Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/8b665f2e-7bdd-39e5-a76f-6d8ce93e8501.roa
File:                     8b665f2e-7bdd-39e5-a76f-6d8ce93e8501.roa (raw, json)
Hash identifier:          b2tWIt9Xf6YXQ7z7wX0MIEygbVGxqdeYZoXARLZRQfc=
Subject key identifier:   E8:57:98:DB:EB:90:0E:94:D6:A0:D9:B9:74:E4:2C:93:30:D8:C7:AB
Certificate issuer:       /CN=70b47ad9-010b-4764-8cef-4d3e66669003
Certificate serial:       010D0C9F43285849C904DFF245D3361B14EAB200
Authority key identifier: 37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/8b665f2e-7bdd-39e5-a76f-6d8ce93e8501.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        168.151.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:df:f2:45:d3:36:1b:14:ea:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b47ad9-010b-4764-8cef-4d3e66669003
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=dfd4d9b9-7ccf-48e7-936a-152bee93d910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:c5:ea:6f:07:95:7b:bf:ae:0f:87:2e:93:
                    52:0e:20:b8:f7:92:53:72:1c:8d:99:21:df:7f:a4:
                    d7:02:b5:40:7f:be:e4:06:21:a9:4c:86:0a:88:14:
                    b3:19:0d:73:89:16:df:64:7b:c4:d7:77:24:b9:bd:
                    ad:50:ca:72:6b:17:ad:21:24:cc:f7:cc:de:c8:78:
                    90:65:14:a7:fc:31:16:d0:42:16:de:ac:7b:44:e6:
                    c6:09:98:88:35:27:42:67:cd:83:2c:a2:8a:ea:90:
                    1d:5e:4b:9e:91:c3:62:e2:0b:46:3d:eb:16:f3:b9:
                    fe:94:75:ec:c0:03:db:e6:32:9a:72:d3:f3:b2:d5:
                    9d:49:59:7c:d6:de:03:97:11:75:04:14:7e:c5:85:
                    80:52:80:e7:78:3f:ae:81:c3:82:29:de:a2:5e:d6:
                    a8:8f:5c:77:17:f4:16:ea:5b:14:9a:46:18:61:82:
                    10:5f:4b:8b:61:c1:39:bb:29:61:6e:64:99:bb:2b:
                    40:5a:88:2e:b5:e9:75:c4:05:3c:6c:65:5c:fb:f7:
                    fb:83:7f:5a:13:fa:a1:9a:4b:ad:85:67:87:a7:e4:
                    7f:14:0b:8d:83:e7:8a:64:80:a9:b1:a1:4c:e7:fb:
                    37:58:b2:ab:e7:74:b2:0b:44:ce:eb:df:12:2e:51:
                    ef:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:57:98:DB:EB:90:0E:94:D6:A0:D9:B9:74:E4:2C:93:30:D8:C7:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/8b665f2e-7bdd-39e5-a76f-6d8ce93e8501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl

            X509v3 Authority Key Identifier:
                keyid:37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:0d:02:b1:be:a3:1f:71:7b:78:b0:8b:99:19:60:f2:01:
         f8:9f:06:de:41:54:1a:bf:39:b0:ab:47:e9:96:4a:6e:88:42:
         7b:ea:a2:28:2c:64:b9:2f:50:86:59:ca:aa:de:0d:e8:74:d1:
         7c:4f:1d:c4:20:c4:e8:a8:8b:0e:68:2d:a3:65:67:e6:ad:c5:
         f7:c5:37:00:ef:70:fe:89:4b:1f:5f:44:81:a9:d9:3a:8c:0f:
         c8:8e:ca:9a:6a:cd:bc:3a:9a:eb:06:7b:4d:ba:72:26:99:00:
         4a:0c:d7:34:11:b1:b9:3a:6d:b2:5e:29:16:03:3c:21:9e:52:
         c4:31:e3:0b:69:62:e9:11:d7:a9:b4:9d:db:c4:5a:0a:a8:13:
         07:61:96:52:2f:75:67:08:ad:cc:05:76:b0:80:e3:c0:e8:ad:
         b5:16:89:f6:a2:ef:44:b4:b2:1d:6b:eb:e2:b0:6e:43:0b:a0:
         e0:f6:87:f7:28:c4:4a:34:f3:c4:7b:96:78:dc:ba:d9:55:f3:
         83:9c:34:85:cc:76:f3:2a:70:79:98:36:29:4b:24:0f:00:2e:
         8a:91:b2:a8:63:8e:02:bf:ec:b8:e9:dd:05:dd:d6:26:60:8b:
         40:24:0d:1d:ab:fd:47:c0:48:b1:e4:41:23:16:4b:65:7b:a0:
         15:fb:49:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBN/yRdM2GxTqsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzBiNDdhZDktMDEwYi00NzY0LThjZWYtNGQzZTY2NjY5
MDAzMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
ZGZkNGQ5YjktN2NjZi00OGU3LTkzNmEtMTUyYmVlOTNkOTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22PF6m8HlXu/rg+HLpNSDiC495JTchyNmSHf
f6TXArVAf77kBiGpTIYKiBSzGQ1ziRbfZHvE13ckub2tUMpyaxetISTM98zeyHiQ
ZRSn/DEW0EIW3qx7RObGCZiINSdCZ82DLKKK6pAdXkuekcNi4gtGPesW87n+lHXs
wAPb5jKactPzstWdSVl81t4DlxF1BBR+xYWAUoDneD+ugcOCKd6iXtaoj1x3F/QW
6lsUmkYYYYIQX0uLYcE5uylhbmSZuytAWogutel1xAU8bGVc+/f7g39aE/qhmkut
hWeHp+R/FAuNg+eKZICpsaFM5/s3WLKr53SyC0TO698SLlHvYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOhXmNvrkA6U1qDZuXTkLJMw2MerMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MGI0
N2FkOS0wMTBiLTQ3NjQtOGNlZi00ZDNlNjY2NjkwMDMvOGI2NjVmMmUtN2JkZC0z
OWU1LWE3NmYtNmQ4Y2U5M2U4NTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzBiNDdhZDktMDEwYi00NzY0LThj
ZWYtNGQzZTY2NjY5MDAzLzcwYjQ3YWQ5LTAxMGItNDc2NC04Y2VmLTRkM2U2NjY2
OTAwMy5jcmwwHwYDVR0jBBgwFoAUN1Y1CNwJk7iJa//yK5+gRAB4BrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MGI0N2FkOS0wMTBiLTQ3NjQtOGNlZi00ZDNl
NjY2NjkwMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJceMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADo5DQKxvqMfcXt4sIuZGWDyAfifBt5BVBq/ObCrR+mWSm6IQnvqoigs
ZLkvUIZZyqreDeh00XxPHcQgxOioiw5oLaNlZ+atxffFNwDvcP6JSx9fRIGp2TqM
D8iOyppqzbw6musGe026ciaZAEoM1zQRsbk6bbJeKRYDPCGeUsQx4wtpYukR16m0
ndvEWgqoEwdhllIvdWcIrcwFdrCA48DorbUWifai70S0sh1r6+KwbkMLoOD2h/co
xEo088R7lnjcutlV84OcNIXMdvMqcHmYNilLJA8ALoqRsqhjjgK/7Ljp3QXd1iZg
i0AkDR2r/UfASLHkQSMWS2V7oBX7SdY=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:17:31 2025 by rpki-client