Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa
File:                     2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa (raw, json)
Hash identifier:          ddQDlYfA/3gXXX0iT4VGTiz4cQ4pVbEHOHxqtX/QOaQ=
Subject key identifier:   29:A0:2A:39:BD:97:92:22:BB:26:F3:FA:61:DB:F8:55:65:3A:69:2A
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F432858486695C0F7FBC8A9F71D7A3880
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     3695
IP address blocks:        70.36.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:c0:f7:fb:c8:a9:f7:1d:7a:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=feb72738-bb82-46bc-ad83-a423defef7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:31:3f:a8:44:cd:c9:d7:db:e5:e4:53:27:
                    38:ab:b7:90:87:ab:2d:9c:c3:12:f0:dc:53:a2:03:
                    f5:6e:73:85:7a:9a:3a:b1:fc:8b:68:bd:67:b9:e5:
                    3e:bc:86:73:94:4e:47:03:20:68:4d:b1:a2:48:59:
                    72:73:94:2f:27:42:e3:e4:13:df:b2:d9:b3:5c:c4:
                    e6:1e:9f:7b:ef:e8:62:dc:b5:11:a6:a1:4d:4f:e4:
                    bc:70:46:08:94:13:41:f2:9f:e5:b2:a2:0c:51:ef:
                    6f:b9:49:d1:71:1c:22:84:5f:95:61:ff:cb:a2:29:
                    06:29:60:d4:f8:4b:b9:93:44:09:fc:4a:c1:5e:da:
                    44:18:14:d2:f7:9b:0a:67:05:10:3b:53:3d:44:ff:
                    e2:d4:1f:18:41:a1:8c:4d:3b:00:5a:fa:c4:7c:31:
                    59:17:2e:16:3b:00:91:f5:b7:b0:0b:c3:4f:50:43:
                    54:6e:02:f8:50:59:b5:4b:36:0b:a8:a4:56:93:a4:
                    0e:4c:65:55:0c:09:b3:8c:68:59:48:ed:f5:9f:00:
                    42:c2:8b:2e:95:df:86:47:6c:b2:5d:07:c5:1e:64:
                    82:85:e0:85:e5:17:3e:64:0d:d0:3b:d5:72:c3:e9:
                    2b:0b:f0:07:32:ba:2e:95:51:b8:5b:bf:24:d9:2d:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A0:2A:39:BD:97:92:22:BB:26:F3:FA:61:DB:F8:55:65:3A:69:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:28:9a:f2:65:d6:62:c9:8d:e3:cb:fa:74:45:45:49:8d:44:
         58:62:f9:a9:ea:57:42:c2:3b:85:ec:87:05:1f:30:80:a8:31:
         11:5a:6f:2f:6e:15:86:1e:85:d3:4c:fc:a1:c9:59:3f:19:96:
         61:52:bc:04:e6:da:9d:ad:7c:26:a9:79:73:c0:20:3a:63:26:
         95:2d:c8:ca:5c:30:64:2b:92:9a:18:28:ba:4d:a8:4a:72:81:
         2f:b2:07:2f:81:af:af:7a:96:0b:5a:59:b0:e9:2d:5f:1f:66:
         76:e3:57:03:d9:c5:bd:81:bb:71:a7:44:85:6b:c4:48:7d:b7:
         31:9a:56:ca:3f:42:d8:fa:16:70:74:f9:45:c8:fc:9a:ce:2b:
         87:f2:6d:4a:e6:17:87:97:ec:4e:7a:a7:1c:f6:c8:23:e5:fa:
         ef:ab:46:8a:30:4b:5c:3b:23:1e:65:c3:14:92:f2:bd:51:b3:
         82:38:e8:fa:ce:00:32:d4:9d:a2:54:4c:a9:11:ee:2b:fb:bd:
         89:36:b5:a2:51:f8:8a:8f:91:74:e6:e5:0e:cc:3a:3b:7d:a4:
         e9:33:37:6f:5b:33:f6:8e:41:8c:4e:c1:3c:fe:79:57:17:17:
         8f:a9:ed:0a:e4:7d:91:ef:01:d1:7e:b8:04:60:7f:98:91:35:
         70:2f:bc:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlcD3+8ip9x16OIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi
NTIwMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZmViNzI3MzgtYmI4Mi00NmJjLWFkODMtYTQyM2RlZmVmN2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeMxP6hEzcnX2+XkUyc4q7eQh6stnMMS8NxT
ogP1bnOFepo6sfyLaL1nueU+vIZzlE5HAyBoTbGiSFlyc5QvJ0Lj5BPfstmzXMTm
Hp977+hi3LURpqFNT+S8cEYIlBNB8p/lsqIMUe9vuUnRcRwihF+VYf/LoikGKWDU
+Eu5k0QJ/ErBXtpEGBTS95sKZwUQO1M9RP/i1B8YQaGMTTsAWvrEfDFZFy4WOwCR
9bewC8NPUENUbgL4UFm1SzYLqKRWk6QOTGVVDAmzjGhZSO31nwBCwosuld+GR2yy
XQfFHmSCheCF5Rc+ZA3QO9Vyw+krC/AHMroulVG4W78k2S1NnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmgKjm9l5Iiuybz+mHb+FVlOmkqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk
OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvMmVjMDJlMGEtMjJhNy0z
MzkxLTg2YzUtODRiZTNhMjU2MGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0
MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm
YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw
NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJkomvJl1mLJjePL+nRFRUmNRFhi+anqV0LCO4XshwUfMICoMRFaby9u
FYYehdNM/KHJWT8ZlmFSvATm2p2tfCapeXPAIDpjJpUtyMpcMGQrkpoYKLpNqEpy
gS+yBy+Br696lgtaWbDpLV8fZnbjVwPZxb2Bu3GnRIVrxEh9tzGaVso/Qtj6FnB0
+UXI/JrOK4fybUrmF4eX7E56pxz2yCPl+u+rRoowS1w7Ix5lwxSS8r1Rs4I46PrO
ADLUnaJUTKkR7iv7vYk2taJR+IqPkXTm5Q7MOjt9pOkzN29bM/aOQYxOwTz+eVcX
F4+p7QrkfZHvAdF+uARgf5iRNXAvvMw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:27 2025 by rpki-client