Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0c9f94f-9bc7-371c-b932-1ff36997a05b.roa
File:                     d0c9f94f-9bc7-371c-b932-1ff36997a05b.roa (raw, json)
Hash identifier:          z464lzxGIbkiLSFnMPMC8V8P7L37lg1HaYiz9CbbRFM=
Subject key identifier:   B9:2D:00:AD:41:9D:D4:1A:19:07:AE:29:4E:3D:61:B0:1E:0C:69:58
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581974D3F0B1F605A444980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0c9f94f-9bc7-371c-b932-1ff36997a05b.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        70.41.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:97:4d:3f:0b:1f:60:5a:44:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=511f4013-2297-49cd-a656-76e0b7ffc02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:18:22:8e:4b:3d:cc:2b:96:e7:40:71:70:98:
                    90:76:d7:d3:c0:2c:3d:bd:d0:23:51:84:f2:2f:92:
                    ef:75:41:5f:e3:06:90:6f:34:7a:44:82:fe:4b:35:
                    0a:be:97:2c:54:bc:f6:a0:05:29:06:f8:bb:2e:6d:
                    9c:ee:e5:e9:f0:79:a5:c7:7f:16:2e:02:42:46:e5:
                    48:ba:e5:c7:b1:4b:de:4f:04:f6:40:14:62:2c:d7:
                    31:6b:bf:3a:fe:0e:9e:f3:01:e3:65:2b:81:09:26:
                    97:c2:63:a8:3d:7d:34:25:e5:8f:7f:ed:1c:c7:09:
                    8f:1d:1b:9c:f7:4f:59:f3:b8:78:37:42:0c:dd:2b:
                    9e:0a:78:a1:aa:fb:04:75:69:95:95:7f:d0:d7:9d:
                    09:f0:75:4a:c2:9a:15:5d:f2:a7:60:0d:90:ef:35:
                    22:8b:86:c7:f2:de:6f:d5:51:90:f7:7c:51:31:dd:
                    bf:0e:2c:52:ee:48:d4:54:33:b0:29:bc:21:84:df:
                    44:0b:3b:10:58:cb:aa:f8:01:ad:f1:14:6e:09:14:
                    05:cc:e3:a7:7b:56:63:bc:7a:ef:03:e8:75:24:55:
                    9c:7c:a8:f0:95:95:15:92:2e:5a:ae:b4:36:9d:5c:
                    dd:8b:fb:8a:f0:3c:e8:42:53:42:7f:73:ab:81:39:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2D:00:AD:41:9D:D4:1A:19:07:AE:29:4E:3D:61:B0:1E:0C:69:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0c9f94f-9bc7-371c-b932-1ff36997a05b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:cb:6b:b6:3f:4a:22:01:37:46:58:d5:b2:31:a1:07:bc:f5:
         90:c6:3d:14:52:67:34:d0:a6:a6:68:9c:c6:c0:42:fa:20:d2:
         fa:74:1e:f5:4d:da:a3:6b:2c:7f:05:91:ed:5c:5b:4a:bf:22:
         c0:21:63:46:66:3b:97:51:d0:e4:21:c5:6a:41:9d:89:b4:19:
         53:9d:c9:32:2e:46:03:18:51:93:a9:1c:04:98:f5:cb:4b:43:
         67:56:9a:7f:ff:b3:88:ce:47:07:db:72:7d:20:e3:cf:86:3a:
         38:7f:80:83:39:83:e0:1a:4e:7e:6d:6a:5b:fd:50:b0:cc:99:
         48:a0:d8:3e:70:65:87:6b:d5:d0:e0:b0:0c:98:d0:f3:f5:e0:
         4a:11:c2:70:b7:06:44:95:bd:bb:8d:16:d8:29:4f:1a:61:c9:
         3c:10:f1:a8:60:93:fb:48:b0:65:ec:e3:a1:a0:62:43:63:de:
         71:00:86:1a:7d:80:f7:a2:34:1a:bc:09:26:b3:6a:39:6f:35:
         e4:f1:8b:f0:b3:f4:b0:24:76:15:22:5b:5e:1a:43:26:a1:ef:
         e8:b1:3e:73:32:1f:b2:dd:7c:d4:f0:4f:06:d9:e7:ab:2f:8c:
         ba:b9:67:de:09:44:8d:2b:f6:a5:a1:37:b6:62:9a:60:89:60:
         2b:ac:6b:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZdNPwsfYFpESYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NTExZjQwMTMtMjI5Ny00OWNkLWE2NTYtNzZlMGI3ZmZjMDJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xgijks9zCuW50BxcJiQdtfTwCw9vdAjUYTy
L5LvdUFf4waQbzR6RIL+SzUKvpcsVLz2oAUpBvi7Lm2c7uXp8Hmlx38WLgJCRuVI
uuXHsUveTwT2QBRiLNcxa786/g6e8wHjZSuBCSaXwmOoPX00JeWPf+0cxwmPHRuc
909Z87h4N0IM3SueCnihqvsEdWmVlX/Q150J8HVKwpoVXfKnYA2Q7zUii4bH8t5v
1VGQ93xRMd2/DixS7kjUVDOwKbwhhN9ECzsQWMuq+AGt8RRuCRQFzOOne1ZjvHrv
A+h1JFWcfKjwlZUVki5arrQ2nVzdi/uK8DzoQlNCf3OrgTmgswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLktAK1BndQaGQeuKU49YbAeDGlYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDBjOWY5NGYtOWJjNy0z
NzFjLWI5MzItMWZmMzY5OTdhMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbLa7Y/SiIBN0ZY1bIxoQe89ZDGPRRSZzTQpqZonMbAQvog0vp0HvVN
2qNrLH8Fke1cW0q/IsAhY0ZmO5dR0OQhxWpBnYm0GVOdyTIuRgMYUZOpHASY9ctL
Q2dWmn//s4jORwfbcn0g48+GOjh/gIM5g+AaTn5talv9ULDMmUig2D5wZYdr1dDg
sAyY0PP14EoRwnC3BkSVvbuNFtgpTxphyTwQ8ahgk/tIsGXs46GgYkNj3nEAhhp9
gPeiNBq8CSazajlvNeTxi/Cz9LAkdhUiW14aQyah7+ixPnMyH7LdfNTwTwbZ56sv
jLq5Z94JRI0r9qWhN7ZimmCJYCusa1I=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:04:13 2025 by rpki-client