Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20ff06e8-b182-335a-a714-7134df135a11.roa
File:                     20ff06e8-b182-335a-a714-7134df135a11.roa (raw, json)
Hash identifier:          odSBHKQPkQ4s3R1LDTxWv6G2KBnPgPEnVa67L4xQE64=
Subject key identifier:   A1:03:6F:70:F4:09:49:47:8B:59:04:1A:91:AD:BD:81:30:8A:95:42
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A3A42D771D4970EBD4BC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20ff06e8-b182-335a-a714-7134df135a11.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        70.62.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:3a:42:d7:71:d4:97:0e:bd:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=d7fd56b6-bba4-4756-916e-b35eeb6e08ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:62:a4:cd:b4:6e:7f:4d:10:d7:53:7b:36:
                    2b:10:19:9a:c2:8f:e9:24:b3:6e:d1:cc:f7:4c:93:
                    c8:da:c8:36:8f:f8:1a:35:99:ee:a0:94:a4:03:3d:
                    c8:e4:6c:76:57:97:f8:2c:32:93:f5:28:64:cd:c6:
                    f8:82:c9:1b:d8:e0:f1:f9:32:60:30:d8:ac:23:d5:
                    bd:0b:55:19:5f:2e:d7:05:72:0c:e3:d6:c2:0a:2b:
                    3b:fb:73:65:61:c7:63:7d:39:9c:fc:12:c8:83:74:
                    95:3a:77:91:ce:3b:10:5d:0a:a7:8d:12:08:0e:06:
                    ea:0f:73:c5:d1:7d:88:95:34:07:3a:d4:d7:5e:a7:
                    de:69:75:53:33:c6:04:29:8c:aa:98:2f:ac:17:cb:
                    35:20:38:33:34:7b:ef:28:d6:ed:ac:98:f0:04:ee:
                    e8:52:01:10:57:1f:f0:61:93:2d:a2:53:c5:00:13:
                    c3:12:16:6f:4b:5c:c7:36:e1:10:64:b9:a0:1d:ae:
                    97:d3:1b:e2:b8:fa:92:31:47:58:38:86:52:39:e9:
                    ee:fd:e6:ae:cc:b6:93:44:9c:69:ba:60:5b:94:25:
                    63:8a:90:8d:2e:0b:df:24:b1:8c:f9:df:1e:e2:59:
                    f6:ef:4f:60:ab:94:26:13:29:e8:43:8a:85:19:ba:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:03:6F:70:F4:09:49:47:8B:59:04:1A:91:AD:BD:81:30:8A:95:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20ff06e8-b182-335a-a714-7134df135a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.62.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:bc:a3:79:31:33:fa:14:33:59:c2:80:55:b4:fd:8f:61:7d:
         bd:eb:7d:f4:40:06:e8:7a:19:25:db:5e:98:56:b1:27:53:61:
         89:11:37:b8:21:fd:74:46:bd:ee:75:d1:19:81:95:a7:95:4f:
         40:20:ac:c1:14:bd:6f:64:13:2f:ff:8f:87:07:15:75:9f:99:
         1c:e0:2d:90:db:04:52:75:68:ef:97:4d:1c:31:ab:23:e5:bd:
         ca:f7:4e:8b:a0:40:8d:4e:af:81:ab:e2:e9:92:9c:eb:a1:38:
         91:69:df:67:f7:d4:4f:bf:af:8c:4f:ef:a3:2e:dc:99:c3:91:
         94:5a:33:59:d9:0f:50:cf:8e:0f:ec:0d:3f:b6:78:f5:f8:7a:
         d2:a2:7c:1e:d1:e9:f9:dc:09:b8:3d:ea:fe:28:29:d3:05:ca:
         2c:38:a3:60:69:aa:f6:ad:67:59:28:f8:92:ec:54:e5:b8:bf:
         a5:da:cf:2c:fc:aa:32:53:51:ef:b0:5c:0e:3c:cd:64:f0:9a:
         83:c2:69:ab:35:d4:31:bf:41:87:e8:0e:9e:b6:d6:62:b2:9b:
         f1:e8:12:01:69:54:5b:c8:52:eb:6e:8d:93:37:69:e4:8f:2f:
         cf:82:1f:a5:8d:32:3f:1e:70:7e:cc:6e:ae:3f:8b:63:7e:54:
         dc:c9:2a:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCjpC13HUlw69S8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZDdmZDU2YjYtYmJhNC00NzU2LTkxNmUtYjM1ZWViNmUwOGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSpipM20bn9NENdTezYrEBmawo/pJLNu0cz3
TJPI2sg2j/gaNZnuoJSkAz3I5Gx2V5f4LDKT9Shkzcb4gskb2ODx+TJgMNisI9W9
C1UZXy7XBXIM49bCCis7+3NlYcdjfTmc/BLIg3SVOneRzjsQXQqnjRIIDgbqD3PF
0X2IlTQHOtTXXqfeaXVTM8YEKYyqmC+sF8s1IDgzNHvvKNbtrJjwBO7oUgEQVx/w
YZMtolPFABPDEhZvS1zHNuEQZLmgHa6X0xviuPqSMUdYOIZSOenu/eauzLaTRJxp
umBblCVjipCNLgvfJLGM+d8e4ln2709gq5QmEynoQ4qFGbor7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKEDb3D0CUlHi1kEGpGtvYEwipVCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMjBmZjA2ZTgtYjE4Mi0z
MzVhLWE3MTQtNzEzNGRmMTM1YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRj6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFe8o3kxM/oUM1nCgFW0/Y9hfb3rffRABuh6GSXbXphWsSdTYYkRN7gh
/XRGve510RmBlaeVT0AgrMEUvW9kEy//j4cHFXWfmRzgLZDbBFJ1aO+XTRwxqyPl
vcr3TougQI1Or4Gr4umSnOuhOJFp32f31E+/r4xP76Mu3JnDkZRaM1nZD1DPjg/s
DT+2ePX4etKifB7R6fncCbg96v4oKdMFyiw4o2BpqvatZ1ko+JLsVOW4v6Xazyz8
qjJTUe+wXA48zWTwmoPCaas11DG/QYfoDp621mKym/HoEgFpVFvIUutujZM3aeSP
L8+CH6WNMj8ecH7Mbq4/i2N+VNzJKp0=
-----END CERTIFICATE-----
Generated at Mon May 12 01:57:43 2025 by rpki-client