Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31a7d06e-f401-374d-a3e0-58275ee35373.roa
File:                     31a7d06e-f401-374d-a3e0-58275ee35373.roa (raw, json)
Hash identifier:          4QlCly0ka9Cg3xAEAQE08LOAzJwKeNZeq/Nz7A9aUGA=
Subject key identifier:   4D:49:6D:6A:CF:38:4A:4C:4A:EE:D1:5F:35:71:26:9A:78:39:99:8D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921342D315A04942F640141E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31a7d06e-f401-374d-a3e0-58275ee35373.roa
Signing time:             Sun 09 Mar 2025 10:20:38 +0000
ROA not before:           Sun 09 Mar 2025 10:20:38 +0000
ROA not after:            Sat 07 Jun 2025 10:20:38 +0000
asID:                     855
IP address blocks:        70.31.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:2d:31:5a:04:94:2f:64:01:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:38 2025 GMT
            Not After : Jun  7 10:20:38 2025 GMT
        Subject: CN=5edec82d-2394-40c7-b627-c32fa05e39de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:b8:ae:3b:00:4a:93:4e:cc:e0:30:d6:c7:
                    84:4f:c2:9f:da:fe:9c:f6:4f:33:d3:46:64:6a:c8:
                    8b:33:da:3c:1e:29:75:61:0b:cb:16:6b:6d:5f:ac:
                    d7:c8:50:f9:07:be:cf:ca:8e:f2:f1:b7:89:cb:5c:
                    80:31:73:00:e1:db:13:18:20:73:16:0b:84:3c:dd:
                    6e:f1:08:86:23:e6:e5:b7:53:f4:cd:56:a3:29:81:
                    71:e7:c0:36:05:cb:1f:6e:fe:ac:39:21:5e:11:c7:
                    2a:f1:41:62:71:22:b1:13:77:e7:5b:54:fe:90:df:
                    68:ff:54:12:f8:cc:2e:14:ed:ff:dd:a1:18:3e:6e:
                    9d:ee:47:92:86:bf:90:b6:39:30:e2:4c:a9:11:73:
                    32:de:97:7a:43:cd:54:21:8a:eb:f3:ce:7e:4c:17:
                    6f:9a:3c:8c:19:4e:a1:83:fc:5f:93:e3:d1:5a:78:
                    c4:e1:d8:43:2d:64:76:d5:2e:83:9c:d3:75:72:6e:
                    b4:74:fe:96:6c:f2:63:20:36:7d:6f:1b:fd:c3:9c:
                    97:63:e2:00:f0:6e:1c:11:10:1e:ca:10:04:8a:75:
                    2c:18:59:de:8d:bb:8c:0d:21:21:07:25:fd:4f:90:
                    e6:1e:c4:5e:ab:2c:1b:2c:9b:93:36:da:16:8a:c0:
                    a4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:49:6D:6A:CF:38:4A:4C:4A:EE:D1:5F:35:71:26:9A:78:39:99:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31a7d06e-f401-374d-a3e0-58275ee35373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.31.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:8a:36:b0:5a:95:e4:5f:76:48:a3:d3:78:e0:51:a7:e6:26:
         ac:5d:69:58:7f:c3:74:34:54:18:93:a6:cb:7b:6f:e8:10:f1:
         05:7c:91:44:ee:f3:a0:36:05:ba:47:2c:5c:4b:74:01:6b:23:
         88:00:ba:48:f9:ed:63:18:b0:72:17:72:ee:9d:e5:3b:d0:bf:
         4a:77:8c:17:e7:19:6f:e6:34:d9:e2:42:79:76:9a:9d:76:ba:
         d8:35:60:cf:5a:bb:8f:6a:e8:64:93:63:2e:a0:93:6a:fb:da:
         f7:69:ad:f0:73:4f:4f:30:fb:d0:68:a0:33:b1:16:2d:89:1c:
         ee:f8:41:10:39:fc:d9:cc:f3:94:1e:d0:85:c1:ee:fd:f6:0b:
         d1:64:91:24:dd:17:7d:21:d4:16:26:4e:3d:a3:9d:52:97:a8:
         cf:b5:9e:e3:d3:f9:51:bd:b4:ad:69:15:a9:75:1b:90:52:4f:
         6b:a7:df:05:07:49:2b:5e:d6:2c:5c:11:e3:d4:66:fd:43:77:
         77:1d:39:66:e6:eb:41:7d:c1:29:8c:99:09:7a:ec:c5:42:9e:
         53:66:af:ef:ae:8a:bd:d4:98:01:2c:61:98:5b:a6:dd:3b:ee:
         f5:a3:59:33:68:42:17:28:58:d5:1b:3b:3d:aa:97:05:4f:a4:
         95:41:13:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNC0xWgSUL2QBQeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjAzOFoXDTI1MDYwNzEwMjAzOFowLzEtMCsGA1UEAxMk
NWVkZWM4MmQtMjM5NC00MGM3LWI2MjctYzMyZmEwNWUzOWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kK4rjsASpNOzOAw1seET8Kf2v6c9k8z00Zk
asiLM9o8Hil1YQvLFmttX6zXyFD5B77Pyo7y8beJy1yAMXMA4dsTGCBzFguEPN1u
8QiGI+blt1P0zVajKYFx58A2Bcsfbv6sOSFeEccq8UFicSKxE3fnW1T+kN9o/1QS
+MwuFO3/3aEYPm6d7keShr+Qtjkw4kypEXMy3pd6Q81UIYrr885+TBdvmjyMGU6h
g/xfk+PRWnjE4dhDLWR21S6DnNN1cm60dP6WbPJjIDZ9bxv9w5yXY+IA8G4cERAe
yhAEinUsGFnejbuMDSEhByX9T5DmHsReqywbLJuTNtoWisCkNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1JbWrPOEpMSu7RXzVxJpp4OZmNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMzFhN2QwNmUtZjQwMS0z
NzRkLWEzZTAtNTgyNzVlZTM1MzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRh8IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACeKNrBaleRfdkij03jgUafmJqxdaVh/w3Q0VBiTpst7b+gQ8QV8kUTu
86A2BbpHLFxLdAFrI4gAukj57WMYsHIXcu6d5TvQv0p3jBfnGW/mNNniQnl2mp12
utg1YM9au49q6GSTYy6gk2r72vdprfBzT08w+9BooDOxFi2JHO74QRA5/NnM85Qe
0IXB7v32C9FkkSTdF30h1BYmTj2jnVKXqM+1nuPT+VG9tK1pFal1G5BST2un3wUH
SSte1ixcEePUZv1Dd3cdOWbm60F9wSmMmQl67MVCnlNmr++uir3UmAEsYZhbpt07
7vWjWTNoQhcoWNUbOz2qlwVPpJVBEwA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:00:53 2025 by rpki-client