Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7badf292-b07f-35cd-bc0c-51d535a17ae4.roa
File:                     7badf292-b07f-35cd-bc0c-51d535a17ae4.roa (raw, json)
Hash identifier:          xNXmZP6FI836dOTjsvOqD1m5eXqu5/YH9Ahm/BXE8Ss=
Subject key identifier:   A5:67:31:92:5D:0E:9D:8A:8C:3E:E2:7F:D1:49:2B:AA:9F:A4:3F:2C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C84BE296D5BC8643A646F300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7badf292-b07f-35cd-bc0c-51d535a17ae4.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        70.32.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:e2:96:d5:bc:86:43:a6:46:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=78e7c1f6-3f9f-4ef9-89e0-7a4019ca8665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:ef:2d:73:13:ad:ea:09:1e:aa:41:72:9a:
                    44:38:3f:34:7e:ae:72:d9:99:55:98:09:49:73:b5:
                    74:8b:d7:cf:06:4c:f1:14:8d:fd:ec:96:6f:76:fa:
                    53:69:9d:99:f0:9d:eb:3f:84:21:e6:a7:db:a9:1e:
                    05:01:5f:ae:b8:55:9c:16:fd:09:78:fb:c4:b8:5c:
                    d9:e8:81:59:39:a7:7d:9f:88:f9:e3:83:b3:22:a1:
                    26:59:5f:1d:6a:25:71:ae:73:ad:50:dc:4a:f1:1c:
                    71:d9:5a:15:4d:11:13:30:92:db:fb:2d:af:0a:0b:
                    a9:26:af:93:d9:b1:f4:c5:b5:1c:24:f9:5f:f2:e7:
                    e3:e0:d0:6f:c5:01:d5:6a:64:c9:f5:cc:3d:c7:24:
                    a8:95:05:58:e2:54:ea:6c:26:f9:8f:04:6a:3b:a1:
                    a3:78:56:44:05:18:fc:fc:09:3f:aa:ff:15:e0:29:
                    c6:7f:49:e7:4c:8d:9f:31:c6:6b:94:c1:9e:05:13:
                    26:e3:c3:3e:6f:f0:e2:e9:d7:91:95:d2:34:f0:e0:
                    68:30:57:c1:ac:8f:bb:b2:ba:35:d6:8e:e9:72:e9:
                    42:30:9d:e5:6e:09:95:3a:a6:60:c4:7d:d4:78:8b:
                    45:ca:51:79:71:35:6c:02:3e:8e:fc:e0:1d:d9:f1:
                    f0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:67:31:92:5D:0E:9D:8A:8C:3E:E2:7F:D1:49:2B:AA:9F:A4:3F:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7badf292-b07f-35cd-bc0c-51d535a17ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9f:4d:e3:3f:0f:17:69:fe:16:6f:2d:41:6f:78:a9:49:c7:
         3f:93:62:bd:bf:f3:4a:4e:a2:58:83:fc:38:c5:33:ea:5b:07:
         d2:0f:54:5f:dd:59:b4:9e:2d:e3:e1:a3:bc:90:b1:fb:8c:68:
         c1:10:4a:fe:7d:59:f3:26:c6:61:77:d3:a8:bd:47:fa:01:99:
         cd:6d:28:3c:2b:a6:5b:f7:38:bc:e5:cb:fc:b0:a4:95:25:7f:
         18:cd:68:77:35:8f:93:02:71:ce:51:99:eb:57:9e:51:d9:37:
         e0:4b:10:c2:37:9a:2f:85:af:d8:cf:5b:fc:0d:14:83:7f:a8:
         d6:57:ff:f7:e0:e1:71:9f:c3:6e:f0:0a:56:e6:88:43:a6:3b:
         d5:16:00:6a:b7:31:c0:b3:bc:9c:f2:e9:26:2c:d4:fb:03:75:
         9a:a4:a7:96:72:c9:f8:12:b8:83:77:81:c0:5d:ed:5c:15:bf:
         43:7e:8a:4a:ff:37:ec:7a:29:35:93:26:5f:cf:90:58:b5:6f:
         fa:b4:17:c3:fe:d9:49:e0:57:ed:14:2e:7b:4e:fd:87:20:fd:
         3d:00:23:68:47:77:a2:9c:20:c5:a5:6a:94:dd:48:8b:1f:77:
         a8:4d:fc:dc:c1:14:93:10:8f:6e:55:10:fa:d1:92:77:d9:57:
         9b:8e:83:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+KW1byGQ6ZG8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
NzhlN2MxZjYtM2Y5Zi00ZWY5LTg5ZTAtN2E0MDE5Y2E4NjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKHvLXMTreoJHqpBcppEOD80fq5y2ZlVmAlJ
c7V0i9fPBkzxFI397JZvdvpTaZ2Z8J3rP4Qh5qfbqR4FAV+uuFWcFv0JePvEuFzZ
6IFZOad9n4j544OzIqEmWV8daiVxrnOtUNxK8Rxx2VoVTRETMJLb+y2vCgupJq+T
2bH0xbUcJPlf8ufj4NBvxQHVamTJ9cw9xySolQVY4lTqbCb5jwRqO6GjeFZEBRj8
/Ak/qv8V4CnGf0nnTI2fMcZrlMGeBRMm48M+b/Di6deRldI08OBoMFfBrI+7sro1
1o7pculCMJ3lbgmVOqZgxH3UeItFylF5cTVsAj6O/OAd2fHwxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKVnMZJdDp2KjD7if9FJK6qfpD8sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2JhZGYyOTItYjA3Zi0z
NWNkLWJjMGMtNTFkNTM1YTE3YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOfTeM/Dxdp/hZvLUFveKlJxz+TYr2/80pOoliD/DjFM+pbB9IPVF/d
WbSeLePho7yQsfuMaMEQSv59WfMmxmF306i9R/oBmc1tKDwrplv3OLzly/ywpJUl
fxjNaHc1j5MCcc5RmetXnlHZN+BLEMI3mi+Fr9jPW/wNFIN/qNZX//fg4XGfw27w
ClbmiEOmO9UWAGq3McCzvJzy6SYs1PsDdZqkp5ZyyfgSuIN3gcBd7VwVv0N+ikr/
N+x6KTWTJl/PkFi1b/q0F8P+2UngV+0ULntO/Ycg/T0AI2hHd6KcIMWlapTdSIsf
d6hN/NzBFJMQj25VEPrRknfZV5uOg5E=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:31:41 2025 by rpki-client