Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b9d4483c-4854-3052-bbca-160206d7c741.roa
File:                     b9d4483c-4854-3052-bbca-160206d7c741.roa (raw, json)
Hash identifier:          51fDXgMrL+Vzc5Wo1veuGP57xRx+FWWSJjxLKh8qTiw=
Subject key identifier:   DB:70:33:68:31:30:7A:5F:AF:F0:CA:68:74:8C:A3:B2:2E:24:FE:A4
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABFD398B9BF68DC6077257700
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b9d4483c-4854-3052-bbca-160206d7c741.roa
Signing time:             Mon 04 Aug 2025 22:46:30 +0000
ROA not before:           Mon 04 Aug 2025 22:46:30 +0000
ROA not after:            Sun 02 Nov 2025 23:46:30 +0000
asID:                     8987
IP address blocks:        170.85.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bf:d3:98:b9:bf:68:dc:60:77:25:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  4 22:46:30 2025 GMT
            Not After : Nov  2 23:46:30 2025 GMT
        Subject: CN=332a455e-cc15-4d71-bb65-3cd660aa6374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:19:58:dc:bf:09:c0:07:95:e8:8d:5f:00:6a:
                    6f:45:63:94:bf:6f:47:b6:10:9b:89:44:28:aa:b9:
                    56:1e:fd:ad:f7:95:23:53:72:dc:5e:97:44:e9:b7:
                    0f:54:42:71:47:8f:21:ac:eb:6c:bf:a8:e6:46:55:
                    26:c1:e8:62:aa:a1:a4:b2:d9:0b:73:af:e3:38:0b:
                    4c:19:7e:ae:d9:9a:22:c6:f2:ae:df:30:37:6a:dd:
                    62:b7:c0:99:63:c0:96:6e:c0:0e:6d:ba:45:53:a8:
                    32:b7:13:52:9a:e3:9c:70:f6:b8:da:54:c6:6b:3c:
                    e6:3d:28:4c:74:2e:32:7b:d9:5a:17:59:19:2d:51:
                    72:8d:e4:e0:a7:a1:ba:26:d4:ca:58:f3:5a:a9:24:
                    36:cc:f8:89:bb:f4:5e:87:20:9f:39:69:00:f0:ed:
                    f0:9d:21:1b:fc:8b:ae:92:f5:55:8d:57:84:70:68:
                    60:0e:d7:56:1a:4c:f2:57:db:15:f1:4f:e3:49:2a:
                    5a:de:64:2e:a2:49:be:9b:89:88:b0:92:39:9c:2f:
                    a7:45:84:e8:08:6e:30:02:e8:91:e1:c7:99:ca:b0:
                    31:93:28:41:d7:ab:d9:de:2b:76:6e:ff:18:15:41:
                    e3:75:15:f4:8e:83:b0:86:0a:dd:11:fe:f4:c1:70:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:70:33:68:31:30:7A:5F:AF:F0:CA:68:74:8C:A3:B2:2E:24:FE:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b9d4483c-4854-3052-bbca-160206d7c741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:bf:9d:28:ff:d9:47:27:9d:a2:d3:bc:09:63:91:ae:a6:11:
         66:1f:4e:21:76:bc:50:cc:8c:21:79:df:b4:e6:ed:30:71:b9:
         b1:6b:f0:3a:63:6c:56:91:cc:2c:1b:1e:93:28:4e:51:a2:25:
         9f:0f:42:eb:7f:19:c4:f3:a4:b3:3f:73:22:50:d5:ca:ac:9c:
         4b:30:f0:db:98:50:d1:f6:c1:0f:55:92:60:c7:38:a6:3c:9f:
         e8:56:7e:76:d3:6f:c1:dd:83:1c:90:76:87:85:6d:61:cd:d0:
         0d:4d:b4:6c:71:af:01:5d:03:1e:17:75:52:d2:5e:51:2d:58:
         0f:66:48:bb:28:64:a8:e4:28:6b:7c:26:ae:a4:e3:57:ee:12:
         05:24:6b:b6:72:29:90:9e:b7:8f:45:73:2e:75:9e:ad:ab:d3:
         a4:4b:e1:dc:77:d2:48:fc:7e:ef:5e:bd:31:2b:d6:a8:75:04:
         92:8d:c4:82:53:23:ac:ac:73:bf:81:24:a3:19:ea:c0:1b:9f:
         49:f7:31:97:38:52:78:8d:8c:e7:a0:6b:0d:ef:f8:a5:93:b4:
         c7:1e:c4:21:89:a1:33:79:43:4c:fd:45:bf:47:98:43:16:bf:
         c0:00:ca:ce:85:cf:17:4d:7d:08:23:eb:1e:bd:f2:6e:7f:5d:
         cd:d4:5c:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq/05i5v2jcYHcldwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDgwNDIyNDYzMFoXDTI1MTEwMjIzNDYzMFowLzEtMCsGA1UEAxMk
MzMyYTQ1NWUtY2MxNS00ZDcxLWJiNjUtM2NkNjYwYWE2Mzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxlY3L8JwAeV6I1fAGpvRWOUv29HthCbiUQo
qrlWHv2t95UjU3LcXpdE6bcPVEJxR48hrOtsv6jmRlUmwehiqqGkstkLc6/jOAtM
GX6u2ZoixvKu3zA3at1it8CZY8CWbsAObbpFU6gytxNSmuOccPa42lTGazzmPShM
dC4ye9laF1kZLVFyjeTgp6G6JtTKWPNaqSQ2zPiJu/RehyCfOWkA8O3wnSEb/Iuu
kvVVjVeEcGhgDtdWGkzyV9sV8U/jSSpa3mQuokm+m4mIsJI5nC+nRYToCG4wAuiR
4ceZyrAxkyhB16vZ3it2bv8YFUHjdRX0joOwhgrdEf70wXAwjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNtwM2gxMHpfr/DKaHSMo7IuJP6kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjlkNDQ4M2MtNDg1NC0z
MDUyLWJiY2EtMTYwMjA2ZDdjNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlX7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADy/nSj/2UcnnaLTvAljka6mEWYfTiF2vFDMjCF537Tm7TBxubFr8Dpj
bFaRzCwbHpMoTlGiJZ8PQut/GcTzpLM/cyJQ1cqsnEsw8NuYUNH2wQ9VkmDHOKY8
n+hWfnbTb8HdgxyQdoeFbWHN0A1NtGxxrwFdAx4XdVLSXlEtWA9mSLsoZKjkKGt8
Jq6k41fuEgUka7ZyKZCet49Fcy51nq2r06RL4dx30kj8fu9evTEr1qh1BJKNxIJT
I6ysc7+BJKMZ6sAbn0n3MZc4UniNjOegaw3v+KWTtMcexCGJoTN5Q0z9Rb9HmEMW
v8AAys6FzxdNfQgj6x698m5/Xc3UXKU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:15:31 2025 by rpki-client