3:e4:68:d5:17:b4:7f:7c:
         51:bf:e2:25:26:19:8d:19:e0:d6:b8:b6:84:6f:24:61:80:9e:
         e3:c1:6c:02:23:a1:ca:a5:42:b1:e7:f4:fd:ab:6f:cb:94:08:
         70:4e:72:35:6a:58:28:1a:53:2b:54:96:f7:36:f9:c3:6f:93:
         21:ee:18:96:d7:8d:63:cf:24:0d:14:d3:5d:12:02:fa:8e:84:
         d6:49:9e:4f:9c:cc:4b:f2:ef:0c:bd:fb:ce:53:0f:b9:fc:ef:
         7a:d3:09:60:9a:e5:4c:74:6e:ed:20:2b:71:f0:4a:eb:8e:68:
         ff:75:ae:ed:58:ca:b3:57:0b:98:90:b3:79:33:12:c6:da:67:
         08:d0:6e:a8:f2:a6:42:b0:54:de:a5:1f:4b:41:ab:c4:1f:31:
         be:98:d4:a1:60:3e:2a:68:0c:0c:29:7d:8f:c6:72:be:a5:fe:
         b6:51:20:d5:1d:6e:b8:85:89:eb:89:c9:e0:75:a5:66:4f:39:
         93:46:d8:74:fd:e6:91:57:e9:3a:8c:0f:2f:af:16:79:f1:3b:
         df:d6:c7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:55 2025 by rpki-client