Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/b531105f-a4af-323c-9208-5b8904f199fd.roa
File:                     b531105f-a4af-323c-9208-5b8904f199fd.roa (raw, json)
Hash identifier:          IagFN+AgBOBHRRBHrFwCZgVefNHbbgF0Uq/I8sAmNr4=
Subject key identifier:   D8:2E:BF:69:19:64:2B:D3:5C:83:A0:AD:B2:FE:D7:EE:1B:F4:AF:5F
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F43285849E654F0C5C26870E2CAEB5B40
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/b531105f-a4af-323c-9208-5b8904f199fd.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     18914
IP address blocks:        206.168.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f0:c5:c2:68:70:e2:ca:eb:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=d72b2f31-c4dd-4d28-b5c2-e50f15754551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:de:cf:38:ee:dd:56:97:b5:a6:be:2d:fa:9d:
                    1d:69:20:fc:d3:4e:9b:9e:e8:8c:87:51:21:cf:19:
                    ab:91:96:88:56:15:19:4c:42:4e:25:36:24:04:95:
                    92:e2:e2:0c:e4:d2:52:d2:0e:a7:ff:f0:21:f7:0f:
                    b6:77:c8:7b:33:f9:83:73:7a:28:cb:1e:be:9b:b5:
                    06:9a:64:57:f4:76:b2:ba:33:7f:94:c9:9f:c6:c1:
                    64:dc:70:0e:16:75:8b:e8:d8:4a:f3:45:7c:5b:4a:
                    e1:bc:9a:16:b7:6d:99:72:ab:02:5f:19:a6:a9:79:
                    2b:31:11:4c:b2:05:bd:87:39:2e:70:a2:ef:15:0f:
                    b7:7c:b7:ca:d7:55:1d:25:d6:27:27:d3:e9:ce:f9:
                    1f:f6:38:a7:07:b5:0b:3b:73:b2:d4:af:42:ca:83:
                    a3:5a:a6:1f:4c:35:3a:8f:23:10:30:d5:2d:55:8b:
                    1c:57:75:3a:d2:45:ab:1c:c4:9b:ba:c6:8a:5f:ac:
                    a9:39:1b:86:15:9a:b2:e1:54:30:67:53:84:d0:57:
                    bf:25:5e:94:ed:f5:d8:6d:d9:e5:7d:a6:c7:b2:3c:
                    a3:e6:b3:49:7b:3e:ca:20:cf:d6:0b:72:56:62:37:
                    79:7b:bf:cb:29:5e:77:8d:97:05:0f:ff:d4:b6:62:
                    0c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2E:BF:69:19:64:2B:D3:5C:83:A0:AD:B2:FE:D7:EE:1B:F4:AF:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/b531105f-a4af-323c-9208-5b8904f199fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:74:ca:e8:9d:1a:cb:9b:30:19:4e:c8:aa:2f:b2:22:3b:f5:
         95:c5:24:8f:07:17:c3:42:da:10:96:52:af:c6:d1:2e:dd:60:
         bf:06:4e:b7:f5:20:77:2f:7a:6e:71:1f:db:52:f7:c8:8c:17:
         cb:e8:97:0f:28:43:25:a3:bd:cd:ce:1c:b7:64:e1:90:b8:7d:
         c5:22:a8:d3:f6:d9:bc:ad:6b:35:e2:36:7b:32:ec:b8:dd:2f:
         2c:5b:39:02:26:89:42:52:d3:51:5f:e2:98:4c:52:73:15:e6:
         f5:a0:9f:ae:4e:32:ad:7a:e3:82:1f:69:95:6e:bf:26:db:75:
         2a:fd:65:d7:81:91:06:b5:80:9f:15:09:b8:2a:20:4e:88:05:
         e1:26:0d:29:e6:c4:83:c2:25:21:71:90:b4:a6:7b:25:ac:f5:
         b7:53:ae:bd:78:95:4c:83:c4:43:86:e5:7b:30:b2:bd:fd:b2:
         39:1e:74:9d:54:a4:0b:8e:48:d9:ce:77:9a:16:96:44:61:22:
         3c:55:00:2b:86:a7:50:96:d0:9c:e5:1c:49:ef:44:43:ce:aa:
         74:c7:e6:ad:60:24:cf:71:6e:8a:45:db:f5:e1:ef:25:6e:b0:
         85:a2:2c:0f:5b:9a:75:22:07:1a:67:7c:ba:05:74:fd:58:08:
         89:a3:b1:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVPDFwmhw4srrW0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj
NzJhMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
ZDcyYjJmMzEtYzRkZC00ZDI4LWI1YzItZTUwZjE1NzU0NTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt7POO7dVpe1pr4t+p0daSD8006bnuiMh1Eh
zxmrkZaIVhUZTEJOJTYkBJWS4uIM5NJS0g6n//Ah9w+2d8h7M/mDc3ooyx6+m7UG
mmRX9HayujN/lMmfxsFk3HAOFnWL6NhK80V8W0rhvJoWt22ZcqsCXxmmqXkrMRFM
sgW9hzkucKLvFQ+3fLfK11UdJdYnJ9Ppzvkf9jinB7ULO3Oy1K9CyoOjWqYfTDU6
jyMQMNUtVYscV3U60kWrHMSbusaKX6ypORuGFZqy4VQwZ1OE0Fe/JV6U7fXYbdnl
fabHsjyj5rNJez7KIM/WC3JWYjd5e7/LKV53jZcFD//UtmIMHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNguv2kZZCvTXIOgrbL+1+4b9K9fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj
Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvYjUzMTEwNWYtYTRhZi0z
MjNjLTkyMDgtNWI4OTA0ZjE5OWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5
ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi
YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1
NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqhGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC90yuidGsubMBlOyKovsiI79ZXFJI8HF8NC2hCWUq/G0S7dYL8GTrf1
IHcvem5xH9tS98iMF8volw8oQyWjvc3OHLdk4ZC4fcUiqNP22bytazXiNnsy7Ljd
LyxbOQImiUJS01Ff4phMUnMV5vWgn65OMq1644IfaZVuvybbdSr9ZdeBkQa1gJ8V
CbgqIE6IBeEmDSnmxIPCJSFxkLSmeyWs9bdTrr14lUyDxEOG5Xswsr39sjkedJ1U
pAuOSNnOd5oWlkRhIjxVACuGp1CW0JzlHEnvREPOqnTH5q1gJM9xbopF2/Xh7yVu
sIWiLA9bmnUiBxpnfLoFdP1YCImjsfo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:38:10 2025 by rpki-client