Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa
File:                     f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa (raw, json)
Hash identifier:          q3qJ5jHLCjBjpCv405/VBqQYf/CUN1hW4NDDl/s0GRk=
Subject key identifier:   45:40:48:8E:30:A3:71:22:88:56:83:2E:1E:0C:FF:32:96:43:2C:28
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F432858486695C0DF135E126B2BE37F80
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     3695
IP address blocks:        70.36.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:c0:df:13:5e:12:6b:2b:e3:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=c1fde466-2854-49cd-8dc7-91c1a1b019bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5e:b6:1b:96:b0:a0:b3:4e:21:af:b8:01:ce:
                    97:95:4a:1f:34:7c:8e:0d:98:67:84:c2:1c:60:19:
                    80:c8:03:f3:34:7d:35:51:f2:1a:b6:a3:c2:0e:00:
                    4f:10:b5:72:90:e3:17:a7:7b:b2:89:11:48:94:4f:
                    cd:89:cc:2a:39:25:dc:13:77:18:7b:2e:46:a4:3a:
                    12:36:f0:87:a1:db:78:c5:ed:d9:ae:71:60:84:32:
                    f6:1d:b6:36:75:39:71:53:86:22:8b:08:f2:2e:cb:
                    13:cb:01:f5:fe:19:a9:05:00:70:f7:41:07:bf:5f:
                    09:75:c6:2c:96:7b:a6:d5:21:ea:48:c4:9b:87:3c:
                    af:de:33:b1:d9:e6:eb:30:a2:51:0f:10:e4:27:b9:
                    d0:f5:99:25:ff:89:1e:f1:70:2d:e2:93:90:bf:b9:
                    a3:42:bb:40:4f:59:8f:2b:4f:58:12:41:db:41:fc:
                    61:79:0c:ac:9c:62:eb:a4:bf:78:cf:26:54:7e:54:
                    ba:cc:ea:08:81:f0:8b:cb:50:37:9f:84:8d:e2:e3:
                    b7:1c:3a:61:ad:63:9e:52:9a:aa:8d:cc:90:4e:fe:
                    b2:66:69:77:c4:ea:16:09:15:64:13:03:75:79:5a:
                    42:2f:6d:3e:36:30:19:34:a7:0c:a5:67:77:fe:52:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:40:48:8E:30:A3:71:22:88:56:83:2E:1E:0C:FF:32:96:43:2C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c6:dc:a4:be:eb:3b:39:79:5d:3e:3d:d0:29:8c:44:54:24:
         d6:b0:46:6c:13:7b:0d:02:6d:ff:a0:4d:a3:37:ad:3a:02:b7:
         3b:fc:ee:fe:ec:4a:c0:e2:7a:76:56:cb:04:c0:df:d8:c7:10:
         29:a7:e9:e6:12:b1:e8:e2:21:bf:ec:7d:57:37:a5:76:37:20:
         5a:e6:92:20:a4:bf:b0:78:44:95:78:56:87:d6:f2:34:5e:11:
         31:8a:8a:b4:f3:c7:45:21:5e:52:af:6e:56:3d:86:b1:f1:c2:
         ff:77:f1:dc:bc:5e:58:c8:2e:9b:77:9e:34:8f:1a:43:18:59:
         f4:23:e8:2c:eb:d4:a2:15:e1:f1:e4:4b:1a:5a:b5:26:fa:a2:
         8b:91:c3:32:a4:5f:1f:11:2c:8a:d2:89:c6:93:ea:09:32:cb:
         8c:5d:e0:bc:0e:90:97:60:1b:46:bf:1e:27:62:19:de:b3:68:
         c5:6b:62:c6:ae:13:f6:4b:95:2f:a5:01:b3:c5:00:39:00:04:
         98:0e:cc:38:b8:79:bf:b6:26:cb:9c:be:6e:5a:6a:8e:9d:fa:
         57:ad:17:51:a4:2c:c8:d6:42:6c:f2:60:f4:b8:c9:12:35:d7:
         06:fd:16:bf:42:fa:ef:a6:98:e1:00:3f:ab:a8:4f:56:fb:a8:
         32:f6:ef:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlcDfE14Sayvjf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi
NTIwMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
YzFmZGU0NjYtMjg1NC00OWNkLThkYzctOTFjMWExYjAxOWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF62G5awoLNOIa+4Ac6XlUofNHyODZhnhMIc
YBmAyAPzNH01UfIatqPCDgBPELVykOMXp3uyiRFIlE/NicwqOSXcE3cYey5GpDoS
NvCHodt4xe3ZrnFghDL2HbY2dTlxU4YiiwjyLssTywH1/hmpBQBw90EHv18JdcYs
lnum1SHqSMSbhzyv3jOx2ebrMKJRDxDkJ7nQ9Zkl/4ke8XAt4pOQv7mjQrtAT1mP
K09YEkHbQfxheQysnGLrpL94zyZUflS6zOoIgfCLy1A3n4SN4uO3HDphrWOeUpqq
jcyQTv6yZml3xOoWCRVkEwN1eVpCL20+NjAZNKcMpWd3/lL3cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEVASI4wo3EiiFaDLh4M/zKWQywoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk
OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvZjIyY2YzMDYtOWJiMi0z
ZjBkLWIwNDctNDI5NWE3YTRmMzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0
MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm
YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw
NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPG3KS+6zs5eV0+PdApjERUJNawRmwTew0Cbf+gTaM3rToCtzv87v7s
SsDienZWywTA39jHECmn6eYSsejiIb/sfVc3pXY3IFrmkiCkv7B4RJV4VofW8jRe
ETGKirTzx0UhXlKvblY9hrHxwv938dy8XljILpt3njSPGkMYWfQj6Czr1KIV4fHk
SxpatSb6oouRwzKkXx8RLIrSicaT6gkyy4xd4LwOkJdgG0a/HidiGd6zaMVrYsau
E/ZLlS+lAbPFADkABJgOzDi4eb+2Jsucvm5aao6d+letF1GkLMjWQmzyYPS4yRI1
1wb9Fr9C+u+mmOEAP6uoT1b7qDL276Y=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:10 2025 by rpki-client