Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/08d242d0-3bdd-365f-b1fd-5425843a12d6.roa
File:                     08d242d0-3bdd-365f-b1fd-5425843a12d6.roa (raw, json)
Hash identifier:          EXaTXxypEbkd/lYxkZhAGCrKSbygvnoxO5HvSe2Q7Ic=
Subject key identifier:   51:07:F6:59:00:16:7D:85:80:07:4E:30:15:A6:CC:84:5E:E3:72:24
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F4328584A62909E49FF0A7C3D10323340
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/08d242d0-3bdd-365f-b1fd-5425843a12d6.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     29967
IP address blocks:        161.195.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9e:49:ff:0a:7c:3d:10:32:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=2b6923dc-c852-4fe8-8c11-e658a37afed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7a:2f:b9:83:36:78:eb:9b:0d:37:36:2e:3a:
                    a9:79:aa:5b:39:6b:77:ba:0c:09:67:08:77:bc:e8:
                    27:19:53:4f:87:8b:39:e1:95:74:cf:f8:3a:cd:25:
                    7c:ea:9d:10:57:7a:44:00:f5:90:25:b1:60:b7:c9:
                    57:6c:ab:a3:73:d5:ae:3d:9a:0c:64:da:c0:c5:be:
                    b2:8d:f0:bc:59:6d:ed:fd:22:ca:e3:fc:4e:91:e0:
                    0f:4d:b7:25:e3:b4:8b:bb:f1:16:43:9d:24:b5:8d:
                    b0:4f:4c:e2:15:0a:5c:80:e9:40:87:73:c9:3f:8a:
                    1d:3a:89:03:21:c8:26:4d:49:d3:d0:2e:55:1a:ef:
                    56:62:46:70:5d:d9:65:81:e4:77:da:e5:da:9d:59:
                    1d:66:ee:1c:b6:c0:42:b8:cd:ac:27:86:a5:24:3c:
                    eb:f3:b4:06:95:9b:4d:13:cf:33:99:9d:c2:9a:90:
                    5e:a1:5f:54:26:d6:97:d7:80:e1:69:73:01:71:8c:
                    31:02:ec:49:09:5c:32:71:02:b2:e2:b1:de:67:55:
                    bc:8b:e1:c3:a1:bc:fd:9d:2f:f3:79:d3:96:fe:7c:
                    a2:ba:c7:2c:a8:b9:d9:1a:84:65:f4:7c:b0:19:30:
                    b9:a5:7b:e9:a3:64:00:07:44:69:93:92:12:ef:8d:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:07:F6:59:00:16:7D:85:80:07:4E:30:15:A6:CC:84:5E:E3:72:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/08d242d0-3bdd-365f-b1fd-5425843a12d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:d8:5c:01:07:07:fb:ca:d0:2e:94:22:72:bd:8d:51:df:0c:
         42:07:db:ab:5e:c9:f0:39:68:66:a4:3a:3f:f6:e0:db:cc:86:
         6d:ce:0f:ee:81:39:19:5c:db:b2:48:0a:bf:04:c9:d0:70:67:
         c2:0d:c1:96:02:20:0e:56:33:81:14:d8:5c:b8:97:52:35:4a:
         3f:9d:bb:72:89:4b:6a:ea:79:2f:51:52:6f:c5:d0:a7:7f:69:
         34:bd:f4:0e:bf:62:4b:0b:20:c5:6f:31:6c:e7:84:7a:be:81:
         80:6f:59:dc:7b:64:a8:04:5d:f1:6b:38:d2:ee:c3:c5:8a:d0:
         05:04:18:e3:57:b4:62:e4:12:2b:dd:1d:1e:00:c8:29:fb:d1:
         53:19:96:d8:d8:31:11:98:50:07:ad:ad:38:7d:20:0d:49:62:
         97:fc:d0:9d:d2:f0:dc:3e:a5:ae:d8:57:bc:b7:3a:a2:6d:54:
         0a:0d:c1:91:d1:97:12:aa:4a:c8:72:0b:f4:dc:0b:46:d8:8c:
         45:c9:e3:e6:fa:ec:a0:a7:55:ab:f0:7b:f3:8d:f6:ad:90:cb:
         8d:6f:aa:27:ad:79:b6:73:a5:0e:7a:2a:3b:6f:d2:6d:3e:cc:
         3b:4a:e5:56:74:fa:3e:4b:47:f1:ce:fc:fd:f1:6f:38:71:84:
         1e:29:6b:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJ5J/wp8PRAyM0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTEyYzY2MzYtMGIzNC00ZTQ3LTk1Y2MtMjlhNmI1M2Ez
Mzg4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
MmI2OTIzZGMtYzg1Mi00ZmU4LThjMTEtZTY1OGEzN2FmZWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHovuYM2eOubDTc2LjqpeapbOWt3ugwJZwh3
vOgnGVNPh4s54ZV0z/g6zSV86p0QV3pEAPWQJbFgt8lXbKujc9WuPZoMZNrAxb6y
jfC8WW3t/SLK4/xOkeAPTbcl47SLu/EWQ50ktY2wT0ziFQpcgOlAh3PJP4odOokD
IcgmTUnT0C5VGu9WYkZwXdllgeR32uXanVkdZu4ctsBCuM2sJ4alJDzr87QGlZtN
E88zmZ3CmpBeoV9UJtaX14DhaXMBcYwxAuxJCVwycQKy4rHeZ1W8i+HDobz9nS/z
edOW/nyiuscsqLnZGoRl9HywGTC5pXvpo2QAB0Rpk5IS742PlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFEH9lkAFn2FgAdOMBWmzIRe43IkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJj
NjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2YjUzYTMzODgvMDhkMjQyZDAtM2JkZC0z
NjVmLWIxZmQtNTQyNTg0M2ExMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTEyYzY2MzYtMGIzNC00ZTQ3LTk1
Y2MtMjlhNmI1M2EzMzg4LzExMmM2NjM2LTBiMzQtNGU0Ny05NWNjLTI5YTZiNTNh
MzM4OC5jcmwwHwYDVR0jBBgwFoAU5SZko3dDzL1J1R4WQ4IVj9eHuuwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJjNjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2
YjUzYTMzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocNGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfYXAEHB/vK0C6UInK9jVHfDEIH26teyfA5aGakOj/24NvMhm3OD+6B
ORlc27JICr8EydBwZ8INwZYCIA5WM4EU2Fy4l1I1Sj+du3KJS2rqeS9RUm/F0Kd/
aTS99A6/YksLIMVvMWznhHq+gYBvWdx7ZKgEXfFrONLuw8WK0AUEGONXtGLkEivd
HR4AyCn70VMZltjYMRGYUAetrTh9IA1JYpf80J3S8Nw+pa7YV7y3OqJtVAoNwZHR
lxKqSshyC/TcC0bYjEXJ4+b67KCnVavwe/ON9q2Qy41vqietebZzpQ56Kjtv0m0+
zDtK5VZ0+j5LR/HO/P3xbzhxhB4pa6w=
-----END CERTIFICATE-----
Generated at Wed Jul 9 17:45:58 2025 by rpki-client