Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa
File:                     456ba9f7-e72c-305d-b3cd-691ae04fe061.roa (raw, json)
Hash identifier:          Nnp3C5WdWE8duluTRqsxbEbo0HWxjPldjooToeLUjeM=
Subject key identifier:   72:69:DD:B1:C8:92:79:4D:E5:E0:32:01:EB:ED:70:AD:EF:10:5E:6D
Certificate issuer:       /CN=8a57b69a-d683-4350-83d4-e449c0242b7d
Certificate serial:       010D0C9F4328584B52A75163898E6A4BA2D04EA0
Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     55134
IP address blocks:        70.34.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:51:63:89:8e:6a:4b:a2:d0:4e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=db83f46b-7b15-4c57-a2f8-b2ca803ddf40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:89:04:a5:dd:c8:7a:0a:de:a0:0a:02:f0:aa:
                    c9:82:7a:5f:b2:7a:82:e6:54:58:f0:16:74:6d:1c:
                    4d:c0:9f:f9:5d:a8:95:9e:0b:9e:4d:2a:a8:a0:20:
                    0e:28:7c:cb:92:2d:e4:a9:80:f8:a8:1d:2d:c0:1c:
                    1f:5c:d8:d0:dd:3f:54:18:0b:50:45:fe:ed:8a:f3:
                    5c:38:2b:66:00:45:fb:40:d0:18:a6:02:2d:6c:a1:
                    e1:4d:09:9c:d8:50:fb:29:34:44:b9:15:ce:36:b4:
                    bc:30:45:62:67:28:9a:d0:2c:8a:e2:2e:43:af:7f:
                    65:97:3e:bc:81:5e:99:30:d4:ee:f3:4a:7a:b4:de:
                    79:aa:b7:fd:c6:f3:16:f7:a6:86:30:a7:bd:f8:20:
                    6f:33:1b:5d:e6:85:db:55:24:db:d1:66:9f:a5:16:
                    54:c4:2a:bc:23:ba:b3:d3:c7:9e:1b:1b:1e:bd:bb:
                    cb:c7:92:ee:0b:1b:34:d9:43:58:16:88:83:06:e4:
                    23:29:80:41:1d:43:7f:cb:bb:86:25:b4:b7:d3:e6:
                    1b:b7:f9:38:1d:b9:db:8b:ec:dd:eb:b2:f2:bd:54:
                    84:a6:24:4f:50:85:58:47:ed:a8:6f:3a:17:3c:b2:
                    95:dd:d4:7d:70:28:3c:98:d0:b5:08:26:0a:ec:a8:
                    be:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:69:DD:B1:C8:92:79:4D:E5:E0:32:01:EB:ED:70:AD:EF:10:5E:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl

            X509v3 Authority Key Identifier:
                keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.34.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:52:8e:d0:46:6f:9c:fe:6b:6c:d1:9f:42:d2:d0:c8:1e:b3:
         5a:12:89:ab:8a:22:6f:36:85:01:03:ab:06:34:a0:5d:69:2b:
         d8:15:4f:af:50:63:63:83:c0:43:d6:65:54:db:34:a5:9e:99:
         8e:7f:38:f8:04:97:56:14:b8:b6:2d:2a:c3:15:a3:54:54:a2:
         bd:2e:e1:50:09:52:31:0c:bd:3e:ed:13:fa:e5:ae:ac:39:91:
         cb:d8:4f:e3:42:8c:50:49:7c:a9:8a:85:8d:f0:a3:d4:28:e8:
         40:11:61:5e:3f:c6:1e:cc:34:86:aa:13:4a:af:56:8d:3d:d6:
         5f:a4:38:f8:31:ff:e1:a6:b2:6b:1b:41:41:16:01:a0:99:2c:
         2c:5e:1a:66:7c:4b:73:e3:82:f9:de:82:50:5c:b4:d2:90:83:
         1c:8a:9f:10:97:9a:9d:b0:b0:da:fc:69:9e:1d:0b:3d:4f:0e:
         b7:ee:c4:89:a8:a6:77:11:29:b7:e1:2b:5c:05:45:a6:73:a4:
         ca:a6:44:6a:fc:42:f8:03:ce:2d:86:37:25:c3:04:99:7f:ce:
         e5:37:bf:1e:4b:08:ae:30:12:1d:de:b1:b8:a1:36:c4:b2:09:
         78:b6:44:9a:cc:92:1c:05:fa:b8:06:3b:c3:96:dd:a4:ca:9d:
         01:a6:67:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1FjiY5qS6LQTqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy
YjdkMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk
ZGI4M2Y0NmItN2IxNS00YzU3LWEyZjgtYjJjYTgwM2RkZjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5okEpd3IegreoAoC8KrJgnpfsnqC5lRY8BZ0
bRxNwJ/5XaiVngueTSqooCAOKHzLki3kqYD4qB0twBwfXNjQ3T9UGAtQRf7tivNc
OCtmAEX7QNAYpgItbKHhTQmc2FD7KTREuRXONrS8MEViZyia0CyK4i5Dr39llz68
gV6ZMNTu80p6tN55qrf9xvMW96aGMKe9+CBvMxtd5oXbVSTb0WafpRZUxCq8I7qz
08eeGxsevbvLx5LuCxs02UNYFoiDBuQjKYBBHUN/y7uGJbS30+Ybt/k4Hbnbi+zd
67LyvVSEpiRPUIVYR+2obzoXPLKV3dR9cCg8mNC1CCYK7Ki+UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHJp3bHIknlN5eAyAevtcK3vEF5tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3
YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvNDU2YmE5ZjctZTcyYy0z
MDVkLWIzY2QtNjkxYWUwNGZlMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz
ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0
MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5
YzAyNDJiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiJwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJSjtBGb5z+a2zRn0LS0Mges1oSiauKIm82hQEDqwY0oF1pK9gVT69Q
Y2ODwEPWZVTbNKWemY5/OPgEl1YUuLYtKsMVo1RUor0u4VAJUjEMvT7tE/rlrqw5
kcvYT+NCjFBJfKmKhY3wo9Qo6EARYV4/xh7MNIaqE0qvVo091l+kOPgx/+Gmsmsb
QUEWAaCZLCxeGmZ8S3PjgvneglBctNKQgxyKnxCXmp2wsNr8aZ4dCz1PDrfuxImo
pncRKbfhK1wFRaZzpMqmRGr8QvgDzi2GNyXDBJl/zuU3vx5LCK4wEh3esbihNsSy
CXi2RJrMkhwF+rgGO8OW3aTKnQGmZzk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:34 2025 by rpki-client