Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/18fb07f7-a249-3be9-92a5-6fcce55d697b.roa
File:                     18fb07f7-a249-3be9-92a5-6fcce55d697b.roa (raw, json)
Hash identifier:          CQtSU3npk+F1oCwt8q+FSzGdTbm1ax/QBY/mJ19f9sA=
Subject key identifier:   7A:CB:EC:1D:E9:DB:41:E4:03:D1:38:6A:63:A4:EB:1A:AA:4E:C9:B8
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584A8C70E91DE71D985F55E59E00
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/18fb07f7-a249-3be9-92a5-6fcce55d697b.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     18934
IP address blocks:        142.202.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:e9:1d:e7:1d:98:5f:55:e5:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=1751dae1-d6fa-4826-849f-29af34b44ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:a6:df:d1:43:32:ed:cb:5e:cb:ff:a4:6e:
                    1a:49:c2:34:6d:4a:97:3e:7f:81:9c:ea:1b:f4:f3:
                    17:32:e4:38:79:ee:6f:1c:9e:25:49:51:0a:34:01:
                    1a:14:44:77:99:2b:ec:58:94:71:d3:ed:1e:17:2c:
                    40:ca:df:c4:c0:49:b0:f0:1b:f4:1f:64:a4:a5:12:
                    fb:f9:3d:c5:bf:dd:d9:32:5b:d9:f2:d1:64:05:ff:
                    f3:49:ce:cb:cc:a4:4c:36:dc:bd:cc:49:77:6c:4b:
                    23:06:97:e9:ee:e3:01:26:b0:84:21:5a:ff:29:35:
                    11:8f:4f:b4:3c:94:82:f6:8c:9b:88:ef:8a:6a:26:
                    dd:4d:b2:b7:e0:f2:61:b7:8f:1a:ec:6f:56:21:9e:
                    e8:f9:13:19:8a:1c:09:b0:e8:ca:3c:bd:05:d5:a6:
                    9b:77:e2:73:5b:ea:6e:d5:9d:c3:73:8e:bb:4e:ed:
                    43:14:e2:f9:36:e0:75:f6:d9:3a:a3:42:59:34:2c:
                    c2:21:e7:9a:69:ee:9c:4a:cf:da:c4:55:be:4f:75:
                    1b:c1:64:13:fb:3c:1f:af:66:15:f4:65:e7:0e:f3:
                    43:74:5e:a5:4f:45:50:3b:29:09:2d:54:a4:96:80:
                    03:da:8d:08:65:5d:64:7f:5f:0c:37:e6:b4:79:98:
                    a1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CB:EC:1D:E9:DB:41:E4:03:D1:38:6A:63:A4:EB:1A:AA:4E:C9:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/18fb07f7-a249-3be9-92a5-6fcce55d697b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8a:7c:f9:d3:6f:8b:74:7d:4c:4f:cf:02:d1:4f:78:ed:98:
         e5:f5:5c:80:a4:23:53:d8:f2:69:8d:dd:2c:2c:6e:b7:5c:3b:
         95:be:e2:24:53:86:4e:45:a1:33:bd:48:c6:07:05:06:23:4d:
         c7:47:52:35:d2:90:2c:58:f9:79:d9:f9:8f:6b:15:23:e4:99:
         7d:89:70:6e:cd:5d:95:6b:82:f5:ff:65:a8:f5:2d:eb:ce:ff:
         32:b7:ff:1b:81:08:9b:27:a6:b5:14:ab:ba:79:6b:0f:94:a4:
         23:1d:68:0c:03:bc:75:6c:36:42:b3:f8:f3:fd:bb:4f:c5:84:
         45:99:c1:48:a1:bb:8e:67:c4:fa:31:d8:cf:85:e7:16:6f:22:
         e1:b2:f3:89:c2:4a:c8:d2:17:e9:31:0d:6a:0e:30:30:c9:20:
         62:8c:4c:f1:35:cd:8d:6d:a5:8c:b3:99:7c:19:04:0b:f0:f9:
         0b:99:c7:fe:8d:5e:93:6f:67:f5:3d:6e:df:47:6d:12:9a:ca:
         af:fe:e8:e9:7c:7c:be:53:37:39:a4:08:e7:30:a2:bc:45:b2:
         6d:91:4b:ef:75:47:f9:4f:16:4d:be:73:16:73:4d:63:6a:f2:
         a7:ee:5e:75:c5:97:f6:1d:bc:97:1b:88:49:77:ff:36:fe:5a:
         ba:b9:54:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcOkd5x2YX1XlngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ5MjEzZjctMjhlMi00ZmExLTg0OTEtNzhlMzU4MGNk
YjdmMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk
MTc1MWRhZTEtZDZmYS00ODI2LTg0OWYtMjlhZjM0YjQ0Y2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9um39FDMu3LXsv/pG4aScI0bUqXPn+BnOob
9PMXMuQ4ee5vHJ4lSVEKNAEaFER3mSvsWJRx0+0eFyxAyt/EwEmw8Bv0H2SkpRL7
+T3Fv93ZMlvZ8tFkBf/zSc7LzKRMNty9zEl3bEsjBpfp7uMBJrCEIVr/KTURj0+0
PJSC9oybiO+KaibdTbK34PJht48a7G9WIZ7o+RMZihwJsOjKPL0F1aabd+JzW+pu
1Z3Dc467Tu1DFOL5NuB19tk6o0JZNCzCIeeaae6cSs/axFW+T3UbwWQT+zwfr2YV
9GXnDvNDdF6lT0VQOykJLVSkloAD2o0IZV1kf18MN+a0eZihdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHrL7B3p20HkA9E4amOk6xqqTsm4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNDky
MTNmNy0yOGUyLTRmYTEtODQ5MS03OGUzNTgwY2RiN2YvMThmYjA3ZjctYTI0OS0z
YmU5LTkyYTUtNmZjY2U1NWQ2OTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzQ5MjEzZjctMjhlMi00ZmExLTg0
OTEtNzhlMzU4MGNkYjdmLzM0OTIxM2Y3LTI4ZTItNGZhMS04NDkxLTc4ZTM1ODBj
ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUl16fqcxh1Y3cB+3gRH1f3Ykt9AMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNDkyMTNmNy0yOGUyLTRmYTEtODQ5MS03OGUz
NTgwY2RiN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjspGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2KfPnTb4t0fUxPzwLRT3jtmOX1XICkI1PY8mmN3SwsbrdcO5W+4iRT
hk5FoTO9SMYHBQYjTcdHUjXSkCxY+XnZ+Y9rFSPkmX2JcG7NXZVrgvX/Zaj1LevO
/zK3/xuBCJsnprUUq7p5aw+UpCMdaAwDvHVsNkKz+PP9u0/FhEWZwUihu45nxPox
2M+F5xZvIuGy84nCSsjSF+kxDWoOMDDJIGKMTPE1zY1tpYyzmXwZBAvw+QuZx/6N
XpNvZ/U9bt9HbRKayq/+6Ol8fL5TNzmkCOcworxFsm2RS+91R/lPFk2+cxZzTWNq
8qfuXnXFl/YdvJcbiEl3/zb+Wrq5VCs=
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:34:01 2025 by rpki-client