Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99e36647-3bff-3f6e-a4e3-4bbe667504aa.roa
File:                     99e36647-3bff-3f6e-a4e3-4bbe667504aa.roa (raw, json)
Hash identifier:          SbbdNZafToTMf2t5+AaOSO5pL2eG2d9gJNom/6cTKss=
Subject key identifier:   B3:B3:6B:32:B0:FC:9A:2C:88:01:E9:4F:FD:77:D5:2C:C4:3A:4D:60
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA8526DFF9661CD88ABDFEC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99e36647-3bff-3f6e-a4e3-4bbe667504aa.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        70.104.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:26:df:f9:66:1c:d8:8a:bd:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=2391cb90-6a60-4dd7-a980-2dff0ec53824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ba:ea:d3:e2:aa:20:4b:55:70:4b:e8:2f:a5:
                    b0:28:45:98:5c:dc:21:4a:97:26:aa:bc:ed:9d:c1:
                    c5:a3:ad:eb:0b:1b:41:54:3d:2c:9c:7f:44:57:1b:
                    9b:8b:51:81:87:bb:31:49:27:d1:3b:75:1d:66:b0:
                    3f:00:e8:4f:39:62:1f:63:27:a0:83:81:0e:c9:2b:
                    42:e3:3a:68:b5:b7:1a:f7:7f:0a:2b:5e:d2:ef:af:
                    89:a7:f7:5f:82:ec:fd:c8:e0:9b:e9:3f:2b:aa:43:
                    eb:6e:06:d6:49:dc:8b:9a:8a:d0:df:1c:fa:ab:d8:
                    42:d0:43:a7:ea:9d:bc:01:3b:62:0e:76:9d:95:93:
                    ae:cd:09:1d:e9:a3:57:14:cf:09:cf:f2:85:d8:7e:
                    0f:e9:38:b5:d2:1e:0e:90:94:3f:b9:ea:b4:d9:7d:
                    fb:8a:54:85:1f:72:e8:ab:28:57:9b:fe:2c:b0:82:
                    8e:94:55:5a:79:45:d4:31:9e:f4:6f:85:3b:90:ce:
                    d1:ba:5f:74:ea:af:1f:dc:ac:0a:98:ce:3e:8a:fe:
                    02:35:51:01:ef:bc:d3:68:81:01:25:88:fe:a6:b2:
                    66:49:a5:32:76:14:a0:cf:28:4d:dd:5a:ac:05:33:
                    b5:d6:13:32:36:6d:da:b1:9a:a1:1a:1b:ab:fa:45:
                    12:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B3:6B:32:B0:FC:9A:2C:88:01:E9:4F:FD:77:D5:2C:C4:3A:4D:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99e36647-3bff-3f6e-a4e3-4bbe667504aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.104.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:35:56:f8:6a:08:e5:db:55:8e:65:60:86:21:e2:c8:88:2e:
         9a:97:8b:06:44:fb:56:88:48:b2:4c:2c:48:64:db:ce:2b:1a:
         8d:7b:52:d8:5e:1a:42:a8:5a:1a:26:67:b7:04:c7:41:c5:63:
         6c:0c:b1:de:bb:03:ff:db:0c:a4:00:19:58:12:77:c9:33:33:
         e1:49:25:48:6d:56:ca:61:5a:99:3d:fe:85:77:b8:6f:4d:4b:
         df:65:8a:58:1b:98:41:3a:05:60:76:b3:df:7b:10:16:f2:00:
         38:e8:36:64:ec:29:ec:58:80:8b:8a:dc:2c:b7:cd:f4:a7:b8:
         8c:42:a9:7e:75:19:39:f8:2f:84:da:3c:85:a9:4c:cd:91:e5:
         4e:96:7d:b5:c9:b8:e9:cf:b6:07:58:4a:60:ab:a1:41:4f:d5:
         88:d3:b9:a6:e1:01:e5:e7:9c:61:56:b6:32:e6:d6:ae:fe:95:
         e8:5a:be:9e:0a:a4:d1:1c:22:29:9a:bb:87:6f:ed:d3:86:04:
         15:9c:8f:e6:47:ac:a4:ab:46:f0:fd:88:83:e3:ed:67:8d:6d:
         36:d5:d2:89:b6:62:d7:54:dc:73:f1:07:09:e8:38:4b:cb:58:
         cc:d1:e6:ea:bd:db:02:08:94:05:d5:b8:6b:0c:8e:c9:2d:ce:
         60:70:f3:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhSbf+WYc2Iq9/sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk
MjM5MWNiOTAtNmE2MC00ZGQ3LWE5ODAtMmRmZjBlYzUzODI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrrq0+KqIEtVcEvoL6WwKEWYXNwhSpcmqrzt
ncHFo63rCxtBVD0snH9EVxubi1GBh7sxSSfRO3UdZrA/AOhPOWIfYyegg4EOyStC
4zpotbca938KK17S76+Jp/dfguz9yOCb6T8rqkPrbgbWSdyLmorQ3xz6q9hC0EOn
6p28ATtiDnadlZOuzQkd6aNXFM8Jz/KF2H4P6Ti10h4OkJQ/ueq02X37ilSFH3Lo
qyhXm/4ssIKOlFVaeUXUMZ70b4U7kM7Rul906q8f3KwKmM4+iv4CNVEB77zTaIEB
JYj+prJmSaUydhSgzyhN3VqsBTO11hMyNm3asZqhGhur+kUSuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOzazKw/JosiAHpT/131SzEOk1gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTllMzY2NDctM2JmZi0z
ZjZlLWE0ZTMtNGJiZTY2NzUwNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRmigMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABg1VvhqCOXbVY5lYIYh4siILpqXiwZE+1aISLJMLEhk284rGo17Uthe
GkKoWhomZ7cEx0HFY2wMsd67A//bDKQAGVgSd8kzM+FJJUhtVsphWpk9/oV3uG9N
S99lilgbmEE6BWB2s997EBbyADjoNmTsKexYgIuK3Cy3zfSnuIxCqX51GTn4L4Ta
PIWpTM2R5U6WfbXJuOnPtgdYSmCroUFP1YjTuabhAeXnnGFWtjLm1q7+lehavp4K
pNEcIimau4dv7dOGBBWcj+ZHrKSrRvD9iIPj7WeNbTbV0om2YtdU3HPxBwnoOEvL
WMzR5uq92wIIlAXVuGsMjsktzmBw89o=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:57:54 2025 by rpki-client