Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/c918711b-7341-3714-b9f1-a993bd3d5a62.roa
File:                     c918711b-7341-3714-b9f1-a993bd3d5a62.roa (raw, json)
Hash identifier:          s2DxVnP1NOqCT/q4WSAHJskXVXzg9KiC7TKR9upXbxw=
Subject key identifier:   C4:31:EF:22:09:57:1C:ED:03:7F:71:6D:43:61:12:95:98:55:B4:5F
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F432858494CC9459F9B99B52B24104DC0
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/c918711b-7341-3714-b9f1-a993bd3d5a62.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     19905
IP address blocks:        70.35.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:45:9f:9b:99:b5:2b:24:10:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=dbcaab68-5fdc-434e-b82f-2c92470bd6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:32:1e:09:c0:e2:6e:0a:55:5d:29:b8:b1:10:
                    d8:26:e1:52:6a:ba:9f:cf:30:d2:14:7e:8c:c8:f1:
                    5f:a8:29:72:0c:77:19:2d:20:b4:9e:df:b3:5a:a2:
                    78:2f:b9:6d:92:cc:2d:0c:03:f8:f9:88:f6:c9:30:
                    28:21:7b:5e:04:bf:eb:c8:80:b4:6a:ce:eb:bc:1e:
                    61:f8:e8:8f:e3:b4:49:c9:47:54:f1:14:e1:e4:4d:
                    ee:2a:6a:02:91:79:59:83:60:ad:e6:64:c0:22:8d:
                    dc:b8:40:d4:e5:57:78:6c:80:6f:89:e6:78:83:66:
                    28:6e:0e:03:ad:00:05:7c:cb:ca:e4:33:ae:46:e2:
                    fb:bb:76:41:55:ec:9a:9e:ed:3c:bb:37:d5:a1:1d:
                    8f:3c:63:c7:84:42:6c:45:87:da:a0:15:e5:db:d4:
                    0b:73:10:1a:4f:10:0c:34:8c:90:cb:39:34:6a:18:
                    e7:61:15:7d:a4:7d:90:fe:68:a5:36:e0:d8:9a:ee:
                    46:8b:85:84:70:c3:a2:bc:59:c8:84:92:1f:04:d5:
                    8c:38:83:d8:73:9a:ba:63:21:87:af:c2:f9:3c:92:
                    88:b1:fd:d5:1b:49:4a:a2:0e:19:53:74:3b:20:40:
                    92:56:d3:36:d9:2e:e4:1b:d5:78:de:01:ff:de:b3:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:31:EF:22:09:57:1C:ED:03:7F:71:6D:43:61:12:95:98:55:B4:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/c918711b-7341-3714-b9f1-a993bd3d5a62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:37:75:5c:95:00:4e:35:2a:01:6b:38:8f:57:69:a0:00:48:
         e7:8e:5f:0c:44:fd:bc:d3:f0:cf:64:77:71:97:37:fe:fe:fd:
         55:90:26:c2:31:bd:66:59:a5:ff:a9:ce:af:c9:95:a4:a5:9f:
         a6:56:a1:4a:d2:25:d0:db:10:bc:1a:db:19:9f:8e:ce:87:bf:
         2c:2a:9c:62:1f:4b:74:08:2f:46:0a:0d:8b:b4:45:f5:3a:50:
         24:1b:ba:81:79:04:27:7f:c5:76:e7:18:4d:b7:65:19:ad:5a:
         2a:bb:ff:48:fb:a0:74:17:37:8f:b2:42:61:93:7e:e7:ad:2a:
         0b:58:78:17:75:fa:13:9e:e7:61:e5:dc:e1:20:9a:9f:65:69:
         75:f5:38:80:76:eb:17:a7:5a:8a:1f:d4:0a:95:d7:3c:13:38:
         26:57:a5:e0:da:80:db:f8:21:40:fd:14:10:ea:bc:0b:20:5e:
         a9:c4:d5:9e:ea:6a:34:5c:b5:79:7d:25:f7:6f:06:77:e6:05:
         89:86:f8:48:1d:e3:0d:20:b1:70:3c:5b:ce:5d:e0:cf:68:99:
         4d:fb:a4:3b:e2:ac:9d:d7:67:25:dd:9a:07:88:e5:ad:3b:a9:
         49:d8:6b:45:7f:da:b8:48:1b:d9:32:78:a0:f9:6d:c5:f3:a0:
         6e:78:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:11:24 2025 by rpki-client