Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b3055c3c-6696-3a93-b3c1-612cbdb442b5.roa
File:                     b3055c3c-6696-3a93-b3c1-612cbdb442b5.roa (raw, json)
Hash identifier:          rmqYeetogXvVDdFKyj+013BWNGblD0qxXOBAaqhoE1o=
Subject key identifier:   6C:45:EF:1E:61:31:74:27:0C:E3:B6:7A:0C:98:0B:9F:2A:1E:34:84
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584B0244EF048FDB03E3123C9680
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b3055c3c-6696-3a93-b3c1-612cbdb442b5.roa
Signing time:             Thu 28 Aug 2025 17:58:13 +0000
ROA not before:           Thu 28 Aug 2025 17:58:13 +0000
ROA not after:            Wed 26 Nov 2025 18:58:13 +0000
asID:                     16504
IP address blocks:        156.70.124.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:02:44:ef:04:8f:db:03:e3:12:3c:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Aug 28 17:58:13 2025 GMT
            Not After : Nov 26 18:58:13 2025 GMT
        Subject: CN=205b9d59-12ba-4cb3-9159-a7504392244b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4e:5b:5f:ed:61:73:02:0f:b2:08:ce:8f:f1:
                    9b:db:42:e7:8a:1d:70:0f:28:12:c4:ed:99:e4:09:
                    f1:5c:f9:67:2c:1b:c9:b2:4b:ed:df:b3:3b:65:6a:
                    32:b4:57:ad:28:ca:85:57:ae:d3:a1:e3:81:57:aa:
                    41:16:25:3b:78:8c:79:c7:4d:8d:46:b3:10:f0:dc:
                    ee:c5:22:1c:28:ce:d9:c8:d4:ac:8b:2e:ff:9f:74:
                    7c:88:97:0f:db:4e:d0:3e:25:0a:29:ce:4e:59:5e:
                    61:4a:c4:ad:3d:d4:2f:a8:95:0e:e7:fc:56:b3:c2:
                    bf:f7:dc:f0:2b:35:37:98:9c:e5:95:9d:a9:2e:60:
                    8c:c1:1b:ae:53:cb:64:4f:54:6a:96:56:d1:43:48:
                    82:d3:62:5a:1c:f2:07:e8:e1:4f:a7:2e:4c:2c:71:
                    9d:57:1f:6b:69:f5:e4:c2:29:e1:f9:06:16:78:47:
                    e4:9d:35:2f:32:c9:84:2f:7d:68:f8:2c:4c:1a:d9:
                    39:18:ce:50:4a:ba:7e:4b:79:31:d8:79:5d:2e:03:
                    05:2a:fc:63:3f:45:77:ca:98:f2:95:ce:64:16:f4:
                    18:51:54:44:6e:df:b8:0f:d0:9a:24:8f:b3:b3:ea:
                    e1:f1:60:0a:4d:3d:1c:a9:06:35:25:c4:fb:12:ef:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:45:EF:1E:61:31:74:27:0C:E3:B6:7A:0C:98:0B:9F:2A:1E:34:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b3055c3c-6696-3a93-b3c1-612cbdb442b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.70.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:13:86:d2:ac:e6:43:db:01:2c:b6:41:47:79:f0:67:85:55:
         99:ec:51:4d:3d:77:a5:b9:00:68:88:07:aa:50:20:97:c6:0c:
         ef:30:8e:46:ff:a5:7c:cb:9b:74:cc:1b:18:37:14:c8:aa:fc:
         3f:c2:e6:4b:08:d0:0b:05:b3:6c:ab:80:cc:b9:b9:65:2c:09:
         e4:60:ff:2d:96:8a:82:7a:05:25:36:a4:ef:63:b2:e6:51:31:
         7f:6f:68:bf:4e:4e:dd:2d:c3:19:cd:cf:98:60:fa:1b:04:40:
         6c:05:60:f2:41:87:f9:79:2e:b4:67:c6:2c:b0:3e:51:67:66:
         2d:42:06:99:0e:4d:26:a3:27:30:f9:23:5d:16:66:d9:65:1f:
         00:42:b1:06:fa:ad:f7:3f:27:0d:c9:0a:ab:71:76:99:b8:af:
         a0:e9:7a:c5:be:8a:89:73:a5:e3:6c:85:56:36:06:45:c1:83:
         65:5b:14:43:4c:6b:ae:b4:18:fc:f8:f9:ed:6a:f3:90:88:4d:
         f4:06:92:f6:29:f5:7c:41:19:5e:3b:41:26:5f:ed:ee:9a:33:
         e9:99:66:f4:4b:1f:b3:77:c0:a0:f5:f0:c9:cd:11:3d:11:0a:
         41:bd:fe:52:4c:5c:83:cf:3d:61:74:b0:6e:8c:31:4a:9e:cb:
         64:94:12:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsCRO8Ej9sD4xI8loAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw
YWVlMB4XDTI1MDgyODE3NTgxM1oXDTI1MTEyNjE4NTgxM1owLzEtMCsGA1UEAxMk
MjA1YjlkNTktMTJiYS00Y2IzLTkxNTktYTc1MDQzOTIyNDRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk5bX+1hcwIPsgjOj/Gb20Lnih1wDygSxO2Z
5AnxXPlnLBvJskvt37M7ZWoytFetKMqFV67ToeOBV6pBFiU7eIx5x02NRrMQ8Nzu
xSIcKM7ZyNSsiy7/n3R8iJcP207QPiUKKc5OWV5hSsStPdQvqJUO5/xWs8K/99zw
KzU3mJzllZ2pLmCMwRuuU8tkT1RqllbRQ0iC02JaHPIH6OFPpy5MLHGdVx9rafXk
winh+QYWeEfknTUvMsmEL31o+CxMGtk5GM5QSrp+S3kx2HldLgMFKvxjP0V3ypjy
lc5kFvQYUVREbt+4D9CaJI+zs+rh8WAKTT0cqQY1JcT7Eu/1zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxF7x5hMXQnDOO2egyYC58qHjSEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl
OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvYjMwNTVjM2MtNjY5Ni0z
YTkzLWIzYzEtNjEyY2JkYjQ0MmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0
M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy
MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2
ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnEZ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALUThtKs5kPbASy2QUd58GeFVZnsUU09d6W5AGiIB6pQIJfGDO8wjkb/
pXzLm3TMGxg3FMiq/D/C5ksI0AsFs2yrgMy5uWUsCeRg/y2WioJ6BSU2pO9jsuZR
MX9vaL9OTt0twxnNz5hg+hsEQGwFYPJBh/l5LrRnxiywPlFnZi1CBpkOTSajJzD5
I10WZtllHwBCsQb6rfc/Jw3JCqtxdpm4r6DpesW+iolzpeNshVY2BkXBg2VbFENM
a660GPz4+e1q85CITfQGkvYp9XxBGV47QSZf7e6aM+mZZvRLH7N3wKD18MnNET0R
CkG9/lJMXIPPPWF0sG6MMUqey2SUEtI=
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:35:25 2025 by rpki-client