Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/70f7c180-9c4d-371e-a4a4-d0a8d7b4d6df.roa
File:                     70f7c180-9c4d-371e-a4a4-d0a8d7b4d6df.roa (raw, json)
Hash identifier:          rB5yXlS9Kr+lZ7VSUhat3ek7P9olS71ojK+/i1qM+7s=
Subject key identifier:   AA:4E:36:B8:EA:BC:1C:2D:A6:7B:FB:45:66:80:10:12:51:53:34:D9
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F432858495EEEEE6D17B92A1925AE0500
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/70f7c180-9c4d-371e-a4a4-d0a8d7b4d6df.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     10506
IP address blocks:        168.99.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:ee:6d:17:b9:2a:19:25:ae:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=048443de-348d-4de3-9a10-670cc96de39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:c4:17:a6:c4:2a:c8:2a:d2:9e:a8:ba:18:
                    cb:24:43:ff:eb:e2:bb:d2:40:39:8a:b2:ef:bf:2a:
                    22:db:90:30:ac:59:43:dd:8d:dc:68:0a:d5:3a:53:
                    29:ec:34:ba:80:0a:b9:cb:19:37:69:c7:8d:cc:9f:
                    1a:e9:0d:50:f2:43:dc:aa:01:22:28:21:4e:06:d1:
                    96:2b:47:f6:03:55:d3:0b:91:9c:93:41:46:26:55:
                    73:00:58:ad:5f:06:12:41:b1:23:13:bd:81:72:31:
                    ca:9e:96:4e:e2:ca:79:7e:d6:e1:e3:2a:be:b3:c6:
                    c0:a5:0f:27:46:ea:d0:29:f5:9c:4b:0d:6d:3a:79:
                    8b:a6:0b:a2:2e:58:8f:32:8d:83:4f:62:1e:67:df:
                    d0:6e:65:f2:26:08:a5:a4:31:12:78:ad:7b:fd:2e:
                    8c:c4:ac:08:9d:a0:e8:45:a5:a4:e9:fd:f5:47:4c:
                    94:e6:ce:ce:16:8b:12:e1:8e:a5:cb:94:9f:97:52:
                    9a:38:e3:56:33:fa:dd:f2:c6:0b:95:e8:e6:75:36:
                    f7:96:fd:8d:b1:b1:36:7f:b3:c3:4c:63:68:4f:66:
                    d3:e7:15:bb:c2:4c:aa:20:31:2f:a8:eb:47:dc:ec:
                    a4:18:78:32:39:94:2b:8f:0e:12:77:8f:d7:79:95:
                    f0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4E:36:B8:EA:BC:1C:2D:A6:7B:FB:45:66:80:10:12:51:53:34:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/70f7c180-9c4d-371e-a4a4-d0a8d7b4d6df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.99.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f6:bc:29:74:21:81:bd:1e:de:13:f7:7f:18:49:15:46:4c:
         8b:cb:08:8c:7b:f4:06:c3:fe:f0:47:af:ad:96:65:05:cd:1c:
         97:b4:38:59:e4:33:bf:50:5e:e0:77:ca:1f:84:01:fc:a8:1f:
         27:07:1f:84:b7:7d:34:f1:7d:59:9b:80:3a:75:44:6e:76:24:
         1d:31:55:24:51:b5:f3:fd:13:b7:9d:7f:49:6b:60:01:0b:39:
         58:e6:85:94:14:b5:87:87:82:09:96:27:5b:a0:d3:f3:01:af:
         31:ff:e2:a9:9e:06:cf:f2:e2:d0:43:c2:63:64:eb:de:f3:f8:
         64:53:a3:62:8c:7e:ce:49:05:be:22:3f:c3:90:91:6c:9a:a1:
         ec:4e:a3:ae:1b:b7:ca:43:e7:86:95:8b:2e:c3:f9:c8:84:fd:
         1b:73:00:64:a7:ea:4b:e4:03:35:80:67:d2:3f:e4:53:0d:0f:
         cc:f6:4b:3e:31:ac:06:7e:ba:c5:6f:48:9d:80:36:57:83:8a:
         3a:8a:b3:1b:99:2b:4d:ba:37:42:5a:6c:7e:ca:3c:0e:b1:1d:
         ca:d4:57:56:2e:f1:ba:47:38:e4:ed:7f:c3:7e:de:e2:ac:12:
         d4:37:ff:d1:44:bb:4c:7a:a3:fd:e1:b2:5f:e2:f5:02:cf:ac:
         47:ad:02:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7u5tF7kqGSWuBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk
ODE2MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk
MDQ4NDQzZGUtMzQ4ZC00ZGUzLTlhMTAtNjcwY2M5NmRlMzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwzEF6bEKsgq0p6ouhjLJEP/6+K70kA5irLv
vyoi25AwrFlD3Y3caArVOlMp7DS6gAq5yxk3aceNzJ8a6Q1Q8kPcqgEiKCFOBtGW
K0f2A1XTC5Gck0FGJlVzAFitXwYSQbEjE72BcjHKnpZO4sp5ftbh4yq+s8bApQ8n
RurQKfWcSw1tOnmLpguiLliPMo2DT2IeZ9/QbmXyJgilpDESeK17/S6MxKwInaDo
RaWk6f31R0yU5s7OFosS4Y6ly5Sfl1KaOONWM/rd8sYLlejmdTb3lv2NsbE2f7PD
TGNoT2bT5xW7wkyqIDEvqOtH3OykGHgyOZQrjw4Sd4/XeZXwgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKpONrjqvBwtpnv7RWaAEBJRUzTZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5
OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvNzBmN2MxODAtOWM0ZC0z
NzFlLWE0YTQtZDBhOGQ3YjRkNmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj
YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh
ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx
NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGM4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJP2vCl0IYG9Ht4T938YSRVGTIvLCIx79AbD/vBHr62WZQXNHJe0OFnk
M79QXuB3yh+EAfyoHycHH4S3fTTxfVmbgDp1RG52JB0xVSRRtfP9E7edf0lrYAEL
OVjmhZQUtYeHggmWJ1ug0/MBrzH/4qmeBs/y4tBDwmNk697z+GRTo2KMfs5JBb4i
P8OQkWyaoexOo64bt8pD54aViy7D+ciE/RtzAGSn6kvkAzWAZ9I/5FMND8z2Sz4x
rAZ+usVvSJ2ANleDijqKsxuZK026N0JabH7KPA6xHcrUV1Yu8bpHOOTtf8N+3uKs
EtQ3/9FEu0x6o/3hsl/i9QLPrEetAmc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:38:13 2025 by rpki-client