Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a6850040-56d1-3e81-afa3-abda2afd2118.roa
File:                     a6850040-56d1-3e81-afa3-abda2afd2118.roa (raw, json)
Hash identifier:          qvodiS49hTVgjDmh7iaoBCo1YmJvdH9u6l5X/sizSqA=
Subject key identifier:   98:A1:EA:DC:7C:92:66:07:3F:A2:FC:62:30:E0:AA:BC:E3:AF:74:6C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B0AD8BDCEA1B8CF10D480
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a6850040-56d1-3e81-afa3-abda2afd2118.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        172.111.70.64/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:0a:d8:bd:ce:a1:b8:cf:10:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=cd843f22-b556-401c-a786-95efe28ba58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:50:1a:75:d7:f2:f4:f9:f2:c1:7b:d0:1f:
                    8d:e9:82:48:7b:3c:8d:f6:90:20:bd:5c:88:11:82:
                    46:ce:af:36:81:de:a6:ba:dc:74:5f:65:69:47:43:
                    34:68:7a:fb:3b:9e:4c:25:41:75:5f:93:1f:cb:0f:
                    ef:36:2a:d6:a4:19:c5:2e:dd:19:c4:12:16:9f:60:
                    b8:02:e0:f4:4b:ad:35:bf:5c:38:31:bd:fd:a7:38:
                    9f:4f:9a:e2:34:98:22:0a:50:6d:3f:91:63:65:52:
                    20:ae:a2:b2:b9:90:2a:e8:b1:40:ad:64:9e:9d:da:
                    48:45:c8:f5:c5:9d:de:72:04:b0:c7:de:aa:57:a0:
                    40:ce:3b:41:01:56:bb:68:06:c4:41:1f:d4:3d:de:
                    0b:f1:f2:f2:1e:ea:34:d7:68:fc:99:56:0e:77:22:
                    73:cf:ea:c0:f6:ef:14:33:45:7c:6a:87:18:aa:d6:
                    9b:d7:57:c6:fe:83:73:31:6f:a4:e8:7b:55:11:cd:
                    8e:d5:22:a7:7f:46:f4:4b:bb:bb:a1:ac:58:ca:fe:
                    1a:07:bc:5e:1e:cc:6e:55:62:d1:3c:61:9b:be:8a:
                    f7:ad:ad:3b:9a:80:1a:1c:dc:58:f2:e8:af:a4:92:
                    6a:b4:04:8c:0e:9a:41:be:89:46:09:97:94:83:fd:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A1:EA:DC:7C:92:66:07:3F:A2:FC:62:30:E0:AA:BC:E3:AF:74:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a6850040-56d1-3e81-afa3-abda2afd2118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.70.64/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:7d:49:6c:be:cd:47:3f:90:36:84:5d:92:71:4c:c4:cf:bc:
         ff:36:ae:bf:fb:b3:e0:7d:ee:9d:3d:22:25:d7:5c:64:f5:a8:
         b9:96:f9:ab:30:f0:35:5c:4f:79:a4:a2:f5:85:13:bd:66:3c:
         a1:b4:e2:aa:45:9f:9c:93:4a:6b:a7:cb:74:3f:cb:d3:35:a3:
         43:66:6d:5c:50:b7:9f:5f:6e:22:6c:97:b7:e6:34:d9:62:03:
         35:76:13:f7:82:5f:5f:0d:c6:61:39:7d:d0:5a:11:19:ae:9d:
         d8:78:fe:21:22:b5:6c:8a:62:72:b6:f4:04:5a:c5:06:7a:22:
         8c:67:09:b1:75:64:d6:f2:66:32:d2:8d:d7:ac:22:b4:66:e8:
         bc:34:99:ee:61:00:de:1d:11:71:1e:83:8f:dd:77:1a:93:b5:
         8a:7c:fb:a0:0f:c8:d0:f5:44:c1:bb:86:b7:f2:b0:63:71:42:
         e7:27:d8:86:1d:b7:e3:43:e8:33:c3:1e:30:54:ab:3f:70:bb:
         a5:89:48:85:f4:9d:ba:c7:9e:a9:d5:80:74:76:43:23:ba:4e:
         84:65:e7:b6:53:54:ea:30:95:50:7d:46:3f:bf:e2:45:7f:cb:
         0a:80:59:57:0a:d4:ca:50:e0:e8:38:11:5b:e3:eb:ca:f2:2b:
         40:9f:bf:50
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEozGwrYvc6huM8Q1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
Y2Q4NDNmMjItYjU1Ni00MDFjLWE3ODYtOTVlZmUyOGJhNThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dhQGnXX8vT58sF70B+N6YJIezyN9pAgvVyI
EYJGzq82gd6mutx0X2VpR0M0aHr7O55MJUF1X5Mfyw/vNirWpBnFLt0ZxBIWn2C4
AuD0S601v1w4Mb39pzifT5riNJgiClBtP5FjZVIgrqKyuZAq6LFArWSendpIRcj1
xZ3ecgSwx96qV6BAzjtBAVa7aAbEQR/UPd4L8fLyHuo012j8mVYOdyJzz+rA9u8U
M0V8aocYqtab11fG/oNzMW+k6HtVEc2O1SKnf0b0S7u7oaxYyv4aB7xeHsxuVWLR
PGGbvor3ra07moAaHNxY8uivpJJqtASMDppBvolGCZeUg/0MUQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJih6tx8kmYHP6L8YjDgqrzjr3RsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYTY4NTAwNDAtNTZkMS0z
ZTgxLWFmYTMtYWJkYTJhZmQyMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUErG9GQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBZfUlsvs1HP5A2hF2ScUzEz7z/Nq6/+7Pgfe6dPSIl11xk9ai5lvmr
MPA1XE95pKL1hRO9ZjyhtOKqRZ+ck0prp8t0P8vTNaNDZm1cULefX24ibJe35jTZ
YgM1dhP3gl9fDcZhOX3QWhEZrp3YeP4hIrVsimJytvQEWsUGeiKMZwmxdWTW8mYy
0o3XrCK0Zui8NJnuYQDeHRFxHoOP3Xcak7WKfPugD8jQ9UTBu4a38rBjcULnJ9iG
HbfjQ+gzwx4wVKs/cLuliUiF9J26x56p1YB0dkMjuk6EZee2U1TqMJVQfUY/v+JF
f8sKgFlXCtTKUODoOBFb4+vK8itAn79Q
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:47:04 2025 by rpki-client