Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/026fb763-a35e-3e4a-adb2-2204b9fe62de.roa
File:                     026fb763-a35e-3e4a-adb2-2204b9fe62de.roa (raw, json)
Hash identifier:          BsKPwkLE14J07bmKAbLzfrrWJwzLKdPdhd9N+EphZ6Y=
Subject key identifier:   FA:CA:14:6C:31:19:B9:CF:F9:19:21:32:F2:AA:66:A4:10:63:25:18
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F432858486695C117FB7EC0BEDA0AF400
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/026fb763-a35e-3e4a-adb2-2204b9fe62de.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     3695
IP address blocks:        70.36.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:c1:17:fb:7e:c0:be:da:0a:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=e0e845de-aacc-4a7d-a8ad-030997814007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:d3:37:44:0c:1c:5e:17:48:19:cc:fb:a8:
                    ec:da:eb:e3:a5:21:75:55:88:0e:44:a5:66:67:91:
                    be:50:f4:5b:26:e1:10:1a:ca:c9:e6:80:03:a2:11:
                    33:81:e2:c2:2a:b3:47:fa:80:fd:c8:f2:ca:1d:a8:
                    4a:dc:02:03:58:f9:2b:0a:7e:87:c7:32:73:ee:eb:
                    6c:cb:68:e7:d7:7e:13:4e:d8:d8:8e:bb:73:72:51:
                    38:77:bc:50:80:8c:ea:21:b9:fc:c2:c2:6c:e2:0c:
                    bb:02:40:8a:49:b2:76:8e:a2:37:82:e4:47:d6:80:
                    a4:19:83:1a:98:d2:72:96:3e:41:47:f3:19:dc:48:
                    44:81:53:b9:18:1a:2e:bb:df:7e:82:a7:88:3b:ed:
                    06:cd:1e:b5:cd:2e:fc:44:f7:e6:d6:62:e9:3b:98:
                    4f:67:fe:81:51:76:9d:e9:5d:24:d3:62:66:e6:3e:
                    bc:5e:8f:f1:99:36:eb:9e:94:cc:03:39:91:16:bc:
                    d5:42:12:73:57:55:da:52:5f:3e:57:1c:a1:93:2e:
                    29:37:40:84:af:d5:e3:9a:43:0b:93:5f:36:d0:bb:
                    9c:42:6d:e4:00:52:94:42:c4:50:2d:3c:27:ec:28:
                    c5:ce:7c:b0:4c:da:c6:ce:df:82:8a:24:cb:6d:ad:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CA:14:6C:31:19:B9:CF:F9:19:21:32:F2:AA:66:A4:10:63:25:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/026fb763-a35e-3e4a-adb2-2204b9fe62de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:00:fe:2d:f1:d6:a7:d9:3d:17:1b:15:a2:ed:a5:44:b3:
         12:d4:14:d9:c5:6d:6c:b6:c2:a2:d1:a8:c7:af:37:4c:c1:a2:
         65:db:1c:d8:85:65:f6:eb:4a:3e:ec:91:ed:57:30:95:1b:00:
         7f:fb:15:93:8c:02:07:f8:97:07:96:58:ad:d2:9f:44:7b:74:
         38:10:0e:4c:ef:1b:a5:22:9f:9e:b8:51:22:6b:c7:9b:af:ec:
         af:d3:87:52:76:6e:fd:a7:f7:cd:70:1d:29:8d:67:89:b9:c1:
         87:67:86:9f:c6:43:a6:7a:0e:b0:c5:bd:f3:85:da:d2:48:f3:
         d3:b4:c2:87:e8:40:6a:f2:15:29:21:06:72:30:b5:de:2f:2a:
         c7:0d:cc:e9:90:f4:53:57:09:ed:dc:40:6c:c6:93:72:9f:8a:
         7f:87:cd:de:94:22:10:54:89:83:cf:6a:f4:5e:01:94:c6:64:
         17:9e:a9:f8:3a:4e:cb:a4:2a:d4:cb:93:77:ac:b9:17:e6:b0:
         97:76:4b:03:e4:0c:45:32:52:69:50:80:bc:a9:f5:67:34:3a:
         8d:9e:61:ad:59:b3:20:4b:b1:68:d4:25:b3:17:19:59:59:7e:
         48:05:6c:0e:a9:91:6a:2d:ea:68:f4:37:fa:ee:0d:92:10:a9:
         68:9e:10:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlcEX+37AvtoK9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi
NTIwMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZTBlODQ1ZGUtYWFjYy00YTdkLWE4YWQtMDMwOTk3ODE0MDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q3TN0QMHF4XSBnM+6js2uvjpSF1VYgORKVm
Z5G+UPRbJuEQGsrJ5oADohEzgeLCKrNH+oD9yPLKHahK3AIDWPkrCn6HxzJz7uts
y2jn134TTtjYjrtzclE4d7xQgIzqIbn8wsJs4gy7AkCKSbJ2jqI3guRH1oCkGYMa
mNJylj5BR/MZ3EhEgVO5GBouu99+gqeIO+0GzR61zS78RPfm1mLpO5hPZ/6BUXad
6V0k02Jm5j68Xo/xmTbrnpTMAzmRFrzVQhJzV1XaUl8+Vxyhky4pN0CEr9XjmkML
k1820LucQm3kAFKUQsRQLTwn7CjFznywTNrGzt+CiiTLba1qMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPrKFGwxGbnP+RkhMvKqZqQQYyUYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk
OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvMDI2ZmI3NjMtYTM1ZS0z
ZTRhLWFkYjItMjIwNGI5ZmU2MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0
MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm
YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw
NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWkAP4t8dan2T0XGxWi7aVEsxLUFNnFbWy2wqLRqMevN0zBomXbHNiF
ZfbrSj7ske1XMJUbAH/7FZOMAgf4lweWWK3Sn0R7dDgQDkzvG6Uin564USJrx5uv
7K/Th1J2bv2n981wHSmNZ4m5wYdnhp/GQ6Z6DrDFvfOF2tJI89O0wofoQGryFSkh
BnIwtd4vKscNzOmQ9FNXCe3cQGzGk3Kfin+Hzd6UIhBUiYPPavReAZTGZBeeqfg6
TsukKtTLk3esuRfmsJd2SwPkDEUyUmlQgLyp9Wc0Oo2eYa1ZsyBLsWjUJbMXGVlZ
fkgFbA6pkWot6mj0N/ruDZIQqWieEBU=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:30:07 2025 by rpki-client