Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa
File:                     a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa (raw, json)
Hash identifier:          QIswQ2EV4qdGriWbFbJu3ihqy1BxJt+UDvsX3+2jPa8=
Subject key identifier:   A2:FF:61:D9:9A:3D:FB:C7:5B:77:34:C5:BC:8B:84:1C:70:B9:CC:9D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B758C94EF1EA28378FFB1E760
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     14618
IP address blocks:        170.85.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:94:ef:1e:a2:83:78:ff:b1:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=9288edfc-4e30-43d7-8305-e93a0436bed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:08:8b:57:cb:66:20:c7:aa:78:b7:ff:6c:
                    ec:34:d9:80:c5:2b:eb:76:06:58:b8:9e:f5:8f:c2:
                    7b:ea:d3:60:12:f3:0a:3a:44:c1:e0:79:90:2c:86:
                    5a:e7:42:e5:da:61:50:1a:10:90:6c:ec:48:22:78:
                    fd:e6:4b:20:bd:f5:f9:84:2a:1c:54:be:0a:e0:b3:
                    36:e3:a5:1a:37:92:50:10:bc:20:6a:71:0f:62:83:
                    ef:af:15:7b:78:09:50:e3:33:ba:91:96:26:63:68:
                    d0:1c:b4:7f:fe:69:3f:27:1a:14:3f:1b:d8:17:ef:
                    d2:5e:c4:8f:82:39:55:f2:23:77:53:f2:fb:e7:c0:
                    ed:07:f5:74:fe:45:ad:64:91:85:ca:0b:12:99:ea:
                    5a:b2:51:0a:42:93:69:5d:28:bc:8c:53:8a:65:09:
                    0c:e6:76:a0:a6:eb:b9:53:1f:94:76:41:0c:2a:18:
                    ab:1f:8b:c9:a1:f4:62:35:80:7e:45:ee:11:ee:64:
                    5a:2b:36:67:6d:dc:d9:3b:8d:67:99:e0:2d:07:be:
                    d0:41:f1:cf:35:60:56:a6:98:50:b5:a4:e6:57:0e:
                    bc:89:eb:8a:f6:09:15:b7:a8:88:1e:71:47:40:b3:
                    46:94:05:e2:11:56:dc:25:9e:76:d5:59:58:5c:55:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FF:61:D9:9A:3D:FB:C7:5B:77:34:C5:BC:8B:84:1C:70:B9:CC:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f8:9b:6a:8e:a6:de:2d:42:74:c6:8f:1f:fe:ef:74:2c:6d:
         d9:10:14:9b:2d:3d:dc:2c:15:52:45:66:ba:fb:13:c7:d2:37:
         7e:1d:fd:02:37:d8:15:df:c8:1d:57:70:f2:fb:a8:d4:0f:22:
         44:3e:ef:f7:d4:8b:94:77:ad:03:c0:66:a3:45:aa:56:35:05:
         48:c9:08:c6:ce:31:4a:57:e8:35:e9:e7:e2:ca:a7:9b:aa:da:
         c2:b2:8a:cb:73:42:37:96:79:6e:10:13:5b:f8:32:a6:43:da:
         9b:1f:ad:21:4d:f9:75:2c:4e:f5:49:a2:44:76:5b:fd:f1:d7:
         37:f6:87:01:02:c7:bf:65:56:de:7a:f5:c4:4c:9f:64:e9:96:
         08:bc:1d:15:d5:bb:7a:05:50:dd:b0:71:aa:c0:ef:ce:7f:2f:
         49:c2:85:23:7e:5c:2d:ff:24:2e:de:2b:d5:94:70:35:ec:d7:
         47:9c:8c:bd:b1:e6:75:dd:e9:1b:25:4a:b7:1d:5c:d1:d5:8d:
         fa:73:9a:88:f4:fe:e8:9f:28:b7:e5:8c:b3:0e:a9:fc:0d:d0:
         86:ee:08:77:57:8b:a0:35:fc:3e:ba:46:61:7d:1a:d9:02:41:
         2b:6c:b1:8b:6a:7f:5b:08:92:e8:23:5a:b2:ed:e2:68:af:55:
         8d:fc:51:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJTvHqKDeP+x52AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk
OTI4OGVkZmMtNGUzMC00M2Q3LTgzMDUtZTkzYTA0MzZiZWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0oIi1fLZiDHqni3/2zsNNmAxSvrdgZYuJ71
j8J76tNgEvMKOkTB4HmQLIZa50Ll2mFQGhCQbOxIInj95ksgvfX5hCocVL4K4LM2
46UaN5JQELwganEPYoPvrxV7eAlQ4zO6kZYmY2jQHLR//mk/JxoUPxvYF+/SXsSP
gjlV8iN3U/L758DtB/V0/kWtZJGFygsSmepaslEKQpNpXSi8jFOKZQkM5nagpuu5
Ux+UdkEMKhirH4vJofRiNYB+Re4R7mRaKzZnbdzZO41nmeAtB77QQfHPNWBWpphQ
taTmVw68ieuK9gkVt6iIHnFHQLNGlAXiEVbcJZ521VlYXFVSewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKL/YdmaPfvHW3c0xbyLhBxwucydMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTM4Mzc4YWMtMzQxNC0z
MDRhLWJhN2MtNWRkN2JjNmRhYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlV5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAr4m2qOpt4tQnTGjx/+73QsbdkQFJstPdwsFVJFZrr7E8fSN34d/QI3
2BXfyB1XcPL7qNQPIkQ+7/fUi5R3rQPAZqNFqlY1BUjJCMbOMUpX6DXp5+LKp5uq
2sKyistzQjeWeW4QE1v4MqZD2psfrSFN+XUsTvVJokR2W/3x1zf2hwECx79lVt56
9cRMn2Tplgi8HRXVu3oFUN2wcarA785/L0nChSN+XC3/JC7eK9WUcDXs10ecjL2x
5nXd6RslSrcdXNHVjfpzmoj0/uifKLfljLMOqfwN0IbuCHdXi6A1/D66RmF9GtkC
QStssYtqf1sIkugjWrLt4mivVY38URo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:49 2025 by rpki-client