Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0e398b6b-d1af-3537-8fdc-bf7a410238d6.roa
File:                     0e398b6b-d1af-3537-8fdc-bf7a410238d6.roa (raw, json)
Hash identifier:          rNOH4ExPv857IcLxerss5NMvZj7DJLe9TwQWyPO3FiE=
Subject key identifier:   98:70:E9:57:66:AC:9D:9D:1B:A2:BD:00:C2:1E:45:95:FD:88:BA:5A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213468DB12F8288571C06E00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0e398b6b-d1af-3537-8fdc-bf7a410238d6.roa
Signing time:             Sun 09 Mar 2025 10:21:06 +0000
ROA not before:           Sun 09 Mar 2025 10:21:06 +0000
ROA not after:            Sat 07 Jun 2025 10:21:06 +0000
asID:                     3848
IP address blocks:        216.18.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:68:db:12:f8:28:85:71:c0:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:06 2025 GMT
            Not After : Jun  7 10:21:06 2025 GMT
        Subject: CN=ba91a562-b3fc-4d78-866d-518db8481ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ee:04:1d:a8:f0:4e:58:4b:b9:57:03:4d:0b:
                    a3:dd:83:5e:af:d1:30:81:c3:dd:e8:1a:94:e6:92:
                    ac:9d:25:69:2c:28:e9:bb:82:8f:00:f1:1c:1d:a1:
                    ce:27:f2:b3:06:16:93:6b:9c:3a:d9:64:94:22:0d:
                    a1:8b:f1:b3:b7:75:62:b3:d8:2d:f1:b1:54:be:42:
                    0d:0b:0f:08:9a:18:14:5e:ac:0c:07:54:7c:d1:2c:
                    1f:62:9b:38:04:6b:4a:20:7c:30:fc:ed:c1:f2:3c:
                    e9:d2:b4:cb:24:10:5f:9d:00:58:b0:79:c7:13:dc:
                    f7:66:42:b0:74:39:da:c8:50:68:54:dd:65:0e:b9:
                    27:2d:27:fe:13:43:5b:ab:80:5a:54:1e:bb:77:8c:
                    bd:99:71:f7:b9:82:1e:ec:55:c6:a4:88:6b:9a:93:
                    9c:02:e9:08:16:9d:29:ef:52:16:2a:8e:e3:fc:7b:
                    2d:07:e0:be:de:db:c1:9f:02:22:73:42:86:9a:6e:
                    ae:1d:ab:2c:f1:2e:82:61:d0:72:ce:81:92:e4:da:
                    41:a9:15:03:6a:ae:bb:f1:00:f1:31:6b:f5:7b:47:
                    76:4a:3d:aa:48:dd:a4:17:9b:9a:39:58:ec:d7:73:
                    2e:98:46:13:14:a4:47:7d:7a:fa:00:74:8f:05:34:
                    33:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:70:E9:57:66:AC:9D:9D:1B:A2:BD:00:C2:1E:45:95:FD:88:BA:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0e398b6b-d1af-3537-8fdc-bf7a410238d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.18.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:af:fa:4a:38:52:c1:f0:20:68:d3:1d:34:2e:47:38:f8:03:
         5c:48:39:f1:f3:29:c7:93:0e:35:bd:16:71:31:c3:e2:84:b8:
         46:fa:f2:ff:23:53:32:a9:31:f7:d7:12:44:d9:a5:d2:15:dd:
         2c:44:ac:b3:1f:80:4f:e9:6e:a5:e0:e6:94:de:7e:e6:db:0d:
         5b:c1:ee:f4:06:95:87:6f:47:63:72:1e:d3:34:89:1d:d3:a8:
         0a:9e:b3:07:e4:4a:9a:fe:b7:3c:a2:9e:9f:d7:9c:f4:e7:dc:
         7a:30:c1:6a:fb:28:15:d2:78:84:41:7b:6b:00:4f:2b:09:b3:
         ed:30:3b:37:52:c7:c2:a4:8d:71:28:32:22:9e:57:8b:54:58:
         4b:b7:4e:df:a0:29:ec:81:1a:3e:b4:9f:9d:01:0d:50:1e:e0:
         11:28:15:be:74:74:f3:f0:55:53:26:b2:63:9a:c7:04:9d:29:
         a3:f3:80:29:71:30:24:8d:6e:c9:f1:10:a4:7d:34:01:98:7d:
         48:c4:d6:7a:9e:0e:0f:e5:fb:2d:af:6f:18:37:b9:b0:ef:db:
         6a:2a:b1:03:39:3f:3e:34:74:7d:bf:49:d0:10:10:f0:e4:26:
         f0:5e:c1:f6:55:5d:10:58:d1:27:75:68:27:7f:bc:ba:09:87:
         f1:5b:0f:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNGjbEvgohXHAbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjEwNloXDTI1MDYwNzEwMjEwNlowLzEtMCsGA1UEAxMk
YmE5MWE1NjItYjNmYy00ZDc4LTg2NmQtNTE4ZGI4NDgxYmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme4EHajwTlhLuVcDTQuj3YNer9EwgcPd6BqU
5pKsnSVpLCjpu4KPAPEcHaHOJ/KzBhaTa5w62WSUIg2hi/Gzt3Vis9gt8bFUvkIN
Cw8ImhgUXqwMB1R80SwfYps4BGtKIHww/O3B8jzp0rTLJBBfnQBYsHnHE9z3ZkKw
dDnayFBoVN1lDrknLSf+E0Nbq4BaVB67d4y9mXH3uYIe7FXGpIhrmpOcAukIFp0p
71IWKo7j/HstB+C+3tvBnwIic0KGmm6uHass8S6CYdByzoGS5NpBqRUDaq678QDx
MWv1e0d2Sj2qSN2kF5uaOVjs13MumEYTFKRHfXr6AHSPBTQz6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJhw6VdmrJ2dG6K9AMIeRZX9iLpaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMGUzOThiNmItZDFhZi0z
NTM3LThmZGMtYmY3YTQxMDIzOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BJGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJOv+ko4UsHwIGjTHTQuRzj4A1xIOfHzKceTDjW9FnExw+KEuEb68v8j
UzKpMffXEkTZpdIV3SxErLMfgE/pbqXg5pTefubbDVvB7vQGlYdvR2NyHtM0iR3T
qAqeswfkSpr+tzyinp/XnPTn3HowwWr7KBXSeIRBe2sATysJs+0wOzdSx8KkjXEo
MiKeV4tUWEu3Tt+gKeyBGj60n50BDVAe4BEoFb50dPPwVVMmsmOaxwSdKaPzgClx
MCSNbsnxEKR9NAGYfUjE1nqeDg/l+y2vbxg3ubDv22oqsQM5Pz40dH2/SdAQEPDk
JvBewfZVXRBY0Sd1aCd/vLoJh/FbD8A=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:00 2025 by rpki-client