Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/74fee4a1-6d1d-3384-befc-8936e91b742f.roa
File:                     74fee4a1-6d1d-3384-befc-8936e91b742f.roa (raw, json)
Hash identifier:          Nbo5MuoyMO16UBtpUZDVeJGwUNqPZwH1nmxonJ7NAKk=
Subject key identifier:   A4:03:E1:13:15:32:72:9D:68:16:34:2B:68:91:DF:50:D9:E1:AB:61
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848E9CBF0D8DF1EF7CC7C051200
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/74fee4a1-6d1d-3384-befc-8936e91b742f.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     25899
IP address blocks:        208.70.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:f0:d8:df:1e:f7:cc:7c:05:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=523ddd74-352a-4f16-a528-447aafdf09bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c1:27:04:81:bd:10:be:48:d6:b0:f3:2c:ee:
                    3e:a5:35:80:5d:b0:14:56:11:51:db:b5:09:77:f8:
                    f6:48:44:f5:c2:29:d6:da:4b:d5:29:9b:36:4a:13:
                    03:31:49:59:25:29:1f:5b:7a:26:4b:6e:9d:fe:cf:
                    dc:a1:4b:33:d9:da:74:ac:e7:99:83:4a:91:d8:79:
                    52:97:2e:3e:90:c9:9a:0e:5e:91:c3:53:90:40:39:
                    73:0c:fa:dc:81:c0:ae:b2:d6:d2:63:7a:8d:d8:80:
                    bb:9c:f2:a8:d7:78:a2:16:b0:b1:65:1d:82:c4:92:
                    e7:f2:09:ab:b1:84:ff:70:87:e6:cb:2e:1d:25:bb:
                    3a:96:84:e1:4d:01:10:76:d4:84:b3:f6:d5:d3:c0:
                    f6:bc:fe:ac:7b:ad:27:75:e9:20:29:4e:01:ea:fb:
                    a9:20:47:ca:6f:d4:e6:7b:46:c3:fb:3b:a6:00:59:
                    70:d9:e7:ee:05:1e:c2:86:a2:68:da:47:ea:05:15:
                    74:35:57:a6:4b:7a:69:77:2d:d6:7d:d7:1c:73:a4:
                    d0:2a:3e:c6:a8:73:7e:5e:6c:86:99:82:86:fd:3e:
                    d6:cb:57:8a:b1:0b:ca:ac:4b:60:b6:d3:3f:6e:61:
                    34:78:e7:6c:d8:37:f4:e9:a9:cc:15:57:fe:50:ec:
                    b6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:03:E1:13:15:32:72:9D:68:16:34:2B:68:91:DF:50:D9:E1:AB:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/74fee4a1-6d1d-3384-befc-8936e91b742f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ae:cc:be:d1:58:cb:28:13:ef:1d:c3:78:70:e5:81:ac:2f:
         9c:1e:1c:df:5c:cc:00:e6:70:f6:dd:6b:a5:4e:2f:49:be:ca:
         4c:0b:1a:ff:2e:05:11:db:44:66:5f:af:06:41:ca:89:83:6f:
         4a:ee:8a:5c:01:f2:06:08:9e:0c:2e:ef:18:4a:56:6f:64:91:
         46:8a:63:e2:36:70:76:f5:75:67:ec:1c:e8:8d:ea:d9:60:11:
         7f:e1:54:cc:d8:87:74:7a:b5:f5:2c:c9:92:2a:e1:df:8a:52:
         3d:6c:39:20:45:92:e8:72:54:11:e3:15:c4:6e:65:52:11:a6:
         81:59:a8:03:0b:a8:0e:ae:fb:cc:99:4e:2a:b8:af:76:60:eb:
         f1:f3:c6:99:07:73:cc:89:fe:07:e4:10:7a:55:5e:5a:3e:1d:
         0b:b8:31:8b:54:f7:1d:f9:bc:df:67:9d:c5:87:49:41:bf:2b:
         60:1b:5e:86:86:b6:9e:1f:3c:54:27:37:9c:14:9a:45:8a:76:
         07:42:9b:14:0a:18:2f:9e:1f:5b:07:ac:e5:72:b0:1c:59:18:
         63:e7:14:57:6e:a9:d6:cc:96:39:4d:4f:52:e7:3e:36:1f:0c:
         ce:96:62:03:95:21:59:ea:c6:71:9e:cd:15:3a:a7:52:fb:1b:
         73:2d:c6:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy/DY3x73zHwFEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
NTIzZGRkNzQtMzUyYS00ZjE2LWE1MjgtNDQ3YWFmZGYwOWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8EnBIG9EL5I1rDzLO4+pTWAXbAUVhFR27UJ
d/j2SET1winW2kvVKZs2ShMDMUlZJSkfW3omS26d/s/coUsz2dp0rOeZg0qR2HlS
ly4+kMmaDl6Rw1OQQDlzDPrcgcCustbSY3qN2IC7nPKo13iiFrCxZR2CxJLn8gmr
sYT/cIfmyy4dJbs6loThTQEQdtSEs/bV08D2vP6se60ndekgKU4B6vupIEfKb9Tm
e0bD+zumAFlw2efuBR7ChqJo2kfqBRV0NVemS3ppdy3Wfdccc6TQKj7GqHN+XmyG
mYKG/T7Wy1eKsQvKrEtgttM/bmE0eOds2Df06anMFVf+UOy2zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKQD4RMVMnKdaBY0K2iR31DZ4athMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNzRmZWU0YTEtNmQxZC0z
Mzg0LWJlZmMtODkzNmU5MWI3NDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EapMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSuzL7RWMsoE+8dw3hw5YGsL5weHN9czADmcPbda6VOL0m+ykwLGv8u
BRHbRGZfrwZByomDb0ruilwB8gYIngwu7xhKVm9kkUaKY+I2cHb1dWfsHOiN6tlg
EX/hVMzYh3R6tfUsyZIq4d+KUj1sOSBFkuhyVBHjFcRuZVIRpoFZqAMLqA6u+8yZ
Tiq4r3Zg6/HzxpkHc8yJ/gfkEHpVXlo+HQu4MYtU9x35vN9nncWHSUG/K2AbXoaG
tp4fPFQnN5wUmkWKdgdCmxQKGC+eH1sHrOVysBxZGGPnFFduqdbMljlNT1LnPjYf
DM6WYgOVIVnqxnGezRU6p1L7G3Mtxsk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:17:48 2025 by rpki-client