Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d1bbbff-cbe5-388b-824d-d7cfb56cedf6.roa
File:                     2d1bbbff-cbe5-388b-824d-d7cfb56cedf6.roa (raw, json)
Hash identifier:          by/jibFBg+eKn9rU+kHRbii5jr4qnIacRmQ43eoBYg0=
Subject key identifier:   74:F8:86:3F:88:03:B9:10:9B:E7:6D:FE:0E:E9:2C:FF:0C:6F:4C:FC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213429A4D3B7869F36B65000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d1bbbff-cbe5-388b-824d-d7cfb56cedf6.roa
Signing time:             Sun 09 Mar 2025 10:20:36 +0000
ROA not before:           Sun 09 Mar 2025 10:20:36 +0000
ROA not after:            Sat 07 Jun 2025 10:20:36 +0000
asID:                     12132
IP address blocks:        67.70.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:29:a4:d3:b7:86:9f:36:b6:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:36 2025 GMT
            Not After : Jun  7 10:20:36 2025 GMT
        Subject: CN=f554a593-b847-4bba-8f71-568953393f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:ec:6b:d3:0e:af:2b:21:8b:97:bd:60:07:
                    58:d4:f2:9f:ad:b5:ca:3e:74:76:db:72:3c:32:e9:
                    46:4a:7d:5f:75:40:f4:b0:ff:30:9f:49:ee:99:77:
                    a8:2e:09:28:59:b9:cb:2b:18:59:7b:9b:97:d3:6e:
                    05:5f:bc:61:9b:ac:d6:14:a8:b1:1f:cb:ed:b4:90:
                    2d:d8:2d:12:bb:4b:91:37:d0:27:0e:5d:25:e8:d2:
                    1d:40:fe:25:94:3e:36:d3:2b:db:f5:2c:e5:ec:46:
                    e0:af:8e:fc:46:57:ca:94:a5:39:ba:1a:fe:3d:18:
                    61:e2:1c:02:ba:90:80:11:1e:46:c1:b8:81:d8:a9:
                    36:07:5b:c8:05:fd:a0:ae:d8:12:76:22:70:64:7c:
                    49:77:6c:06:88:0e:9f:da:40:0f:8f:82:47:59:3b:
                    92:a0:0f:ed:97:17:41:3a:e5:c7:51:da:ce:54:80:
                    6e:ec:97:cc:d2:29:6e:73:87:57:7d:a4:b0:00:44:
                    4f:7d:9b:7f:0f:29:f2:12:6e:b5:09:89:c6:e0:b3:
                    a0:32:18:b2:f7:28:a3:f9:de:7d:ff:6a:0a:f9:2e:
                    88:fb:c8:f5:98:d8:73:2d:db:92:82:47:01:88:47:
                    ca:a8:78:af:fe:ef:e7:44:df:1a:f7:73:c8:98:64:
                    90:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F8:86:3F:88:03:B9:10:9B:E7:6D:FE:0E:E9:2C:FF:0C:6F:4C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d1bbbff-cbe5-388b-824d-d7cfb56cedf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.70.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:33:74:bb:ae:58:47:98:93:bc:b2:b9:2f:ca:c7:b7:e4:1f:
         a8:a8:8c:41:1e:f6:7a:b8:eb:cc:94:cf:0f:f5:17:36:a6:ff:
         fe:8c:f8:fa:5f:fc:a5:ee:4e:b2:1c:4d:25:6c:26:89:24:3d:
         89:57:95:8b:45:0a:52:21:66:cd:e4:b6:44:71:64:92:f2:c3:
         da:04:a4:ac:9a:3c:3b:2e:63:ad:08:f8:bf:7c:70:36:23:92:
         0e:90:82:fd:96:3a:ae:95:09:81:cd:db:5f:a8:57:af:99:ec:
         d4:6f:34:f5:4c:ba:2e:3a:ce:0e:a8:83:3d:9e:9d:5d:20:9a:
         38:d8:a9:58:c4:38:13:f7:f7:a3:75:9a:98:ff:9f:68:41:aa:
         9a:dc:14:2a:9c:e7:88:4e:ce:70:92:a0:17:41:da:97:46:1d:
         2f:28:4a:1b:98:d1:3f:52:0a:55:15:f4:9f:1d:13:dc:86:1b:
         6d:34:d9:e5:e2:91:42:2b:a4:f7:63:e0:a5:4c:e2:25:b8:a6:
         d8:0a:d8:17:24:fd:30:9e:c4:a8:5a:cc:4b:49:fa:f5:92:ea:
         35:02:15:31:4f:3e:28:96:30:bc:84:28:92:b0:e5:08:23:6a:
         6e:76:6c:6e:5c:1b:74:19:a4:7f:fd:fd:63:8f:38:6e:97:9d:
         15:4a:1a:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNCmk07eGnza2UAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjAzNloXDTI1MDYwNzEwMjAzNlowLzEtMCsGA1UEAxMk
ZjU1NGE1OTMtYjg0Ny00YmJhLThmNzEtNTY4OTUzMzkzZjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Xsa9MOryshi5e9YAdY1PKfrbXKPnR223I8
MulGSn1fdUD0sP8wn0numXeoLgkoWbnLKxhZe5uX024FX7xhm6zWFKixH8vttJAt
2C0Su0uRN9AnDl0l6NIdQP4llD420yvb9Szl7Ebgr478RlfKlKU5uhr+PRhh4hwC
upCAER5GwbiB2Kk2B1vIBf2grtgSdiJwZHxJd2wGiA6f2kAPj4JHWTuSoA/tlxdB
OuXHUdrOVIBu7JfM0iluc4dXfaSwAERPfZt/DynyEm61CYnG4LOgMhiy9yij+d59
/2oK+S6I+8j1mNhzLduSgkcBiEfKqHiv/u/nRN8a93PImGSQiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHT4hj+IA7kQm+dt/g7pLP8Mb0z8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMmQxYmJiZmYtY2JlNS0z
ODhiLTgyNGQtZDdjZmI1NmNlZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ0b4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwzdLuuWEeYk7yyuS/Kx7fkH6iojEEe9nq468yUzw/1Fzam//6M+Ppf
/KXuTrIcTSVsJokkPYlXlYtFClIhZs3ktkRxZJLyw9oEpKyaPDsuY60I+L98cDYj
kg6Qgv2WOq6VCYHN21+oV6+Z7NRvNPVMui46zg6ogz2enV0gmjjYqVjEOBP396N1
mpj/n2hBqprcFCqc54hOznCSoBdB2pdGHS8oShuY0T9SClUV9J8dE9yGG2002eXi
kUIrpPdj4KVM4iW4ptgK2Bck/TCexKhazEtJ+vWS6jUCFTFPPiiWMLyEKJKw5Qgj
am52bG5cG3QZpH/9/WOPOG6XnRVKGvI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:48 2025 by rpki-client