Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa
File:                     fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa (raw, json)
Hash identifier:          8fHZDKtUxJyDPpjTt7lquJuP5DCV+amkVJ3UPBosZp0=
Subject key identifier:   9C:86:E5:04:F0:AF:79:C7:A9:65:21:AC:03:CC:8E:DD:95:E0:DC:C2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161A0026CF73291FF8AEE30
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11427
IP address blocks:        70.119.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:a0:02:6c:f7:32:91:ff:8a:ee:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=883770be-2ae0-48ea-b27f-45d8f4934ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:98:75:21:c3:76:b4:25:36:2d:85:54:63:
                    ec:bf:d3:8a:3c:5e:45:47:69:3b:62:dc:cf:10:fe:
                    9f:63:35:71:81:d9:48:22:ab:64:6b:7d:e5:6e:68:
                    f0:20:78:f8:ac:61:74:d9:64:99:ac:51:fd:48:40:
                    21:07:e8:e4:d1:6f:8e:44:8a:88:0d:bc:b0:8e:68:
                    af:ce:01:6d:c5:1e:80:f2:b1:2a:ec:78:2e:54:0b:
                    0f:7b:25:55:a3:d8:e2:af:05:6c:ab:88:06:2d:d0:
                    be:c7:6c:85:89:73:4b:e4:df:e3:57:33:4e:c2:2c:
                    a2:84:ea:0c:e8:b0:10:0c:6c:e8:6c:fb:83:07:dc:
                    8a:72:a2:50:6a:0e:7e:71:e9:8e:ec:32:58:75:af:
                    63:c1:aa:11:94:16:00:7f:3e:2c:26:b9:f6:75:a2:
                    a6:fb:73:b8:d3:e7:c3:c1:be:ef:78:5f:7b:5d:25:
                    3f:a0:cb:3d:22:a3:e9:32:fd:ad:d7:30:53:b3:2a:
                    e0:b1:f6:b7:38:1e:54:c3:69:a6:04:42:03:fa:0c:
                    f2:9a:6e:cd:26:34:2c:cb:05:b8:67:77:19:0a:7a:
                    09:1e:d4:d0:d9:f7:18:1e:bd:c9:36:3b:34:a7:5b:
                    f9:5b:fe:77:70:27:52:03:80:19:1a:d3:f1:f0:af:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:86:E5:04:F0:AF:79:C7:A9:65:21:AC:03:CC:8E:DD:95:E0:DC:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.119.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:cd:4c:ab:63:ae:d7:8b:a4:b8:77:cc:23:06:a7:45:80:10:
         c0:5e:cd:05:c2:50:87:08:6a:9f:34:58:9a:e2:de:c1:15:2e:
         64:18:87:8e:47:5e:9c:0d:00:10:f2:79:1e:45:51:a8:e8:30:
         33:94:00:a6:1d:41:07:a9:48:37:7a:07:7a:70:84:2a:b1:23:
         49:68:7d:aa:57:7e:c3:2b:a8:d1:f5:11:03:de:6c:9d:6d:8f:
         e0:bf:38:8f:fb:3f:e8:88:b7:36:f8:b7:0a:d6:7a:36:d5:41:
         77:e2:c8:ce:4d:d5:b8:0b:cd:c4:14:bf:a4:ff:0b:05:38:57:
         a6:69:a3:e8:74:8f:de:4b:ec:6f:3f:0c:9f:9a:6f:67:d9:eb:
         a7:47:98:31:84:a3:96:92:48:b6:23:51:79:23:73:ab:3c:94:
         32:16:c1:9a:66:4b:9a:aa:4f:1c:88:5c:bd:94:f3:ab:e6:39:
         f1:e6:09:48:48:3d:9b:47:fc:e5:04:cc:80:f8:07:51:ab:e9:
         23:3b:ad:77:1d:ac:a9:b6:2e:85:dd:bd:e4:b7:28:37:f0:4c:
         a7:91:f2:1a:ab:44:a5:d9:41:bb:77:20:d7:fb:a6:8d:e1:0b:
         65:55:fe:94:7d:e5:98:73:e8:da:91:cf:e1:35:c9:3f:f4:cf:
         f8:cb:02:dd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqhYaACbPcykf+K7jAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
ODgzNzcwYmUtMmFlMC00OGVhLWIyN2YtNDVkOGY0OTM0ZmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWCYdSHDdrQlNi2FVGPsv9OKPF5FR2k7YtzP
EP6fYzVxgdlIIqtka33lbmjwIHj4rGF02WSZrFH9SEAhB+jk0W+ORIqIDbywjmiv
zgFtxR6A8rEq7HguVAsPeyVVo9jirwVsq4gGLdC+x2yFiXNL5N/jVzNOwiyihOoM
6LAQDGzobPuDB9yKcqJQag5+cemO7DJYda9jwaoRlBYAfz4sJrn2daKm+3O40+fD
wb7veF97XSU/oMs9IqPpMv2t1zBTsyrgsfa3OB5Uw2mmBEID+gzymm7NJjQsywW4
Z3cZCnoJHtTQ2fcYHr3JNjs0p1v5W/53cCdSA4AZGtPx8K9jwwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJyG5QTwr3nHqWUhrAPMjt2V4NzCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZmE4YTI2ZjYtMmI5MS0z
ZTFiLThmMmUtMGNhNTViNzQ0NGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARncwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJc1Mq2Ou14ukuHfMIwanRYAQwF7NBcJQhwhqnzRYmuLewRUuZBiHjkde
nA0AEPJ5HkVRqOgwM5QAph1BB6lIN3oHenCEKrEjSWh9qld+wyuo0fURA95snW2P
4L84j/s/6Ii3Nvi3CtZ6NtVBd+LIzk3VuAvNxBS/pP8LBThXpmmj6HSP3kvsbz8M
n5pvZ9nrp0eYMYSjlpJItiNReSNzqzyUMhbBmmZLmqpPHIhcvZTzq+Y58eYJSEg9
m0f85QTMgPgHUavpIzutdx2sqbYuhd295LcoN/BMp5HyGqtEpdlBu3cg1/umjeEL
ZVX+lH3lmHPo2pHP4TXJP/TP+MsC3Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:14:39 2025 by rpki-client