Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/31000deb-226b-39dd-959f-c150f230f500.roa
File:                     31000deb-226b-39dd-959f-c150f230f500.roa (raw, json)
Hash identifier:          zRDs8la168MMNGyhF2hlENdUjp27fX0Qthc18qMQPrg=
Subject key identifier:   5C:85:E4:68:DC:AA:61:69:79:74:5E:D8:22:16:B5:39:1E:C6:A9:0B
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584A2ABAF0B33D9CEA62F936CF40
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/31000deb-226b-39dd-959f-c150f230f500.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     46160
IP address blocks:        76.191.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:f0:b3:3d:9c:ea:62:f9:36:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=2c349777-c19c-4618-8bea-48450d0721be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:fa:21:59:cd:fc:75:83:c6:13:de:51:36:
                    07:a6:a7:11:3a:77:98:ec:5f:2f:f3:ed:d4:c7:b4:
                    86:64:d5:ba:17:0c:9b:0a:9f:8d:10:11:49:df:e3:
                    f3:2c:3c:70:95:43:2a:ca:37:4d:32:47:b5:df:a0:
                    48:89:00:89:66:12:e1:a6:dd:90:c8:76:68:ff:f8:
                    03:59:a0:a1:33:eb:73:ed:82:6c:77:fa:a0:0d:e2:
                    d5:de:f3:e7:40:1a:63:c2:23:7a:7b:e7:c1:da:0c:
                    2b:60:89:34:77:cd:fc:f5:f4:cd:4f:2d:2f:a4:e3:
                    e5:53:46:d2:5d:23:f4:6b:bf:15:6f:3b:c1:bb:75:
                    7e:f9:75:51:19:1b:45:87:2f:8e:02:bc:93:28:b6:
                    da:94:2d:9a:64:b7:d3:9e:3e:7e:fa:d4:41:f9:bb:
                    52:3f:8a:62:bf:5a:4e:d4:b8:ed:cd:2e:10:cc:98:
                    23:aa:d3:54:d1:0c:f0:09:e9:47:55:50:11:e8:d5:
                    42:db:2c:26:2a:eb:26:e6:11:d7:9f:89:f4:c7:3b:
                    2f:ad:7e:1e:9e:f8:18:91:ae:3c:36:c9:99:3e:a7:
                    de:9c:36:0f:0d:d6:37:d9:eb:1e:cf:1c:46:70:b1:
                    8f:18:c5:6d:f1:3b:93:48:48:01:42:f8:87:75:85:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:85:E4:68:DC:AA:61:69:79:74:5E:D8:22:16:B5:39:1E:C6:A9:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/31000deb-226b-39dd-959f-c150f230f500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.191.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:2c:05:a0:55:df:77:64:26:48:5d:f9:c0:2b:ec:dc:82:fe:
         9f:b8:86:5b:4c:47:e4:6e:99:ef:a4:89:1f:98:c7:fa:26:fe:
         75:dc:61:12:38:98:21:8d:1c:00:47:e1:69:90:49:45:35:84:
         ef:5b:fd:28:1d:6c:e3:f3:38:2e:47:f5:53:f1:d4:ad:b8:f1:
         cf:60:6c:15:61:a5:5b:38:db:07:ef:4e:8b:ff:22:76:dd:63:
         e8:7e:b7:23:81:bf:24:96:72:5f:db:0f:c5:65:70:7f:fd:aa:
         e2:0a:61:42:ba:4b:55:de:da:5a:ea:48:24:ab:f9:b2:ea:44:
         ed:3a:4d:95:5f:30:49:92:8a:91:3f:96:78:aa:16:e5:22:93:
         48:cc:de:f0:8a:c3:4a:7a:7e:9d:da:61:85:64:f6:b9:06:85:
         9f:6e:e6:51:73:ae:ad:34:1e:58:af:ba:66:22:9e:cc:e4:e6:
         69:bd:37:ea:92:76:6b:76:35:33:47:74:77:28:a8:90:08:74:
         b2:ab:6f:a4:df:d5:18:3f:7d:0b:d9:b3:db:e9:04:ff:3e:b1:
         26:a9:72:f4:e6:8e:84:74:29:c2:22:47:6e:ae:fc:0b:dd:0f:
         8c:81:df:79:47:5c:96:92:0b:77:25:9f:04:d4:17:de:5b:bc:
         43:00:b9:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquvCzPZzqYvk2z0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
MmMzNDk3NzctYzE5Yy00NjE4LThiZWEtNDg0NTBkMDcyMWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntv6IVnN/HWDxhPeUTYHpqcROneY7F8v8+3U
x7SGZNW6FwybCp+NEBFJ3+PzLDxwlUMqyjdNMke136BIiQCJZhLhpt2QyHZo//gD
WaChM+tz7YJsd/qgDeLV3vPnQBpjwiN6e+fB2gwrYIk0d8389fTNTy0vpOPlU0bS
XSP0a78VbzvBu3V++XVRGRtFhy+OAryTKLbalC2aZLfTnj5++tRB+btSP4piv1pO
1LjtzS4QzJgjqtNU0QzwCelHVVAR6NVC2ywmKusm5hHXn4n0xzsvrX4envgYka48
NsmZPqfenDYPDdY32esezxxGcLGPGMVt8TuTSEgBQviHdYVNywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFyF5GjcqmFpeXRe2CIWtTkexqkLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMzEwMDBkZWItMjI2Yi0z
OWRkLTk1OWYtYzE1MGYyMzBmNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTL92MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFUsBaBV33dkJkhd+cAr7NyC/p+4hltMR+Rume+kiR+Yx/om/nXcYRI4
mCGNHABH4WmQSUU1hO9b/SgdbOPzOC5H9VPx1K248c9gbBVhpVs42wfvTov/Inbd
Y+h+tyOBvySWcl/bD8VlcH/9quIKYUK6S1Xe2lrqSCSr+bLqRO06TZVfMEmSipE/
lniqFuUik0jM3vCKw0p6fp3aYYVk9rkGhZ9u5lFzrq00HlivumYinszk5mm9N+qS
dmt2NTNHdHcoqJAIdLKrb6Tf1Rg/fQvZs9vpBP8+sSapcvTmjoR0KcIiR26u/Avd
D4yB33lHXJaSC3clnwTUF95bvEMAudk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:33 2025 by rpki-client