Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9ac1554-3a1d-3f62-a10a-9ba2558d2a18.roa
File:                     a9ac1554-3a1d-3f62-a10a-9ba2558d2a18.roa (raw, json)
Hash identifier:          7HUZUx+bej2EF0B4kGBHMNCNzqLzpv5wkAFKRWhjRzs=
Subject key identifier:   F6:53:A4:93:2C:F4:C0:1D:E8:29:B1:10:F6:C4:7E:80:B9:30:A9:FF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA8F8A57A7B15A5943F71F
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9ac1554-3a1d-3f62-a10a-9ba2558d2a18.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        70.25.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:8f:8a:57:a7:b1:5a:59:43:f7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=c356fa38-8713-4a04-81c5-8e9b940b479d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0e:17:44:ca:75:26:8f:b3:83:f5:22:35:3b:
                    74:2f:09:49:ee:f4:8a:12:9d:f0:c4:bc:74:8e:c2:
                    51:9c:e6:45:75:36:4a:33:f9:7f:2d:d0:72:a1:ac:
                    88:9b:e8:4b:f5:86:5b:ff:7d:1a:b6:7c:ac:d7:78:
                    62:11:41:c2:7e:bb:cb:29:eb:df:12:be:bc:0e:e0:
                    76:96:d4:49:9e:b3:5d:25:53:e3:88:9a:f5:30:b7:
                    17:a1:48:ac:7f:0c:97:b9:12:e0:46:d5:53:f3:87:
                    8e:6c:18:18:dd:7e:45:2a:bd:86:cb:28:74:43:9a:
                    3b:c6:45:a0:10:10:7f:a6:2e:62:f5:89:be:70:f1:
                    35:95:55:b8:a3:d6:1a:56:18:86:24:b0:04:20:58:
                    71:ca:38:97:65:33:5e:a3:73:b4:3e:9d:79:ba:90:
                    22:e6:d3:19:30:e5:fc:0d:d7:a5:3e:68:2a:a3:9c:
                    d8:5f:3c:38:af:ec:10:f0:7e:f0:28:d1:5b:80:d9:
                    e5:ea:9e:2f:a1:ff:1c:56:b6:13:15:b5:99:43:ed:
                    10:fc:82:e0:08:a1:35:30:8e:e1:70:86:e7:c5:34:
                    9b:b0:f2:e2:20:11:80:08:ff:bf:4f:eb:5d:3d:f0:
                    5a:d5:bd:ec:92:13:85:d7:f9:48:2b:b1:b2:f0:e0:
                    b2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:53:A4:93:2C:F4:C0:1D:E8:29:B1:10:F6:C4:7E:80:B9:30:A9:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9ac1554-3a1d-3f62-a10a-9ba2558d2a18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.25.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:78:0a:7b:dc:dc:46:3e:b3:a9:2b:6b:9d:bb:15:9c:31:71:
         95:e1:26:c8:ab:e6:36:17:f1:21:ae:ed:e2:d9:ff:14:ea:a2:
         d4:85:c5:d8:83:9f:cd:fe:1a:e3:c7:4f:b5:78:bf:f1:69:b0:
         7b:b1:3a:63:b9:df:66:d1:3f:43:77:4f:3b:84:07:d0:66:0a:
         97:35:0f:b3:56:7d:81:cf:67:32:4f:fc:b8:65:a4:cd:d7:c8:
         85:67:67:34:f1:b5:b4:49:a7:17:04:f8:5e:7b:5e:82:22:04:
         1c:ec:7c:5e:39:97:3b:9a:0c:1e:a9:4c:11:25:ad:db:7a:1e:
         98:08:2c:d5:62:38:f4:ea:37:8d:4e:f1:0e:96:6d:30:cb:26:
         71:8b:f3:4f:5c:15:b1:dd:2e:3f:c9:1e:ca:fd:66:77:39:58:
         21:af:b4:8e:eb:43:2e:d5:1a:e3:0f:71:26:2d:9b:7b:f6:fd:
         d2:7e:7c:3a:25:7f:75:de:d1:73:38:15:47:3a:ca:d7:df:c2:
         73:05:15:90:1b:33:8a:8a:b6:3f:c4:b3:a8:ff:d9:52:16:20:
         96:a9:41:25:22:86:48:49:11:93:78:9a:f3:59:df:54:ef:62:
         de:ee:5e:20:90:2e:bb:06:0a:78:f7:7a:16:e5:8b:9e:73:c4:
         e7:76:1d:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2o+KV6exWllD9x8wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
YzM1NmZhMzgtODcxMy00YTA0LTgxYzUtOGU5Yjk0MGI0NzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ4XRMp1Jo+zg/UiNTt0LwlJ7vSKEp3wxLx0
jsJRnOZFdTZKM/l/LdByoayIm+hL9YZb/30atnys13hiEUHCfrvLKevfEr68DuB2
ltRJnrNdJVPjiJr1MLcXoUisfwyXuRLgRtVT84eObBgY3X5FKr2Gyyh0Q5o7xkWg
EBB/pi5i9Ym+cPE1lVW4o9YaVhiGJLAEIFhxyjiXZTNeo3O0Pp15upAi5tMZMOX8
DdelPmgqo5zYXzw4r+wQ8H7wKNFbgNnl6p4vof8cVrYTFbWZQ+0Q/ILgCKE1MI7h
cIbnxTSbsPLiIBGACP+/T+tdPfBa1b3skhOF1/lIK7Gy8OCyQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZTpJMs9MAd6CmxEPbEfoC5MKn/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTlhYzE1NTQtM2ExZC0z
ZjYyLWExMGEtOWJhMjU1OGQyYTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRhmIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHx4Cnvc3EY+s6kra527FZwxcZXhJsir5jYX8SGu7eLZ/xTqotSFxdiD
n83+GuPHT7V4v/FpsHuxOmO532bRP0N3TzuEB9BmCpc1D7NWfYHPZzJP/LhlpM3X
yIVnZzTxtbRJpxcE+F57XoIiBBzsfF45lzuaDB6pTBElrdt6HpgILNViOPTqN41O
8Q6WbTDLJnGL809cFbHdLj/JHsr9Znc5WCGvtI7rQy7VGuMPcSYtm3v2/dJ+fDol
f3Xe0XM4FUc6ytffwnMFFZAbM4qKtj/Es6j/2VIWIJapQSUihkhJEZN4mvNZ31Tv
Yt7uXiCQLrsGCnj3ehbli55zxOd2HeU=
-----END CERTIFICATE-----
Generated at Mon Jun 30 23:54:56 2025 by rpki-client