Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa
File:                     d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa (raw, json)
Hash identifier:          BoOsGvruIqYThJj6SE3TpD6+YJV/OPy8FZ69JI3BGdc=
Subject key identifier:   3C:AC:71:25:67:E7:E8:D5:8E:0F:8B:10:CC:AC:87:26:5B:43:D1:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858490B4C289733DA1B55C3D19E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     701
IP address blocks:        70.105.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:28:97:33:da:1b:55:c3:d1:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=01ec90fa-17de-4569-9957-5a88546e6b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:ea:6e:04:2e:9a:a6:61:25:be:86:4a:06:
                    0e:cd:a3:e9:b5:90:bb:78:7e:9d:35:d4:d0:b0:54:
                    79:8b:4f:da:c2:4e:ea:73:76:ae:d0:2d:5d:36:1d:
                    bf:fa:8a:f9:f8:67:01:ae:cb:43:99:e3:52:3b:c5:
                    bf:2d:73:1c:e1:f5:73:1f:7d:bd:91:a1:d1:78:74:
                    de:9e:1e:78:b4:ad:78:1d:d5:5e:b7:7b:1e:01:05:
                    43:46:25:51:6e:75:e1:b5:70:53:e6:7b:5d:4e:ea:
                    1e:51:50:b1:8d:81:0d:01:9c:d0:93:af:d2:02:d8:
                    78:99:3b:35:e3:e5:5c:d3:32:42:48:16:95:f8:f1:
                    4d:54:d0:a3:32:9a:ff:3f:17:be:95:86:88:0c:7a:
                    bd:bd:08:7b:2c:5e:d9:35:34:dc:6a:d7:3f:a0:85:
                    75:9b:00:24:bf:a0:ce:4a:2d:2d:94:d4:36:e0:c5:
                    79:cf:ac:88:3f:eb:a7:49:f4:a5:cc:04:d8:f2:57:
                    09:53:e2:e4:dd:97:04:33:38:54:18:fa:2b:b0:7b:
                    f8:73:cf:b2:74:9a:88:16:9d:d9:c0:cf:50:6d:ce:
                    2d:63:5a:e4:0e:18:e9:c2:59:6e:81:5f:e0:d4:f5:
                    f0:1d:85:45:ed:39:0e:18:58:21:cc:3d:53:07:5d:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AC:71:25:67:E7:E8:D5:8E:0F:8B:10:CC:AC:87:26:5B:43:D1:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.105.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:ca:1f:d5:bf:a4:18:e1:50:ee:21:47:1f:b2:9a:44:88:5d:
         c2:34:1d:30:34:c4:28:71:0e:90:30:55:18:eb:5e:e8:47:58:
         68:ec:99:76:ee:c7:aa:7d:91:6d:4e:d7:00:73:3f:6c:b9:81:
         73:36:9e:3a:37:a0:13:14:0f:db:33:4b:07:40:0b:a2:cb:6b:
         d6:bf:59:0f:38:ca:77:a1:49:04:ab:dc:57:7c:c7:99:03:1b:
         09:a2:46:f4:72:47:9c:2f:ef:a3:fc:76:14:d4:76:89:2c:00:
         a5:47:f1:a0:d1:49:67:72:c4:fa:41:d9:9f:2d:ff:f8:39:51:
         75:83:92:a4:ce:92:df:38:3b:9b:ba:c2:ce:5a:f5:ed:04:43:
         b9:b2:0f:26:f9:06:f1:e2:3e:a0:c7:c8:fe:ce:02:ff:c3:0a:
         f1:0d:dc:5b:02:5c:5e:dc:3d:be:97:14:18:51:4f:24:e2:5b:
         b3:9b:52:6a:72:f5:dc:ac:63:16:37:19:cc:79:a2:28:85:1e:
         41:6b:9e:42:67:21:c5:0d:90:75:a4:f0:44:e4:10:7f:33:1f:
         6c:76:f6:32:0b:39:b2:39:40:8a:17:63:ff:04:d6:5d:81:61:
         0e:5b:fd:dd:ea:fa:ad:13:63:63:22:38:f1:a2:95:a2:d4:34:
         d9:3b:96:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCiXM9obVcPRnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
MDFlYzkwZmEtMTdkZS00NTY5LTk5NTctNWE4ODU0NmU2YjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXjqbgQumqZhJb6GSgYOzaPptZC7eH6dNdTQ
sFR5i0/awk7qc3au0C1dNh2/+or5+GcBrstDmeNSO8W/LXMc4fVzH329kaHReHTe
nh54tK14HdVet3seAQVDRiVRbnXhtXBT5ntdTuoeUVCxjYENAZzQk6/SAth4mTs1
4+Vc0zJCSBaV+PFNVNCjMpr/Pxe+lYaIDHq9vQh7LF7ZNTTcatc/oIV1mwAkv6DO
Si0tlNQ24MV5z6yIP+unSfSlzATY8lcJU+Lk3ZcEMzhUGPorsHv4c8+ydJqIFp3Z
wM9Qbc4tY1rkDhjpwllugV/g1PXwHYVF7TkOGFghzD1TB10H0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDyscSVn5+jVjg+LEMyshyZbQ9GCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDYyZGRmZGEtN2Q2OS0z
ZGFmLWJhZTEtYjgxNzhkYTM3ZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARmmFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALPKH9W/pBjhUO4hRx+ymkSIXcI0HTA0xChxDpAwVRjrXuhHWGjsmXbu
x6p9kW1O1wBzP2y5gXM2njo3oBMUD9szSwdAC6LLa9a/WQ84ynehSQSr3Fd8x5kD
GwmiRvRyR5wv76P8dhTUdoksAKVH8aDRSWdyxPpB2Z8t//g5UXWDkqTOkt84O5u6
ws5a9e0EQ7myDyb5BvHiPqDHyP7OAv/DCvEN3FsCXF7cPb6XFBhRTyTiW7ObUmpy
9dysYxY3Gcx5oiiFHkFrnkJnIcUNkHWk8ETkEH8zH2x29jILObI5QIoXY/8E1l2B
YQ5b/d3q+q0TY2MiOPGilaLUNNk7los=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:20 2025 by rpki-client