Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/420156b9-fed8-3148-a9b6-7f55eba66994.roa
File:                     420156b9-fed8-3148-a9b6-7f55eba66994.roa (raw, json)
Hash identifier:          6mkGSGCi6K0TKhKMPixcDDYMNo2Jbh1BWbFCVoHLtdU=
Subject key identifier:   3D:E6:49:88:72:D4:B7:10:9A:C3:17:6A:B0:67:F6:02:A2:8F:1E:1F
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584B6D2C951BFED4D0CACE79E300
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/420156b9-fed8-3148-a9b6-7f55eba66994.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     31898
IP address blocks:        170.114.70.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:95:1b:fe:d4:d0:ca:ce:79:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=0eb8bc97-b219-4db3-a61b-727163b85a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:84:c1:74:e2:27:92:ff:61:80:e2:85:30:
                    bb:59:11:b4:f3:4b:44:41:a8:e3:13:54:55:52:9e:
                    d8:b7:c1:95:da:48:9e:ab:6a:af:fa:cb:23:6b:f1:
                    61:41:47:43:a3:b8:13:eb:12:63:ae:e6:b9:90:49:
                    66:f0:a5:1a:b0:2d:91:23:82:66:a9:6b:b2:ca:4e:
                    9b:0d:f0:2e:8c:92:dc:45:b7:ea:48:e6:1a:90:09:
                    84:ce:02:b8:be:03:a0:5d:1d:dd:2c:71:92:0a:e9:
                    96:18:b3:d8:58:d8:42:b0:7a:9e:1a:72:0d:1f:0f:
                    2c:e9:68:55:47:ed:b0:f9:f5:c0:11:40:61:e0:ff:
                    66:a0:22:21:82:4d:00:55:f0:df:98:b0:5a:a1:28:
                    18:90:8b:6e:c0:86:ae:2c:61:a2:15:18:4d:5c:74:
                    b2:81:9e:70:cb:3a:db:be:6a:a2:0e:2a:59:a4:ce:
                    fa:0a:ad:33:fb:18:73:2a:14:89:17:08:e5:9f:a5:
                    2a:2e:86:bc:16:32:7f:fd:81:a3:64:d2:ee:2c:14:
                    9f:20:63:63:f7:e3:c0:72:f7:d2:dc:f7:36:cb:29:
                    67:52:8d:fe:2b:b4:71:e2:9a:d0:ce:bf:bc:d2:60:
                    31:78:dc:56:1a:e2:57:ba:3f:7f:86:8a:6b:78:de:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E6:49:88:72:D4:B7:10:9A:C3:17:6A:B0:67:F6:02:A2:8F:1E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/420156b9-fed8-3148-a9b6-7f55eba66994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:8c:a9:cd:53:71:b3:f7:35:6f:f7:dc:d7:99:46:e5:4a:fc:
         32:a6:40:9c:f0:dd:e5:75:59:0f:1d:7a:c2:4c:a7:b9:39:a7:
         b4:56:2e:cd:50:e1:cb:b4:cc:bf:c3:b1:7d:fb:d8:af:77:b7:
         5d:84:a5:45:5c:a8:e1:59:28:42:50:e9:3f:33:9a:e8:2b:e5:
         e6:b5:9c:2f:d3:9f:5c:f1:17:61:b2:4d:7a:25:b2:ec:58:77:
         20:e4:8e:03:57:08:91:cc:e4:1f:c1:c3:bb:b6:7d:50:ad:d3:
         0b:70:97:b2:d8:fd:be:09:86:7c:29:2b:0d:9f:3a:76:da:9f:
         81:89:2a:70:50:9b:0a:73:e7:40:1a:9d:fe:cd:6b:47:f5:25:
         c1:e9:d3:b4:33:fc:fe:1f:1b:70:aa:f7:17:ab:e2:6c:1e:99:
         2b:91:f1:94:4b:b3:b9:f6:47:c9:90:0d:1a:4d:56:68:9f:68:
         3b:70:9c:27:4a:47:e7:4b:a4:f5:71:67:aa:9c:77:29:54:e9:
         73:22:34:e4:e3:59:22:5d:c6:69:8f:76:ff:b2:fb:29:39:9f:
         58:47:c8:fa:78:c4:89:22:b8:b1:b5:a9:6d:20:c2:a0:70:c5:
         55:a1:29:be:e6:87:45:a3:97:d6:78:0d:e5:a9:c8:43:83:c9:
         74:2e:c1:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJUb/tTQys554wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
MGViOGJjOTctYjIxOS00ZGIzLWE2MWItNzI3MTYzYjg1YTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujiEwXTiJ5L/YYDihTC7WRG080tEQajjE1RV
Up7Yt8GV2kieq2qv+ssja/FhQUdDo7gT6xJjrua5kElm8KUasC2RI4JmqWuyyk6b
DfAujJLcRbfqSOYakAmEzgK4vgOgXR3dLHGSCumWGLPYWNhCsHqeGnINHw8s6WhV
R+2w+fXAEUBh4P9moCIhgk0AVfDfmLBaoSgYkItuwIauLGGiFRhNXHSygZ5wyzrb
vmqiDipZpM76Cq0z+xhzKhSJFwjln6UqLoa8FjJ//YGjZNLuLBSfIGNj9+PAcvfS
3Pc2yylnUo3+K7Rx4prQzr+80mAxeNxWGuJXuj9/hopreN7OewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD3mSYhy1LcQmsMXarBn9gKijx4fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNDIwMTU2YjktZmVkOC0z
MTQ4LWE5YjYtN2Y1NWViYTY2OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqnJGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuMqc1TcbP3NW/33NeZRuVK/DKmQJzw3eV1WQ8desJMp7k5p7RWLs1Q
4cu0zL/DsX372K93t12EpUVcqOFZKEJQ6T8zmugr5ea1nC/Tn1zxF2GyTXolsuxY
dyDkjgNXCJHM5B/Bw7u2fVCt0wtwl7LY/b4JhnwpKw2fOnban4GJKnBQmwpz50Aa
nf7Na0f1JcHp07Qz/P4fG3Cq9xer4mwemSuR8ZRLs7n2R8mQDRpNVmifaDtwnCdK
R+dLpPVxZ6qcdylU6XMiNOTjWSJdxmmPdv+y+yk5n1hHyPp4xIkiuLG1qW0gwqBw
xVWhKb7mh0Wjl9Z4DeWpyEODyXQuwTk=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:58 2025 by rpki-client