Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c197fee4-0f34-3a86-a110-6100e61c35b8.roa
File:                     c197fee4-0f34-3a86-a110-6100e61c35b8.roa (raw, json)
Hash identifier:          Os3QAe4hVqU0rAgIZLbk/5U9n9canzEe47ilNO+HnZU=
Subject key identifier:   96:C6:EA:66:E6:67:1A:B7:72:1C:47:84:52:B8:C5:46:0A:2A:4F:62
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F841759B28C0101F0E1C80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c197fee4-0f34-3a86-a110-6100e61c35b8.roa
Signing time:             Thu 01 May 2025 17:15:20 +0000
ROA not before:           Thu 01 May 2025 17:15:20 +0000
ROA not after:            Wed 30 Jul 2025 17:15:20 +0000
asID:                     22773
IP address blocks:        70.174.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f8:41:75:9b:28:c0:10:1f:0e:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:15:20 2025 GMT
            Not After : Jul 30 17:15:20 2025 GMT
        Subject: CN=e4a9ae22-276f-484b-9efe-f2aa213b3c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b1:94:7f:78:ab:b8:8c:d2:dd:af:02:11:15:
                    1f:15:6f:6e:71:3a:7c:0e:ae:48:9b:b9:90:f6:9d:
                    f2:63:9d:05:bb:80:47:5d:50:fd:dc:f3:c6:76:ee:
                    ad:ac:80:df:e1:55:07:8b:f0:44:8a:ea:07:30:55:
                    e7:01:90:e1:79:66:c0:4c:c3:8e:fa:6f:d2:d3:58:
                    bd:d9:22:b4:4a:c5:14:6d:24:7b:41:a6:19:9f:af:
                    66:27:6e:1b:ca:ec:7e:dd:88:0b:3d:6b:cd:92:6a:
                    b4:38:25:7a:eb:d7:03:d9:3b:b4:e6:14:46:8a:63:
                    55:5f:2d:dc:ee:70:ee:38:a8:8b:2a:c2:a9:81:95:
                    7b:43:e5:01:4c:d5:fd:db:27:c8:63:79:d8:57:6b:
                    1e:45:10:7e:0b:a6:63:98:f3:19:54:81:a9:be:00:
                    d1:a2:6d:2a:81:4a:12:84:66:16:8a:af:37:fb:20:
                    80:19:74:5b:83:19:a3:28:b7:0d:7f:ed:9b:25:6a:
                    f1:c9:0c:7f:e6:2e:43:28:e4:d0:01:2f:27:17:e8:
                    8b:97:30:3c:95:1f:f6:98:c6:86:52:2d:cf:3d:3c:
                    4d:c1:f2:c2:fb:38:e3:57:5b:ba:e9:f0:3b:78:72:
                    a8:ee:78:40:e9:49:96:72:12:28:c9:04:20:09:8d:
                    c2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C6:EA:66:E6:67:1A:B7:72:1C:47:84:52:B8:C5:46:0A:2A:4F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c197fee4-0f34-3a86-a110-6100e61c35b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.174.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:30:fd:ca:a0:7b:bd:c6:ea:23:31:24:ab:e2:75:b7:08:cb:
         c5:82:b1:1a:26:23:ba:68:5b:c3:d0:ec:98:95:cd:be:76:da:
         9d:a4:96:55:d6:7d:41:0d:e2:54:f1:58:b9:00:7e:49:64:1e:
         88:42:73:da:de:1e:07:1d:cc:f4:5c:d4:bd:6a:df:d1:23:50:
         56:b7:f8:6c:b3:0e:b5:0f:42:a2:74:02:2b:9e:94:f5:5f:44:
         24:42:e3:24:6e:35:41:2b:9a:60:92:85:09:19:8c:03:a4:17:
         8a:b5:81:c2:40:8d:59:ff:1c:bb:a0:16:47:4e:b8:17:f2:09:
         67:70:5b:0f:35:9b:18:bc:b2:e3:84:21:b2:7d:e5:81:c6:f2:
         8b:81:74:9f:c2:4a:63:4d:e9:1e:1a:02:27:e6:b7:20:05:44:
         12:b4:27:1b:94:c5:46:e3:c8:fa:31:36:c9:4d:19:80:8f:77:
         6a:ec:f7:15:f7:aa:14:78:4d:89:ef:84:78:54:f1:a7:44:3c:
         44:ef:fb:90:8b:c4:b2:ce:e3:8c:8a:16:3f:de:12:8f:c8:7b:
         83:61:dd:b4:90:5d:c1:51:be:bf:ba:c9:87:59:14:7e:0d:41:
         b9:6a:c0:bc:83:7b:7e:86:05:8e:51:7c:f5:7a:84:79:fd:28:
         e2:07:84:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+EF1myjAEB8OHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE3MTUyMFoXDTI1MDczMDE3MTUyMFowLzEtMCsGA1UEAxMk
ZTRhOWFlMjItMjc2Zi00ODRiLTllZmUtZjJhYTIxM2IzYzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLGUf3iruIzS3a8CERUfFW9ucTp8Dq5Im7mQ
9p3yY50Fu4BHXVD93PPGdu6trIDf4VUHi/BEiuoHMFXnAZDheWbATMOO+m/S01i9
2SK0SsUUbSR7QaYZn69mJ24byux+3YgLPWvNkmq0OCV669cD2Tu05hRGimNVXy3c
7nDuOKiLKsKpgZV7Q+UBTNX92yfIY3nYV2seRRB+C6ZjmPMZVIGpvgDRom0qgUoS
hGYWiq83+yCAGXRbgxmjKLcNf+2bJWrxyQx/5i5DKOTQAS8nF+iLlzA8lR/2mMaG
Ui3PPTxNwfLC+zjjV1u66fA7eHKo7nhA6UmWchIoyQQgCY3CYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbG6mbmZxq3chxHhFK4xUYKKk9iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzE5N2ZlZTQtMGYzNC0z
YTg2LWExMTAtNjEwMGU2MWMzNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq44MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0w/cqge73G6iMxJKvidbcIy8WCsRomI7poW8PQ7JiVzb522p2kllXW
fUEN4lTxWLkAfklkHohCc9reHgcdzPRc1L1q39EjUFa3+GyzDrUPQqJ0AiuelPVf
RCRC4yRuNUErmmCShQkZjAOkF4q1gcJAjVn/HLugFkdOuBfyCWdwWw81mxi8suOE
IbJ95YHG8ouBdJ/CSmNN6R4aAifmtyAFRBK0JxuUxUbjyPoxNslNGYCPd2rs9xX3
qhR4TYnvhHhU8adEPETv+5CLxLLO44yKFj/eEo/Ie4Nh3bSQXcFRvr+6yYdZFH4N
QblqwLyDe36GBY5RfPV6hHn9KOIHhNM=
-----END CERTIFICATE-----
Generated at Sun May 11 12:39:39 2025 by rpki-client