Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7f7f7c1a-38a9-310c-b64b-ae67f3689c9c.roa
File:                     7f7f7c1a-38a9-310c-b64b-ae67f3689c9c.roa (raw, json)
Hash identifier:          6wz6YqVFUQBIpvnztxLM0hgDxJAEDB1lxrYu3boViDc=
Subject key identifier:   83:8D:39:6C:99:C6:E8:51:C2:12:DD:D8:50:F9:58:54:C2:51:77:57
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9121790E1029159B9C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7f7f7c1a-38a9-310c-b64b-ae67f3689c9c.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        70.49.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:91:21:79:0e:10:29:15:9b:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=a2c678cd-5620-4313-a064-043a2a2257f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:56:a6:d5:ad:fe:7e:c6:c5:fc:5c:30:5e:68:
                    d6:f8:6b:db:cb:c1:7b:15:15:ef:17:a2:12:59:fb:
                    a1:43:c0:f7:54:ed:f0:74:f3:d0:23:1e:c8:f3:9c:
                    86:c4:c7:3d:ea:1a:f2:f7:e5:f5:20:3e:98:af:33:
                    6f:f0:29:ee:d1:47:1d:1f:90:22:43:e3:54:28:71:
                    99:e2:b3:74:ba:91:fc:72:8c:18:db:1d:3d:77:d8:
                    89:c2:c6:78:ad:34:01:be:4a:73:41:4a:1e:75:91:
                    4a:24:38:2c:be:9f:29:67:f8:d2:17:a0:87:7f:8a:
                    b3:74:d4:49:a9:2d:aa:2a:c6:6f:66:be:ae:8b:8f:
                    88:be:2e:d9:23:ef:3f:92:24:cf:2b:a1:f0:6f:1a:
                    6a:2b:75:c4:e0:28:ea:6a:4f:01:41:dc:b3:7b:48:
                    ba:4b:10:7f:be:40:df:49:d0:d8:1a:26:1b:54:cd:
                    22:22:ee:f7:8b:de:97:ef:70:95:db:7e:c3:88:ae:
                    bd:7b:6f:2d:a9:55:6d:5c:29:e2:38:05:d8:f6:82:
                    0d:1c:0f:26:35:25:eb:1f:81:c8:e2:1a:6f:64:cd:
                    02:45:7f:96:c4:93:97:6d:1b:34:e6:d6:4a:53:12:
                    25:36:79:fa:2f:47:51:b8:da:8e:5b:53:3f:ae:31:
                    fd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8D:39:6C:99:C6:E8:51:C2:12:DD:D8:50:F9:58:54:C2:51:77:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7f7f7c1a-38a9-310c-b64b-ae67f3689c9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:2f:d0:6c:4f:19:8d:b3:79:ee:36:d1:fa:68:24:d4:5c:d4:
         0d:77:2e:a5:bd:6b:73:59:da:45:59:a1:c1:0d:81:66:ce:4a:
         98:5d:31:98:2d:70:6d:0a:41:a2:45:59:dd:8f:94:cc:a0:38:
         8e:2e:41:7a:db:5b:14:e8:9a:23:1a:6b:15:5d:e9:e0:0b:72:
         44:3c:96:34:b5:af:35:38:70:24:32:bf:66:c9:3e:fa:28:e0:
         f8:bc:1c:e9:53:65:9a:bd:47:d7:41:21:fd:4d:7c:de:2e:ac:
         7d:98:4d:fa:ff:17:af:f7:5a:e1:40:89:5b:b8:ba:29:d6:0e:
         20:88:4c:5e:9a:90:9c:8c:f4:71:25:83:18:32:c0:89:25:d6:
         85:8d:df:7f:d0:b8:6c:fe:5b:b6:ca:ad:6f:34:9f:a4:61:4b:
         8d:e2:ae:69:a7:a2:3d:1c:35:95:7a:d2:e7:cc:dc:29:7d:59:
         94:49:0f:a2:69:08:e8:5d:a9:ab:95:a7:29:25:4e:8f:d2:4b:
         34:c3:3e:2f:37:a8:3e:11:a6:f8:15:ef:39:d7:d2:aa:70:1a:
         db:8b:0e:af:f1:48:ed:f7:e4:f1:32:d2:77:9e:c3:6e:a2:f3:
         2a:aa:7b:02:4f:a4:56:1d:69:64:30:4a:91:10:20:27:f8:43:
         1d:eb:2d:4d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoA2pEheQ4QKRWbnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
YTJjNjc4Y2QtNTYyMC00MzEzLWEwNjQtMDQzYTJhMjI1N2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVam1a3+fsbF/FwwXmjW+Gvby8F7FRXvF6IS
WfuhQ8D3VO3wdPPQIx7I85yGxMc96hry9+X1ID6YrzNv8Cnu0UcdH5AiQ+NUKHGZ
4rN0upH8cowY2x09d9iJwsZ4rTQBvkpzQUoedZFKJDgsvp8pZ/jSF6CHf4qzdNRJ
qS2qKsZvZr6ui4+Ivi7ZI+8/kiTPK6HwbxpqK3XE4Cjqak8BQdyze0i6SxB/vkDf
SdDYGiYbVM0iIu73i96X73CV237DiK69e28tqVVtXCniOAXY9oINHA8mNSXrH4HI
4hpvZM0CRX+WxJOXbRs05tZKUxIlNnn6L0dRuNqOW1M/rjH9oQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIONOWyZxuhRwhLd2FD5WFTCUXdXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvN2Y3ZjdjMWEtMzhhOS0z
MTBjLWI2NGItYWU2N2YzNjg5YzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARjEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbC/QbE8ZjbN57jbR+mgk1FzUDXcupb1rc1naRVmhwQ2BZs5KmF0xmC1w
bQpBokVZ3Y+UzKA4ji5BettbFOiaIxprFV3p4AtyRDyWNLWvNThwJDK/Zsk++ijg
+Lwc6VNlmr1H10Eh/U183i6sfZhN+v8Xr/da4UCJW7i6KdYOIIhMXpqQnIz0cSWD
GDLAiSXWhY3ff9C4bP5btsqtbzSfpGFLjeKuaaeiPRw1lXrS58zcKX1ZlEkPomkI
6F2pq5WnKSVOj9JLNMM+LzeoPhGm+BXvOdfSqnAa24sOr/FI7ffk8TLSd57DbqLz
Kqp7Ak+kVh1pZDBKkRAgJ/hDHestTQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:35 2025 by rpki-client