Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8088853-ffa0-3fe4-83b6-aad75caef4cc.roa
File:                     b8088853-ffa0-3fe4-83b6-aad75caef4cc.roa (raw, json)
Hash identifier:          0K/Tjazm8Q8DUj5+QaOfZfWdrInmrXTZJpgEhUDtqFk=
Subject key identifier:   05:76:3B:9E:01:7C:12:AD:8A:BC:F8:72:3A:64:2F:2E:D8:DB:C5:FC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849A78523A41468A9C73DFFE100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8088853-ffa0-3fe4-83b6-aad75caef4cc.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        70.32.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:23:a4:14:68:a9:c7:3d:ff:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=ae90d9ff-022b-4335-87b3-146740f6fab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3b:c1:34:86:9b:40:47:b2:56:26:4e:af:e5:
                    9f:93:3a:62:07:dd:57:ce:27:df:a7:ba:d0:8b:c6:
                    f9:71:79:ce:2b:ba:0b:69:6f:ea:f3:68:f1:f8:89:
                    b8:8b:b8:54:a7:dc:cf:b4:42:8f:60:4e:fe:bb:4e:
                    8b:d1:d9:b6:87:a3:c8:65:53:fc:fa:01:d6:d4:b4:
                    e8:bd:14:3e:e5:8b:db:c4:1b:28:c0:ed:8c:03:05:
                    b7:d5:78:06:d1:cd:b7:bb:e8:11:23:57:ff:b2:7e:
                    d2:bc:fd:0b:1a:c1:d1:e2:07:a2:3c:7e:49:69:b5:
                    46:18:1a:2b:ff:e3:d5:2a:9c:12:36:15:48:79:cb:
                    86:2e:7b:d2:8f:82:a0:1a:81:0a:28:0d:03:b3:f6:
                    21:9f:5a:eb:fb:09:d0:75:53:44:c4:a2:72:40:f6:
                    17:de:29:e6:00:61:bc:1c:a9:10:37:85:48:cf:5e:
                    c1:89:92:9f:a2:6c:ff:27:a9:87:b2:52:f6:2c:1e:
                    a9:08:e5:c8:8c:35:9d:71:a9:51:77:11:47:f9:57:
                    ff:68:dd:f3:3e:8d:9a:7a:5f:d7:ea:13:83:ac:08:
                    db:a5:87:5c:c5:72:07:0c:5b:bf:ae:29:fb:43:c9:
                    17:6c:f2:57:53:9c:89:f3:35:1a:bb:81:2e:84:3b:
                    ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:76:3B:9E:01:7C:12:AD:8A:BC:F8:72:3A:64:2F:2E:D8:DB:C5:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8088853-ffa0-3fe4-83b6-aad75caef4cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ad:a7:bd:c1:91:4c:51:5e:e7:55:8b:54:9e:07:e2:84:88:
         3a:60:12:d7:f4:d0:94:83:d3:c4:38:fc:28:72:72:79:dd:36:
         57:cf:08:09:ed:b6:ad:72:6f:f0:56:f1:8e:08:ac:3e:51:63:
         f2:10:ca:23:44:91:84:9f:d6:25:22:83:0d:60:d0:3d:22:d5:
         57:7a:42:db:1b:49:17:87:53:37:2f:77:98:77:06:81:ad:6d:
         43:58:2f:91:fc:2f:4c:68:b6:9c:78:60:ef:68:a2:ed:17:be:
         8b:48:7f:26:7e:b7:50:af:85:f0:44:ae:df:9a:dc:ee:c4:39:
         92:85:27:cb:9a:b1:f0:51:f3:b3:9e:ad:09:d4:db:4e:c7:1d:
         95:27:f0:27:79:08:4e:0e:cd:ce:3c:2a:0a:6d:11:1e:5b:20:
         89:7a:4f:1e:50:8b:62:42:70:89:6a:01:1a:d6:87:b9:fb:22:
         6f:d3:75:e3:52:64:77:b0:66:11:38:33:a6:d5:98:1b:88:6a:
         9d:35:a9:1b:9a:7b:70:6c:a2:64:d3:8d:f2:48:fc:26:97:7c:
         43:23:41:80:fd:f0:2d:67:46:7d:59:40:0e:c9:42:8b:86:be:
         b1:a4:e7:14:9a:3e:5f:6e:30:83:75:e4:1e:3d:10:3f:2c:8e:
         8f:3a:65:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSOkFGipxz3/4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
YWU5MGQ5ZmYtMDIyYi00MzM1LTg3YjMtMTQ2NzQwZjZmYWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTvBNIabQEeyViZOr+WfkzpiB91Xziffp7rQ
i8b5cXnOK7oLaW/q82jx+Im4i7hUp9zPtEKPYE7+u06L0dm2h6PIZVP8+gHW1LTo
vRQ+5YvbxBsowO2MAwW31XgG0c23u+gRI1f/sn7SvP0LGsHR4geiPH5JabVGGBor
/+PVKpwSNhVIecuGLnvSj4KgGoEKKA0Ds/Yhn1rr+wnQdVNExKJyQPYX3inmAGG8
HKkQN4VIz17BiZKfomz/J6mHslL2LB6pCOXIjDWdcalRdxFH+Vf/aN3zPo2ael/X
6hODrAjbpYdcxXIHDFu/rin7Q8kXbPJXU5yJ8zUau4EuhDvvAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAV2O54BfBKtirz4cjpkLy7Y28X8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjgwODg4NTMtZmZhMC0z
ZmU0LTgzYjYtYWFkNzVjYWVmNGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIOtp73BkUxRXudVi1SeB+KEiDpgEtf00JSD08Q4/ChycnndNlfPCAnt
tq1yb/BW8Y4IrD5RY/IQyiNEkYSf1iUigw1g0D0i1Vd6QtsbSReHUzcvd5h3BoGt
bUNYL5H8L0xotpx4YO9oou0XvotIfyZ+t1CvhfBErt+a3O7EOZKFJ8uasfBR87Oe
rQnU207HHZUn8Cd5CE4Ozc48KgptER5bIIl6Tx5Qi2JCcIlqARrWh7n7Im/TdeNS
ZHewZhE4M6bVmBuIap01qRuae3BsomTTjfJI/CaXfEMjQYD98C1nRn1ZQA7JQouG
vrGk5xSaPl9uMIN15B49ED8sjo86ZVw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:17:32 2025 by rpki-client