Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/80385483-b20c-3f42-8f77-30eda8badbe6.roa
File:                     80385483-b20c-3f42-8f77-30eda8badbe6.roa (raw, json)
Hash identifier:          Rz1Ny2MEVh/ZGhNZcIWo3YiXBI9y85Un7ggexl0m9YQ=
Subject key identifier:   C0:18:BB:90:A9:ED:E5:4C:92:1A:4E:99:84:7A:CA:15:A1:9C:AF:EC
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584A4C3B113E4C03193C4459C160
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/80385483-b20c-3f42-8f77-30eda8badbe6.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     36103
IP address blocks:        68.70.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:11:3e:4c:03:19:3c:44:59:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=363dea16-8b62-4b11-aaa0-a8059448f2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:af:c7:2f:11:91:80:51:b3:7c:29:c9:4e:8a:
                    d7:77:51:db:12:7c:6c:34:12:51:db:53:74:b5:52:
                    5f:b3:d8:a5:bc:ab:5a:84:54:98:90:3f:5f:5c:80:
                    fe:0e:f3:f8:31:9c:80:d4:0b:de:fd:4e:78:a3:8f:
                    60:81:97:c6:64:01:22:2f:cb:1e:bb:da:be:56:e8:
                    73:41:d9:7c:a8:6c:5c:b6:eb:cb:53:00:b4:a2:45:
                    7b:58:73:fe:ec:e9:ac:2e:4b:7d:4d:b7:04:dd:b7:
                    a5:94:74:b1:17:c5:8f:41:0f:a6:94:9e:dd:80:c3:
                    ef:09:ae:84:41:a8:cb:be:e7:3d:fa:f7:74:3a:ef:
                    a4:e3:f5:db:91:50:3b:5a:69:70:dd:9b:87:5d:d5:
                    ba:fc:b7:36:77:09:8e:7c:98:07:f7:17:c8:96:15:
                    1e:b3:8c:99:43:5d:9d:aa:8c:9f:b2:f4:bc:49:7e:
                    57:ce:fa:5a:ff:21:10:2d:2c:2e:4e:bb:e1:b1:47:
                    a1:8f:31:29:65:6b:9e:d6:78:69:4e:40:1f:24:43:
                    00:81:0d:2c:43:96:01:5f:97:c2:ae:8e:6c:6e:52:
                    3c:b3:a7:6a:74:39:eb:17:59:d4:f3:ee:fd:23:b9:
                    77:a0:84:12:8c:4e:98:77:98:28:37:06:04:4b:c1:
                    8a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:18:BB:90:A9:ED:E5:4C:92:1A:4E:99:84:7A:CA:15:A1:9C:AF:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/80385483-b20c-3f42-8f77-30eda8badbe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c7:4e:ee:c0:a4:b9:cb:d3:de:c3:c7:27:88:a9:d2:0e:db:
         1a:b1:47:a2:7b:cd:7e:35:9f:6e:d3:61:7e:7b:8a:00:7f:1e:
         13:bf:5f:4d:e6:e7:e9:dd:31:9e:d5:5e:3a:99:cb:f9:05:04:
         82:fb:3d:98:1f:4e:d2:ba:ae:54:da:6f:8b:20:0f:76:1d:8a:
         26:7a:04:c0:85:ea:bd:4e:a8:ec:e2:b3:82:d8:85:21:d0:8d:
         82:bc:89:77:00:8d:60:3b:2b:0d:95:7b:7a:7e:be:b2:7f:78:
         ce:1e:fb:c0:e3:8b:aa:2f:95:ca:9b:d6:dd:3c:c9:d3:d6:1f:
         64:e3:a2:32:20:30:06:f5:9d:e2:ca:48:1d:9a:79:68:2b:af:
         18:9b:90:66:72:fc:f1:01:76:84:b9:b0:32:0c:be:12:88:de:
         56:f3:da:4a:88:26:68:fa:7e:73:fa:a6:68:51:2f:35:6a:c4:
         8c:b1:ba:89:5c:05:71:ef:20:c8:a2:87:a3:7c:62:d0:91:43:
         8c:21:7d:14:e4:0c:ff:c2:d0:76:d5:bd:91:e2:b1:a7:a2:31:
         57:d5:6c:ef:b0:7c:2d:3c:9c:68:e5:06:3e:19:53:db:cd:85:
         00:6c:51:54:a6:d0:df:ea:3b:b5:bb:9c:17:01:ee:e1:7c:b9:
         cb:8c:71:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxE+TAMZPERZwWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl
ZDI1MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk
MzYzZGVhMTYtOGI2Mi00YjExLWFhYTAtYTgwNTk0NDhmMmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla/HLxGRgFGzfCnJTorXd1HbEnxsNBJR21N0
tVJfs9ilvKtahFSYkD9fXID+DvP4MZyA1Ave/U54o49ggZfGZAEiL8seu9q+Vuhz
Qdl8qGxctuvLUwC0okV7WHP+7OmsLkt9TbcE3bellHSxF8WPQQ+mlJ7dgMPvCa6E
QajLvuc9+vd0Ou+k4/XbkVA7Wmlw3ZuHXdW6/Lc2dwmOfJgH9xfIlhUes4yZQ12d
qoyfsvS8SX5Xzvpa/yEQLSwuTrvhsUehjzEpZWue1nhpTkAfJEMAgQ0sQ5YBX5fC
ro5sblI8s6dqdDnrF1nU8+79I7l3oIQSjE6Yd5goNwYES8GKJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMAYu5Cp7eVMkhpOmYR6yhWhnK/sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh
NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvODAzODU0ODMtYjIwYy0z
ZjQyLThmNzctMzBlZGE4YmFkYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm
M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0
ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0
MmE4NGVkMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREboMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbHTu7ApLnL097DxyeIqdIO2xqxR6J7zX41n27TYX57igB/HhO/X03m
5+ndMZ7VXjqZy/kFBIL7PZgfTtK6rlTab4sgD3YdiiZ6BMCF6r1OqOzis4LYhSHQ
jYK8iXcAjWA7Kw2Ve3p+vrJ/eM4e+8Dji6ovlcqb1t08ydPWH2TjojIgMAb1neLK
SB2aeWgrrxibkGZy/PEBdoS5sDIMvhKI3lbz2kqIJmj6fnP6pmhRLzVqxIyxuolc
BXHvIMiih6N8YtCRQ4whfRTkDP/C0HbVvZHisaeiMVfVbO+wfC08nGjlBj4ZU9vN
hQBsUVSm0N/qO7W7nBcB7uF8ucuMcUI=
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:21:58 2025 by rpki-client