Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e5a0dc8-6bf5-3299-96cd-6120c3ab11a5.roa
File:                     0e5a0dc8-6bf5-3299-96cd-6120c3ab11a5.roa (raw, json)
Hash identifier:          93QNwOpk4YVzQNsTKgKXoUEL9kuOV8EEWQVMZU+aXA4=
Subject key identifier:   E3:E4:95:E5:BA:AF:F4:8B:01:69:8F:A7:17:FE:3C:AC:36:89:D5:AA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAE21689281ED0F0034680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e5a0dc8-6bf5-3299-96cd-6120c3ab11a5.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        70.41.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:e2:16:89:28:1e:d0:f0:03:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=8b711418-bfbe-48b6-8981-8676b5fb2d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:3d:31:97:c7:38:fd:fe:b2:2d:a0:17:de:
                    87:20:e2:9f:bc:af:ee:3d:c6:21:56:ff:3a:1e:04:
                    c8:0b:89:27:c3:3a:32:0f:ee:93:a9:29:67:89:e6:
                    24:60:67:73:40:d3:48:10:af:22:67:9f:a0:1b:7b:
                    29:75:47:94:61:42:94:32:23:be:7b:d2:dc:74:44:
                    99:b6:49:44:fc:ac:fa:c5:c0:2a:cb:50:2c:53:91:
                    7e:3c:16:c6:f8:0a:c6:b3:e5:84:66:84:76:9a:59:
                    45:e4:d5:bf:f1:4f:d3:84:5e:c9:77:d6:3d:16:1b:
                    4f:02:d3:f9:82:9a:91:22:58:97:a8:d5:ff:ff:76:
                    d8:17:7c:41:dc:a5:16:7f:46:8e:96:74:8f:4b:e9:
                    50:c4:dd:8f:18:af:c4:df:cf:70:af:d1:e5:26:f9:
                    1c:5e:37:ac:22:73:7d:ed:33:8c:c4:60:5b:b8:8b:
                    9d:14:7f:5e:51:0c:51:0b:45:71:f5:04:f2:79:58:
                    c7:0b:8a:2a:3b:34:b0:7c:1b:b2:c7:bf:6d:85:2d:
                    23:7f:57:17:33:27:0d:72:b1:b9:8b:98:c0:97:7a:
                    e0:d8:fd:80:22:f4:53:03:c5:9d:49:1b:50:73:b4:
                    c7:4c:29:62:bc:c3:c9:85:f4:c2:75:76:91:7f:22:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E4:95:E5:BA:AF:F4:8B:01:69:8F:A7:17:FE:3C:AC:36:89:D5:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e5a0dc8-6bf5-3299-96cd-6120c3ab11a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b6:bc:60:c6:3c:61:62:6c:16:69:d2:e4:f1:54:bb:21:1d:
         66:5c:66:f5:51:09:0c:a3:00:78:d0:1b:5b:eb:45:e5:c9:d4:
         2b:76:0a:56:68:9e:b9:06:c3:aa:c9:7a:0f:27:f1:14:74:ee:
         01:0e:b3:a1:39:e1:63:67:21:28:c9:3e:02:a8:bb:9a:31:4d:
         5a:a4:0a:8d:48:2c:7d:87:b1:2f:f9:44:91:c2:9a:39:9e:cc:
         a2:d8:65:bf:19:8f:af:76:f2:87:76:30:c5:cc:c2:38:df:c1:
         07:c9:d5:93:02:9b:22:83:9c:a0:8c:ee:e1:ef:41:1a:ea:d4:
         43:3e:47:b2:1f:58:c0:c6:1c:96:99:a7:58:56:27:a2:61:7b:
         2f:68:88:18:d3:cd:30:a0:18:9f:49:56:b8:65:20:4d:cf:75:
         97:ee:d7:31:ac:9c:ac:b1:d5:36:d3:c8:fc:7d:1a:17:1a:37:
         9a:de:db:93:2e:72:f3:65:90:be:55:b2:81:09:e8:6e:0a:97:
         96:25:46:12:04:a7:55:f9:4e:0e:be:cd:61:cb:a8:25:d6:ac:
         8f:a2:bc:34:06:5a:1d:8d:ec:a3:d0:89:93:2a:9a:72:ee:63:
         1d:cd:63:07:28:71:bd:cd:51:d4:87:7c:27:bf:0b:5e:69:a9:
         7a:84:ec:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuIWiSge0PADRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
OGI3MTE0MTgtYmZiZS00OGI2LTg5ODEtODY3NmI1ZmIyZDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8s9MZfHOP3+si2gF96HIOKfvK/uPcYhVv86
HgTIC4knwzoyD+6TqSlnieYkYGdzQNNIEK8iZ5+gG3spdUeUYUKUMiO+e9LcdESZ
tklE/Kz6xcAqy1AsU5F+PBbG+ArGs+WEZoR2mllF5NW/8U/ThF7Jd9Y9FhtPAtP5
gpqRIliXqNX//3bYF3xB3KUWf0aOlnSPS+lQxN2PGK/E389wr9HlJvkcXjesInN9
7TOMxGBbuIudFH9eUQxRC0Vx9QTyeVjHC4oqOzSwfBuyx79thS0jf1cXMycNcrG5
i5jAl3rg2P2AIvRTA8WdSRtQc7THTClivMPJhfTCdXaRfyJe0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOPkleW6r/SLAWmPpxf+PKw2idWqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGU1YTBkYzgtNmJmNS0z
Mjk5LTk2Y2QtNjEyMGMzYWIxMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE62vGDGPGFibBZp0uTxVLshHWZcZvVRCQyjAHjQG1vrReXJ1Ct2ClZo
nrkGw6rJeg8n8RR07gEOs6E54WNnISjJPgKou5oxTVqkCo1ILH2HsS/5RJHCmjme
zKLYZb8Zj6928od2MMXMwjjfwQfJ1ZMCmyKDnKCM7uHvQRrq1EM+R7IfWMDGHJaZ
p1hWJ6Jhey9oiBjTzTCgGJ9JVrhlIE3PdZfu1zGsnKyx1TbTyPx9GhcaN5re25Mu
cvNlkL5VsoEJ6G4Kl5YlRhIEp1X5Tg6+zWHLqCXWrI+ivDQGWh2N7KPQiZMqmnLu
Yx3NYwcocb3NUdSHfCe/C15pqXqE7H0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:44:06 2025 by rpki-client