Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a4314edb-6d37-3b27-907c-cb2b46b12a66.roa
File:                     a4314edb-6d37-3b27-907c-cb2b46b12a66.roa (raw, json)
Hash identifier:          Vo4+/LjFrAuI5oLwQBKJEkxZmui4wZnH7nEJ/CwhTB8=
Subject key identifier:   4B:A2:14:11:D5:DE:91:BC:6F:7B:AC:0D:A0:D1:EB:F8:6B:23:D7:2A
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849A4BA4C5B248F8135CDD2A000
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a4314edb-6d37-3b27-907c-cb2b46b12a66.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        170.114.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:4c:5b:24:8f:81:35:cd:d2:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=bbf8e967-1ff5-408b-9d75-4ca6589f470f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cd:21:83:fd:6c:8b:56:8f:6c:1d:be:05:ab:
                    72:f9:b3:d0:bd:0b:6d:24:31:8a:36:78:c9:22:be:
                    71:48:06:8b:ce:3d:7f:40:cc:39:1d:8a:b9:06:fb:
                    c3:0b:ce:23:af:8b:69:ab:60:25:dc:7d:bf:94:5c:
                    1f:47:e3:05:ab:41:b4:70:e8:0f:16:f8:85:0a:84:
                    c8:dd:cc:e4:6c:ef:a9:48:e6:13:a9:f2:5a:85:07:
                    03:87:5a:ad:19:c5:9b:83:34:3f:6a:e6:68:6a:10:
                    0c:9d:ed:94:83:6f:09:c4:c4:06:92:ff:1d:63:2e:
                    7b:3a:11:f4:cb:31:bc:4f:6f:26:30:98:26:61:e4:
                    85:86:f1:b6:d0:88:aa:8b:52:6c:f5:63:86:a4:1c:
                    9b:e1:2e:b8:15:9d:fd:ad:9d:8e:a2:e3:b2:bc:de:
                    61:4e:36:b0:2c:69:0e:54:ff:35:5a:86:b9:53:51:
                    a1:32:44:34:90:c1:7a:16:45:56:de:0b:9f:5f:ab:
                    79:46:a2:e5:11:49:e2:f2:f2:86:b3:0e:b4:0b:f9:
                    4f:2a:38:93:b9:76:1b:e4:7b:b2:bc:2d:26:88:e9:
                    f1:7e:90:2e:e8:81:b2:2c:8f:a4:03:3c:ce:b9:d1:
                    ba:24:b2:a7:b6:70:07:60:39:2b:0f:be:3e:0b:ba:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A2:14:11:D5:DE:91:BC:6F:7B:AC:0D:A0:D1:EB:F8:6B:23:D7:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a4314edb-6d37-3b27-907c-cb2b46b12a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:a2:b6:85:c4:e7:c4:82:f6:4a:2b:9a:06:47:25:47:58:3d:
         5f:65:07:e2:c2:c5:60:7e:28:4a:d7:da:59:f4:28:5b:c1:da:
         e6:81:34:6a:57:c2:c5:a1:eb:15:90:2b:3b:d8:74:e2:a2:52:
         0e:ed:c0:6c:7b:bd:ca:94:c7:42:be:1b:b8:b8:b8:4f:62:53:
         67:b6:96:dd:2d:d8:38:9b:b7:80:4e:6c:2b:9f:d5:a5:dd:79:
         66:f1:84:c4:6b:83:ed:f5:a5:7b:73:2f:28:a0:1f:8a:87:bd:
         8a:d8:6b:ce:31:51:95:93:a9:8a:17:33:42:f6:3a:81:62:0b:
         a5:3a:7d:0b:1f:b6:38:c1:5b:fa:cb:8b:67:41:cc:73:8b:08:
         64:e6:53:31:bc:21:cd:38:0d:8c:b5:eb:e8:83:c1:36:2e:d0:
         e2:92:c9:18:33:e6:99:58:80:48:70:56:cc:c3:64:a7:7c:db:
         47:a5:ad:70:34:6a:07:bf:32:84:01:f2:19:78:5f:dd:d1:d0:
         01:ef:76:08:f8:39:72:9c:4f:da:25:a9:b8:d0:08:dc:23:a7:
         7c:11:eb:ba:dc:d3:97:d8:dd:57:01:ee:07:41:5a:5a:33:0d:
         74:73:5d:a7:e8:8a:f9:a9:b8:31:1b:c0:27:9a:5f:46:61:2e:
         c2:c8:e7:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukxbJI+BNc3SoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
YmJmOGU5NjctMWZmNS00MDhiLTlkNzUtNGNhNjU4OWY0NzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM0hg/1si1aPbB2+Baty+bPQvQttJDGKNnjJ
Ir5xSAaLzj1/QMw5HYq5BvvDC84jr4tpq2Al3H2/lFwfR+MFq0G0cOgPFviFCoTI
3czkbO+pSOYTqfJahQcDh1qtGcWbgzQ/auZoahAMne2Ug28JxMQGkv8dYy57OhH0
yzG8T28mMJgmYeSFhvG20Iiqi1Js9WOGpByb4S64FZ39rZ2OouOyvN5hTjawLGkO
VP81Woa5U1GhMkQ0kMF6FkVW3gufX6t5RqLlEUni8vKGsw60C/lPKjiTuXYb5Huy
vC0miOnxfpAu6IGyLI+kAzzOudG6JLKntnAHYDkrD74+C7obPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEuiFBHV3pG8b3usDaDR6/hrI9cqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYTQzMTRlZGItNmQzNy0z
YjI3LTkwN2MtY2IyYjQ2YjEyYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKeitoXE58SC9kormgZHJUdYPV9lB+LCxWB+KErX2ln0KFvB2uaBNGpX
wsWh6xWQKzvYdOKiUg7twGx7vcqUx0K+G7i4uE9iU2e2lt0t2Dibt4BObCuf1aXd
eWbxhMRrg+31pXtzLyigH4qHvYrYa84xUZWTqYoXM0L2OoFiC6U6fQsftjjBW/rL
i2dBzHOLCGTmUzG8Ic04DYy16+iDwTYu0OKSyRgz5plYgEhwVszDZKd820elrXA0
age/MoQB8hl4X93R0AHvdgj4OXKcT9olqbjQCNwjp3wR67rc05fY3VcB7gdBWloz
DXRzXafoivmpuDEbwCeaX0ZhLsLI53A=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:18:18 2025 by rpki-client