Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa
File:                     d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa (raw, json)
Hash identifier:          hbuK9+N+kWxLljwg7938lI/L/c9MD7315Ni60Y5/YCM=
Subject key identifier:   C6:CD:36:49:D2:CB:4A:10:E6:A7:2A:90:F6:E1:1C:28:EF:A1:AC:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB40F116656A28973475D000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        70.105.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:f1:16:65:6a:28:97:34:75:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=a25af81d-714e-4a0e-8c56-f6bc43925cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fc:47:63:ee:12:40:e4:98:96:72:d9:12:ab:
                    fe:57:9e:17:be:b9:33:7b:a0:da:8d:39:54:58:04:
                    3f:5c:8e:28:8c:1f:a4:af:21:3f:6d:a8:4d:bd:cc:
                    b4:df:ca:fd:48:1f:e1:c0:48:8c:6b:5a:e4:2d:b9:
                    c9:c0:65:e3:48:21:c8:01:93:7f:2d:f5:f7:54:dd:
                    c9:4a:b7:02:d6:c5:9c:d3:e4:bf:75:84:e5:f6:ec:
                    50:46:fc:cb:69:ee:7b:0e:11:5d:3c:88:2f:72:10:
                    22:84:16:01:28:bd:98:52:21:27:4b:fd:33:75:86:
                    70:e3:38:9b:51:40:a3:0c:06:09:34:7f:3b:1a:3f:
                    75:74:65:3b:5f:ee:9c:43:f0:05:82:24:61:72:b6:
                    00:f7:0f:f5:d5:15:b1:d6:99:7e:13:21:ba:ae:96:
                    f5:b4:22:8e:bc:9b:fc:dc:3a:05:d6:c0:5e:36:08:
                    e5:4c:a8:c8:1e:5d:42:f0:45:e0:4e:13:92:57:7b:
                    07:fb:3e:77:f6:1b:b4:14:7c:09:77:7c:09:75:80:
                    8f:3e:c2:56:b5:e0:29:99:eb:97:5a:1a:a3:53:99:
                    2e:90:b8:f3:dc:d8:4f:7d:9d:12:62:72:ae:bd:93:
                    95:ed:44:02:2a:4f:ba:c1:d7:39:c0:3b:fc:e6:9d:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CD:36:49:D2:CB:4A:10:E6:A7:2A:90:F6:E1:1C:28:EF:A1:AC:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.105.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:86:ea:18:c6:f1:b9:4a:a1:d5:2f:97:b6:ae:45:ee:48:be:
         7c:8a:f8:03:ac:7c:22:fb:84:bb:96:6c:83:d9:e8:fc:d4:fd:
         bd:bc:63:33:3b:32:c3:a4:a0:84:1f:9f:22:11:f2:17:7b:0e:
         a7:6e:0b:16:67:9d:49:89:68:64:01:80:5e:c9:52:3f:63:94:
         0b:0e:12:d4:61:36:9e:22:f8:c2:89:e3:2e:65:0e:0e:3c:7b:
         55:84:05:d6:ae:3d:a6:cb:f3:6a:da:53:14:dd:33:7c:af:92:
         64:03:0a:45:23:d7:f7:3d:c7:6a:30:f3:fc:67:5b:49:0f:4a:
         76:0a:af:f6:48:63:aa:1f:9c:b2:1e:20:a4:a4:04:2b:59:c6:
         91:c0:f7:08:ad:19:e7:01:e1:d0:76:24:8f:00:eb:a8:fc:4f:
         8e:e5:da:ef:a9:cd:23:40:e1:7e:c4:61:78:d2:9f:ce:12:0e:
         5c:52:10:fe:72:24:a2:26:ae:b1:3e:82:f1:53:e2:fa:f5:32:
         79:3a:15:b6:d1:3c:7a:b7:07:65:3d:c4:4c:bb:74:13:f7:b6:
         7d:84:34:bb:7f:28:dd:e2:47:5c:02:06:de:98:7e:f0:f8:63:
         a3:94:7f:89:86:73:ce:5b:52:22:76:52:45:5d:3c:62:a9:d0:
         e1:29:20:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPEWZWoolzR10AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
YTI1YWY4MWQtNzE0ZS00YTBlLThjNTYtZjZiYzQzOTI1Y2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vxHY+4SQOSYlnLZEqv+V54Xvrkze6DajTlU
WAQ/XI4ojB+kryE/bahNvcy038r9SB/hwEiMa1rkLbnJwGXjSCHIAZN/LfX3VN3J
SrcC1sWc0+S/dYTl9uxQRvzLae57DhFdPIgvchAihBYBKL2YUiEnS/0zdYZw4zib
UUCjDAYJNH87Gj91dGU7X+6cQ/AFgiRhcrYA9w/11RWx1pl+EyG6rpb1tCKOvJv8
3DoF1sBeNgjlTKjIHl1C8EXgThOSV3sH+z539hu0FHwJd3wJdYCPPsJWteApmeuX
WhqjU5kukLjz3NhPfZ0SYnKuvZOV7UQCKk+6wdc5wDv85p3PCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMbNNknSy0oQ5qcqkPbhHCjvoazIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDYyZGRmZGEtN2Q2OS0z
ZGFmLWJhZTEtYjgxNzhkYTM3ZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARmmFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK6G6hjG8blKodUvl7auRe5IvnyK+AOsfCL7hLuWbIPZ6PzU/b28YzM7
MsOkoIQfnyIR8hd7DqduCxZnnUmJaGQBgF7JUj9jlAsOEtRhNp4i+MKJ4y5lDg48
e1WEBdauPabL82raUxTdM3yvkmQDCkUj1/c9x2ow8/xnW0kPSnYKr/ZIY6ofnLIe
IKSkBCtZxpHA9witGecB4dB2JI8A66j8T47l2u+pzSNA4X7EYXjSn84SDlxSEP5y
JKImrrE+gvFT4vr1Mnk6FbbRPHq3B2U9xEy7dBP3tn2ENLt/KN3iR1wCBt6YfvD4
Y6OUf4mGc85bUiJ2UkVdPGKp0OEpIOo=
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:23 2025 by rpki-client