Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3446dd3b-1de4-337b-8cc1-f9b1b313b5d1.roa
File:                     3446dd3b-1de4-337b-8cc1-f9b1b313b5d1.roa (raw, json)
Hash identifier:          UVBoqm3hnwSVBeD38r6szarQ+V54ArmYPUhuK7WrujE=
Subject key identifier:   B2:8A:94:85:61:6F:8D:8A:0A:55:95:F0:43:2C:0E:8F:C0:AD:5B:43
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE6615BAC6B1CE32401DBF420
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3446dd3b-1de4-337b-8cc1-f9b1b313b5d1.roa
Signing time:             Mon 18 Aug 2025 18:12:51 +0000
ROA not before:           Mon 18 Aug 2025 18:12:51 +0000
ROA not after:            Sun 16 Nov 2025 19:12:51 +0000
asID:                     31898
IP address blocks:        134.70.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:61:5b:ac:6b:1c:e3:24:01:db:f4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 18:12:51 2025 GMT
            Not After : Nov 16 19:12:51 2025 GMT
        Subject: CN=66362107-a8ec-4430-976b-0aca09a023d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2d:17:c2:fe:40:b4:92:7c:a0:46:76:54:b5:
                    47:7b:a6:dd:34:ad:36:3d:b5:3d:ed:cf:9c:50:e0:
                    7f:9a:78:da:f1:79:86:90:21:91:97:fb:fe:04:26:
                    26:41:d1:3e:a8:1d:c4:d8:08:8c:09:2f:8d:e6:3b:
                    8f:2a:54:83:4e:cb:27:f5:88:e7:9f:74:6b:1c:7f:
                    38:32:95:03:b0:2b:03:d1:60:3f:a3:2b:27:92:0c:
                    cb:d0:e0:88:a2:ca:7f:57:58:97:5b:0c:f3:b0:c3:
                    c8:c7:8b:ae:f6:d1:97:4e:1b:47:b7:f5:2b:db:f6:
                    e1:4c:dd:ee:44:96:08:d5:5a:c1:3d:72:71:7b:4e:
                    ad:f7:b8:69:2f:b5:62:75:e1:4d:b2:8a:0a:20:01:
                    a4:46:f9:c9:69:dd:c6:aa:34:c2:fc:6e:25:ae:dc:
                    ed:eb:eb:db:20:b2:82:05:f6:56:4f:b7:85:1a:b1:
                    ad:b8:9b:d8:b1:e4:4b:75:6a:49:ec:56:c0:62:88:
                    4e:e9:6c:23:8b:a1:4a:7a:c6:7f:e8:77:7f:0f:7b:
                    bd:e7:11:db:59:b1:ee:f2:92:e5:ab:42:1f:ad:63:
                    c6:c8:e8:f1:61:bb:e3:8b:59:20:31:e0:98:29:89:
                    f9:bc:82:0e:33:1f:80:be:2c:b8:c8:f2:c0:c2:70:
                    71:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8A:94:85:61:6F:8D:8A:0A:55:95:F0:43:2C:0E:8F:C0:AD:5B:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3446dd3b-1de4-337b-8cc1-f9b1b313b5d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.70.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fa:3a:fa:cf:00:ec:be:c5:a7:09:d3:79:69:a9:b7:ec:ac:
         16:67:75:f0:63:5a:f1:6e:91:0f:f5:c9:a6:65:5f:69:83:62:
         41:40:2f:aa:d8:9c:da:5f:bf:cf:08:6d:31:c7:9c:8e:b6:24:
         0d:65:67:ba:af:1a:da:24:a9:68:6b:88:cd:03:c1:49:df:a5:
         3b:e2:20:3b:29:49:b0:4f:2e:14:56:26:28:e2:27:50:01:74:
         16:93:1b:0a:13:29:d6:eb:5e:62:f9:cd:1f:c1:5d:4a:dd:9e:
         65:57:45:a1:40:18:5a:86:e3:70:12:b2:c5:64:65:dc:59:7a:
         16:1f:c1:46:50:8a:e0:4f:1d:1f:d7:3d:10:1f:a1:f3:69:ee:
         3d:6a:2b:96:79:dc:6e:36:e3:a0:e7:75:64:a7:24:76:89:d2:
         87:71:08:f4:0c:b6:53:4b:15:7c:8c:2b:65:7e:37:05:69:0c:
         ee:4b:23:a6:b9:8f:ba:4f:29:db:71:48:58:b1:65:29:98:f7:
         12:e5:58:d9:9d:fb:99:69:53:71:d2:2a:b5:20:47:ae:fc:8d:
         64:80:ad:36:f5:df:bc:35:0c:13:a5:76:99:60:7c:61:10:19:
         13:f2:4f:12:f3:96:ce:fe:8b:15:0c:60:af:00:bc:09:55:8b:
         57:4f:e6:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmYVusaxzjJAHb9CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDgxODE4MTI1MVoXDTI1MTExNjE5MTI1MVowLzEtMCsGA1UEAxMk
NjYzNjIxMDctYThlYy00NDMwLTk3NmItMGFjYTA5YTAyM2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS0Xwv5AtJJ8oEZ2VLVHe6bdNK02PbU97c+c
UOB/mnja8XmGkCGRl/v+BCYmQdE+qB3E2AiMCS+N5juPKlSDTssn9Yjnn3RrHH84
MpUDsCsD0WA/oysnkgzL0OCIosp/V1iXWwzzsMPIx4uu9tGXThtHt/Ur2/bhTN3u
RJYI1VrBPXJxe06t97hpL7VideFNsooKIAGkRvnJad3GqjTC/G4lrtzt6+vbILKC
BfZWT7eFGrGtuJvYseRLdWpJ7FbAYohO6Wwji6FKesZ/6Hd/D3u95xHbWbHu8pLl
q0IfrWPGyOjxYbvji1kgMeCYKYn5vIIOMx+Aviy4yPLAwnBxZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLKKlIVhb42KClWV8EMsDo/ArVtDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzQ0NmRkM2ItMWRlNC0z
MzdiLThjYzEtZjliMWIzMTNiNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJv6OvrPAOy+xacJ03lpqbfsrBZndfBjWvFukQ/1yaZlX2mDYkFAL6rY
nNpfv88IbTHHnI62JA1lZ7qvGtokqWhriM0DwUnfpTviIDspSbBPLhRWJijiJ1AB
dBaTGwoTKdbrXmL5zR/BXUrdnmVXRaFAGFqG43ASssVkZdxZehYfwUZQiuBPHR/X
PRAfofNp7j1qK5Z53G4246DndWSnJHaJ0odxCPQMtlNLFXyMK2V+NwVpDO5LI6a5
j7pPKdtxSFixZSmY9xLlWNmd+5lpU3HSKrUgR678jWSArTb137w1DBOldplgfGEQ
GRPyTxLzls7+ixUMYK8AvAlVi1dP5rk=
-----END CERTIFICATE-----
Generated at Wed Aug 20 03:23:23 2025 by rpki-client