Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ff1f3231-fe68-3f00-9736-157787b8535f.roa
File:                     ff1f3231-fe68-3f00-9736-157787b8535f.roa (raw, json)
Hash identifier:          Ke3Bx2+7wAw3JchFQ3Y2YuJMyIOBNzo7W6WF5wchC7w=
Subject key identifier:   7D:82:08:8D:6D:C1:0F:68:F0:0F:3A:38:6F:41:96:AC:79:E5:A4:53
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F432858498FC9B85AC8985E42240BBD80
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ff1f3231-fe68-3f00-9736-157787b8535f.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     15164
IP address blocks:        199.200.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:b8:5a:c8:98:5e:42:24:0b:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=82308072-4187-4fba-8052-314a441cc5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7f:17:d1:ff:d9:61:69:c2:b1:a2:f7:b0:31:
                    7c:d2:25:b9:86:27:54:12:95:52:eb:86:5f:a3:ea:
                    38:83:97:cb:23:f8:14:94:11:ea:f7:e2:74:56:e0:
                    3f:ac:cf:ff:28:95:9d:dd:ea:d3:7b:a1:91:57:21:
                    d0:74:dc:a5:51:fa:5d:6d:41:80:fc:50:82:93:8c:
                    6c:0c:c6:0c:69:ce:0e:ba:53:2f:75:b8:e0:96:4a:
                    09:cd:9e:4e:96:0a:ac:32:ba:ed:4b:5f:d0:1f:b7:
                    61:8a:90:c1:61:7a:5b:e2:cc:34:c9:5e:c5:a3:b5:
                    31:fb:21:bf:9e:d2:d9:7c:c8:32:2c:9f:98:95:c8:
                    2e:2f:65:34:7c:f3:a2:57:0b:86:81:db:b4:7f:d0:
                    73:e0:87:19:45:19:78:ca:ea:2f:3d:83:7e:87:d5:
                    59:f7:0f:a2:6e:48:66:82:5c:c4:59:8a:57:85:19:
                    b0:5d:11:09:1a:3e:cb:1a:ae:02:a0:cf:55:1b:70:
                    d9:c2:5c:ce:48:73:dc:83:e5:29:52:63:c0:e4:97:
                    a1:31:2a:e8:cf:d2:42:80:05:cd:e0:43:89:57:3a:
                    c1:1e:70:26:aa:92:bb:ed:44:b5:cd:5d:03:c2:98:
                    b0:7e:94:24:ce:c7:28:57:17:1c:1e:ee:4a:e4:a2:
                    56:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:82:08:8D:6D:C1:0F:68:F0:0F:3A:38:6F:41:96:AC:79:E5:A4:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ff1f3231-fe68-3f00-9736-157787b8535f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:61:da:3b:ca:8f:38:b0:62:90:44:9b:57:17:46:71:94:e8:
         6f:74:74:f9:e5:06:76:d9:b6:bd:3e:de:d7:89:31:54:47:18:
         0d:80:66:51:70:7a:ae:43:2a:5c:d5:26:c1:fd:e2:de:e5:84:
         90:a4:61:4c:39:5c:a6:10:3b:c7:c9:60:e3:26:ab:8a:1e:78:
         df:1d:a3:cd:1d:ea:eb:e7:09:21:a6:42:10:ac:1e:f2:b7:44:
         98:f4:82:9b:28:ba:d9:91:37:3c:3b:69:d6:40:c6:73:90:8f:
         b3:65:6d:0a:b6:a5:b6:33:1f:a7:1f:3c:d6:eb:a8:2a:cb:41:
         41:c6:d0:82:d0:83:9d:5c:1f:79:49:2b:15:30:69:a0:85:ac:
         de:79:65:1a:e6:8d:da:29:52:8b:4c:6f:d1:46:6a:0f:88:c5:
         87:ab:e3:c1:f4:69:c0:d1:e7:6f:59:c1:88:91:3a:db:37:b6:
         e0:14:dc:5f:a5:b3:63:49:b9:e6:83:e7:61:ff:34:cf:a6:ce:
         ae:1b:a4:1f:f1:cb:25:a8:ed:5b:ba:7e:0f:b0:c8:bd:a7:b7:
         8a:17:65:37:92:b3:36:84:2b:f6:cf:3b:7d:33:a6:63:d8:80:
         f5:65:0b:b9:54:e7:9e:2e:1b:d1:be:7e:96:fd:e7:26:da:06:
         c7:d3:17:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybhayJheQiQLvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk
ODIzMDgwNzItNDE4Ny00ZmJhLTgwNTItMzE0YTQ0MWNjNWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH8X0f/ZYWnCsaL3sDF80iW5hidUEpVS64Zf
o+o4g5fLI/gUlBHq9+J0VuA/rM//KJWd3erTe6GRVyHQdNylUfpdbUGA/FCCk4xs
DMYMac4OulMvdbjglkoJzZ5OlgqsMrrtS1/QH7dhipDBYXpb4sw0yV7Fo7Ux+yG/
ntLZfMgyLJ+YlcguL2U0fPOiVwuGgdu0f9Bz4IcZRRl4yuovPYN+h9VZ9w+ibkhm
glzEWYpXhRmwXREJGj7LGq4CoM9VG3DZwlzOSHPcg+UpUmPA5JehMSroz9JCgAXN
4EOJVzrBHnAmqpK77US1zV0DwpiwfpQkzscoVxccHu5K5KJW8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH2CCI1twQ9o8A86OG9Blqx55aRTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZmYxZjMyMzEtZmU2OC0z
ZjAwLTk3MzYtMTU3Nzg3Yjg1MzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhh2jvKjziwYpBEm1cXRnGU6G90dPnlBnbZtr0+3teJMVRHGA2AZlFw
eq5DKlzVJsH94t7lhJCkYUw5XKYQO8fJYOMmq4oeeN8do80d6uvnCSGmQhCsHvK3
RJj0gpsoutmRNzw7adZAxnOQj7NlbQq2pbYzH6cfPNbrqCrLQUHG0ILQg51cH3lJ
KxUwaaCFrN55ZRrmjdopUotMb9FGag+IxYer48H0acDR529ZwYiROts3tuAU3F+l
s2NJueaD52H/NM+mzq4bpB/xyyWo7Vu6fg+wyL2nt4oXZTeSszaEK/bPO30zpmPY
gPVlC7lU554uG9G+fpb95ybaBsfTF7M=
-----END CERTIFICATE-----
Generated at Fri May 2 05:43:34 2025 by rpki-client