Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02cd6e3a-7b3b-3146-9cf7-aabe9a8e00e3.roa
File:                     02cd6e3a-7b3b-3146-9cf7-aabe9a8e00e3.roa (raw, json)
Hash identifier:          V49XnwEo7J2t9i7pGjVXr17bU2GLB7VjxIAMM2Oz13Y=
Subject key identifier:   0B:24:0F:59:57:0E:A9:B4:7E:09:BC:79:85:41:A3:D8:50:85:E3:77
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ACF710D8D67FDA6D835267500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02cd6e3a-7b3b-3146-9cf7-aabe9a8e00e3.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        172.70.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:0d:8d:67:fd:a6:d8:35:26:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=37c8ecdc-a8c0-4de0-a107-2290f9fe36a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:62:d4:fa:07:4c:3c:2d:35:a3:33:e2:7c:
                    7c:8e:8f:e6:f9:39:bf:4a:b6:ba:26:11:94:76:a3:
                    74:06:a7:48:0f:d3:2a:1f:68:2f:c5:2a:96:41:55:
                    be:55:fe:ed:8c:0d:78:84:cd:be:e7:bd:b9:d3:fb:
                    da:53:e2:a5:c6:b2:b9:5a:ea:ee:b1:f8:67:1d:f9:
                    07:63:0e:f7:5d:4f:ef:8d:78:ed:b7:e2:d1:9e:82:
                    bb:d9:56:b4:6c:b8:63:09:38:ab:8b:17:30:47:35:
                    4b:28:bd:ba:a0:ed:78:7a:c8:9c:79:11:bc:6b:00:
                    66:c6:a3:52:70:0c:10:60:b1:3e:f2:65:a8:49:f7:
                    91:bd:9f:b5:59:fd:d1:61:8b:64:37:19:e9:8c:dc:
                    01:7b:3a:a4:7b:ac:3b:ec:77:98:f1:26:d8:05:f7:
                    7f:50:06:66:72:72:6d:32:49:39:85:af:67:0a:d3:
                    c6:10:db:79:8a:f4:07:3b:54:7a:e5:f1:58:0a:1d:
                    e4:e2:91:bd:28:7b:f1:26:1c:ed:56:95:7b:2a:4b:
                    ac:d4:bc:10:8a:d9:50:92:a5:43:5b:2c:5e:18:bb:
                    bc:5e:4e:30:93:9e:91:30:25:f3:5f:cc:86:e3:db:
                    a7:03:b7:fd:a3:23:fd:16:e4:e4:8a:aa:42:f1:f3:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:24:0F:59:57:0E:A9:B4:7E:09:BC:79:85:41:A3:D8:50:85:E3:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02cd6e3a-7b3b-3146-9cf7-aabe9a8e00e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:56:27:f2:7f:cc:09:94:ca:23:fa:2f:78:62:e0:cc:da:a0:
         e7:2d:82:50:47:ad:47:cc:19:7d:b0:5c:b2:84:36:a5:0e:c6:
         0f:e8:47:47:4e:b8:9c:b4:2b:ad:94:54:02:12:46:6e:ea:80:
         2a:e6:df:32:c6:8e:c8:06:1a:e1:8a:ae:f4:58:f4:a1:44:14:
         23:40:06:a8:ef:68:c6:e7:a7:a8:f9:45:d9:1c:7d:2e:42:8a:
         12:09:25:90:1a:be:28:d2:9d:3f:a7:7b:14:fd:46:1a:67:ea:
         0f:4e:2f:98:dc:93:5a:4c:b8:9c:9e:74:ed:91:36:cf:65:2d:
         a6:a0:6b:ae:6a:c5:41:11:0e:8c:3c:77:74:3a:67:98:26:12:
         99:34:5e:a4:fd:76:53:e6:c5:e3:1d:86:27:69:0f:b1:30:ac:
         be:21:bd:e2:66:de:bf:a8:02:d1:94:55:36:23:61:66:8e:0c:
         0a:c9:f7:32:52:80:b7:de:7b:0d:d3:08:8e:ba:03:85:8c:c0:
         8b:6d:a9:3f:1a:83:65:5a:c2:e8:f9:e6:95:c3:4e:35:73:b0:
         4b:4b:3a:c0:e2:b0:1f:ab:17:16:bd:61:75:3a:59:23:c0:dc:
         a6:c0:88:ca:c0:ee:fc:a8:e3:05:d6:55:a6:1f:de:35:ca:87:
         c2:91:4d:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQ2NZ/2m2DUmdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk
MzdjOGVjZGMtYThjMC00ZGUwLWExMDctMjI5MGY5ZmUzNmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOFi1PoHTDwtNaMz4nx8jo/m+Tm/Sra6JhGU
dqN0BqdID9MqH2gvxSqWQVW+Vf7tjA14hM2+57250/vaU+KlxrK5WurusfhnHfkH
Yw73XU/vjXjtt+LRnoK72Va0bLhjCTirixcwRzVLKL26oO14esiceRG8awBmxqNS
cAwQYLE+8mWoSfeRvZ+1Wf3RYYtkNxnpjNwBezqke6w77HeY8SbYBfd/UAZmcnJt
Mkk5ha9nCtPGENt5ivQHO1R65fFYCh3k4pG9KHvxJhztVpV7Kkus1LwQitlQkqVD
WyxeGLu8Xk4wk56RMCXzX8yG49unA7f9oyP9FuTkiqpC8fNEswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAskD1lXDqm0fgm8eYVBo9hQheN3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDJjZDZlM2EtN2IzYi0z
MTQ2LTljZjctYWFiZTlhOGUwMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxWJ/J/zAmUyiP6L3hi4MzaoOctglBHrUfMGX2wXLKENqUOxg/oR0dO
uJy0K62UVAISRm7qgCrm3zLGjsgGGuGKrvRY9KFEFCNABqjvaMbnp6j5RdkcfS5C
ihIJJZAavijSnT+nexT9Rhpn6g9OL5jck1pMuJyedO2RNs9lLaaga65qxUERDow8
d3Q6Z5gmEpk0XqT9dlPmxeMdhidpD7EwrL4hveJm3r+oAtGUVTYjYWaODArJ9zJS
gLfeew3TCI66A4WMwIttqT8ag2Vawuj55pXDTjVzsEtLOsDisB+rFxa9YXU6WSPA
3KbAiMrA7vyo4wXWVaYf3jXKh8KRTfU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:57:47 2025 by rpki-client