Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa
File:                     e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa (raw, json)
Hash identifier:          dRCKBGSzpdP9wcRxbSRg9vEkAgwxphK+QeDAXR08pCQ=
Subject key identifier:   83:4F:31:F1:CD:FE:87:E9:A1:38:CA:BE:69:EB:0E:3D:BC:7C:31:B3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB410833F379A8F8BB830740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        70.106.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:08:33:f3:79:a8:f8:bb:83:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=9556b9dd-8f40-4bce-8eac-e6012d8a4004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:07:a4:e9:da:67:30:24:88:d4:cb:12:47:
                    b8:35:eb:93:b9:60:bd:a2:24:a7:3f:3e:81:11:f3:
                    fb:78:18:dc:f8:d3:bf:f5:c2:18:bc:d8:8d:7d:42:
                    7a:46:f0:d3:4e:76:54:8d:e7:67:63:e5:d7:8f:e8:
                    85:0a:8e:e9:18:ad:08:df:ee:ce:33:0c:37:b3:63:
                    d8:5b:e4:62:53:90:5d:ad:0b:19:de:96:a1:11:d7:
                    62:89:78:ac:de:b5:5f:3c:67:34:28:03:9f:97:18:
                    8d:e4:11:cd:d7:24:e9:3e:86:66:4b:90:0b:e5:83:
                    1e:93:84:cc:d9:df:f6:1a:49:37:61:3d:c8:45:99:
                    25:ab:11:8a:4c:74:83:7d:1e:52:a6:40:96:fe:79:
                    c0:d0:e4:fe:4c:b2:f3:17:de:5f:0c:5b:7a:46:90:
                    85:c5:6a:d7:08:36:b8:a2:52:e5:b7:6c:02:87:60:
                    ae:4f:f2:ec:56:72:70:3c:f5:8b:98:6e:07:16:78:
                    9f:f8:2a:fc:c9:77:e6:1c:32:5e:23:ad:6b:1c:03:
                    bc:fb:a7:63:4f:2b:1f:a5:27:0e:3b:9a:cf:88:59:
                    7f:0b:b2:f6:31:fd:51:a3:51:58:08:b5:58:cc:f4:
                    48:91:06:26:e3:25:62:7e:b0:a5:08:ba:26:b1:3b:
                    0e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4F:31:F1:CD:FE:87:E9:A1:38:CA:BE:69:EB:0E:3D:BC:7C:31:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.106.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:7d:f2:a7:bd:cd:86:35:5a:4b:31:5d:b8:0b:08:ff:e3:82:
         87:03:9b:23:56:5f:38:4f:eb:d4:5e:de:86:9a:eb:30:db:ff:
         3b:54:dc:9c:25:e8:97:c6:29:cf:f8:f5:42:d9:39:0c:58:4d:
         69:47:13:ff:47:6c:ce:6f:73:7e:82:3a:d9:c8:03:a6:af:ae:
         99:92:fe:26:da:4a:d6:62:36:96:75:48:7e:94:e4:db:c7:7f:
         83:29:4d:c1:62:ee:c3:09:45:38:73:c7:50:08:7e:92:4e:30:
         2b:b1:1e:fe:7e:2b:47:68:ef:48:d4:9d:52:20:15:00:cc:b1:
         70:37:91:86:5e:82:15:06:e5:65:75:1b:87:cd:92:ff:9f:75:
         22:ed:76:c7:3b:5c:ba:a7:81:ea:a1:0f:20:ee:8a:4b:9d:6f:
         ac:a0:53:6a:aa:46:d1:0c:c8:6c:51:62:7c:cb:7e:8e:b6:4e:
         74:ae:28:b9:75:fb:bf:1a:d8:ab:d6:ae:a6:ec:f0:c0:5b:aa:
         1f:ed:b9:39:d9:a4:f8:2c:4a:24:99:4e:89:ff:cc:cd:07:2d:
         84:9a:ce:9a:5e:cb:53:a2:65:c7:87:52:ff:66:f9:40:07:a4:
         ed:24:22:e4:ec:35:19:23:5b:89:9e:c3:b6:b8:c1:ad:d3:cc:
         fe:90:83:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQgz83mo+LuDB0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
OTU1NmI5ZGQtOGY0MC00YmNlLThlYWMtZTYwMTJkOGE0MDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUgHpOnaZzAkiNTLEke4NeuTuWC9oiSnPz6B
EfP7eBjc+NO/9cIYvNiNfUJ6RvDTTnZUjednY+XXj+iFCo7pGK0I3+7OMww3s2PY
W+RiU5BdrQsZ3pahEddiiXis3rVfPGc0KAOflxiN5BHN1yTpPoZmS5AL5YMek4TM
2d/2Gkk3YT3IRZklqxGKTHSDfR5SpkCW/nnA0OT+TLLzF95fDFt6RpCFxWrXCDa4
olLlt2wCh2CuT/LsVnJwPPWLmG4HFnif+Cr8yXfmHDJeI61rHAO8+6djTysfpScO
O5rPiFl/C7L2Mf1Ro1FYCLVYzPRIkQYm4yVifrClCLomsTsOMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFINPMfHN/ofpoTjKvmnrDj28fDGzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTNlZTU4YjktZTAxZC0z
YWFhLThiNGMtYzlhYTdiMmY5OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERmoQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABF98qe9zYY1WksxXbgLCP/jgocDmyNWXzhP69Re3oaa6zDb/ztU3Jwl
6JfGKc/49ULZOQxYTWlHE/9HbM5vc36COtnIA6avrpmS/ibaStZiNpZ1SH6U5NvH
f4MpTcFi7sMJRThzx1AIfpJOMCuxHv5+K0do70jUnVIgFQDMsXA3kYZeghUG5WV1
G4fNkv+fdSLtdsc7XLqngeqhDyDuikudb6ygU2qqRtEMyGxRYnzLfo62TnSuKLl1
+78a2KvWrqbs8MBbqh/tuTnZpPgsSiSZTon/zM0HLYSazppey1OiZceHUv9m+UAH
pO0kIuTsNRkjW4mew7a4wa3TzP6Qg+E=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:38 2025 by rpki-client