Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3cb39cf-d6d6-3b3d-8fa3-7fd590c402e4.roa
File:                     c3cb39cf-d6d6-3b3d-8fa3-7fd590c402e4.roa (raw, json)
Hash identifier:          9uVOMrLNagwi9JJGaUAubKhh/tefkMuE2Kc1toPQR6o=
Subject key identifier:   B2:32:E1:E8:1D:CE:8A:8E:2B:00:4F:EC:68:B3:EB:81:C2:03:64:97
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58191677B8D3E0CD46287C6
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3cb39cf-d6d6-3b3d-8fa3-7fd590c402e4.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     40306
IP address blocks:        70.41.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:91:67:7b:8d:3e:0c:d4:62:87:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=9a50e71e-ae1f-40eb-98a1-b0321baf5ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:9f:db:fc:5a:53:b8:14:9b:2c:a8:81:df:
                    8c:fd:f7:be:4a:3b:83:ee:84:9f:02:1d:04:7a:52:
                    a1:dd:81:fb:21:0b:c5:7e:2d:db:cf:2d:a2:b6:19:
                    0f:19:75:4f:f3:31:23:20:be:e4:7f:22:bb:38:89:
                    66:02:44:d3:35:31:c2:09:86:61:16:d0:68:63:b7:
                    1a:d8:4e:85:74:dd:ac:f7:1d:42:7e:cb:1a:52:db:
                    fe:40:24:0a:70:6f:ad:4c:54:18:07:dc:2a:91:51:
                    fc:a6:cd:0e:fb:33:70:18:d8:3b:9e:3a:f3:8e:2c:
                    cd:1f:c8:30:91:6b:b1:a7:34:cc:24:67:ae:fd:4f:
                    58:20:6b:f7:d9:12:10:08:b9:c5:f2:1b:0b:ff:0d:
                    64:df:00:29:0f:7b:9b:83:07:cc:fe:20:c1:9a:ab:
                    e2:f5:50:73:e7:db:7c:03:7b:12:53:4a:39:db:a3:
                    85:4f:30:c8:34:e6:58:6a:26:ea:af:fd:3b:ce:49:
                    a9:c2:a1:31:69:96:c9:a8:f3:97:69:c7:1d:69:84:
                    6c:bf:a8:e1:6d:ec:43:4d:23:37:45:9b:9a:47:cc:
                    db:69:c1:3c:7a:0b:6a:f8:37:45:6b:f9:0c:b7:94:
                    c3:f0:46:e0:eb:b5:54:2c:46:5e:f0:b8:e8:51:c3:
                    a8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:32:E1:E8:1D:CE:8A:8E:2B:00:4F:EC:68:B3:EB:81:C2:03:64:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3cb39cf-d6d6-3b3d-8fa3-7fd590c402e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:62:e3:f4:8c:0a:52:8e:dc:54:22:a7:0c:f7:47:de:55:f2:
         cd:b1:90:9f:e8:0c:9d:16:90:fd:18:82:03:53:b1:f6:e7:8f:
         97:68:29:e3:db:66:98:1a:ec:4c:f9:d5:a3:4a:d7:2e:40:6b:
         24:7f:20:42:5b:94:d9:ff:00:6c:59:a5:94:71:30:e3:ce:a5:
         aa:c8:92:23:20:82:7a:9d:cf:40:8f:4d:42:77:3c:f2:bd:af:
         e6:2e:59:da:5a:8e:40:1e:ab:f8:6d:7d:9e:89:07:85:7b:60:
         12:9a:57:09:a1:64:cb:60:f9:82:f3:b2:10:27:a3:15:2a:64:
         bf:92:c1:07:0b:70:79:d9:04:9f:7a:8e:e3:50:9b:cd:56:6c:
         bc:1f:03:65:04:9f:1f:37:59:9e:48:e1:0c:29:f7:71:29:df:
         ab:06:a9:33:98:d9:04:49:e0:08:90:86:17:81:d4:3d:f7:5e:
         10:0a:8f:f2:92:b6:43:06:48:46:2f:32:55:00:a0:00:5c:57:
         29:12:e3:6e:b5:30:4d:8f:48:24:35:e7:80:08:5b:63:5a:05:
         7e:72:5d:fc:79:0c:ef:d4:49:54:5d:6e:77:6c:74:6a:c3:c0:
         f8:69:0e:c0:ce:43:ca:c4:ce:32:95:29:b2:c3:9f:4e:14:b5:
         8b:dd:10:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZFne40+DNRih8YwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
OWE1MGU3MWUtYWUxZi00MGViLTk4YTEtYjAzMjFiYWY1YWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qCf2/xaU7gUmyyogd+M/fe+SjuD7oSfAh0E
elKh3YH7IQvFfi3bzy2ithkPGXVP8zEjIL7kfyK7OIlmAkTTNTHCCYZhFtBoY7ca
2E6FdN2s9x1CfssaUtv+QCQKcG+tTFQYB9wqkVH8ps0O+zNwGNg7njrzjizNH8gw
kWuxpzTMJGeu/U9YIGv32RIQCLnF8hsL/w1k3wApD3ubgwfM/iDBmqvi9VBz59t8
A3sSU0o526OFTzDINOZYaibqr/07zkmpwqExaZbJqPOXaccdaYRsv6jhbexDTSM3
RZuaR8zbacE8egtq+DdFa/kMt5TD8Ebg67VULEZe8LjoUcOo0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLIy4egdzoqOKwBP7Giz64HCA2SXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzNjYjM5Y2YtZDZkNi0z
YjNkLThmYTMtN2ZkNTkwYzQwMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADti4/SMClKO3FQipwz3R95V8s2xkJ/oDJ0WkP0YggNTsfbnj5doKePb
Zpga7Ez51aNK1y5AayR/IEJblNn/AGxZpZRxMOPOparIkiMggnqdz0CPTUJ3PPK9
r+YuWdpajkAeq/htfZ6JB4V7YBKaVwmhZMtg+YLzshAnoxUqZL+SwQcLcHnZBJ96
juNQm81WbLwfA2UEnx83WZ5I4Qwp93Ep36sGqTOY2QRJ4AiQhheB1D33XhAKj/KS
tkMGSEYvMlUAoABcVykS4261ME2PSCQ154AIW2NaBX5yXfx5DO/USVRdbndsdGrD
wPhpDsDOQ8rEzjKVKbLDn04UtYvdEOo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:13 2025 by rpki-client