Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e1b26021-ae16-3ae8-a738-804e93838156.roa
File:                     e1b26021-ae16-3ae8-a738-804e93838156.roa (raw, json)
Hash identifier:          E+tuEQUJ6e5rAOMjv+7UbXVgdmWP7CADb8j+jvuAiOA=
Subject key identifier:   CB:DB:1D:EA:F4:CA:2C:59:F6:C9:21:0E:52:B4:48:C7:94:C3:6A:42
Certificate issuer:       /CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Certificate serial:       010D0C9F4328584AD7D12868FFF7A54F23A2B8C0
Authority key identifier: 1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e1b26021-ae16-3ae8-a738-804e93838156.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     394080
IP address blocks:        172.110.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:28:68:ff:f7:a5:4f:23:a2:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=e5255ec6-98db-4a33-9e28-d7218d37e784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b9:05:ac:6c:2f:db:37:e3:a9:60:51:e6:dc:
                    9a:b5:7a:39:eb:00:e1:46:85:47:37:d7:b2:ff:5c:
                    f1:d0:b7:93:1d:1b:24:49:bf:f6:dd:91:8e:23:82:
                    74:a1:d9:e7:7e:c5:ff:51:de:b6:0b:ea:7f:b6:77:
                    38:5e:70:d0:0b:a7:d3:b9:9f:28:a6:15:08:b1:e8:
                    aa:bc:e0:4d:6e:60:1a:36:3a:81:51:cc:e7:eb:d9:
                    7c:4b:37:10:ff:85:cb:ce:ab:3b:c7:9a:12:05:ff:
                    64:02:9b:e1:45:06:14:14:04:98:d7:85:68:10:c6:
                    c4:04:75:5e:89:3d:7b:97:1e:2d:e4:64:f6:3a:1b:
                    97:5a:a4:3c:cc:f6:7d:ba:14:f3:de:94:b2:d2:dd:
                    2c:f0:7d:4f:45:47:ff:ab:dc:91:18:52:66:a1:a5:
                    d0:b7:97:75:a5:9f:16:73:e7:47:96:64:70:99:d2:
                    96:b3:73:cc:cd:c4:7a:13:ce:e1:96:a5:9c:e3:c6:
                    60:2b:22:cc:7d:64:66:5d:36:28:bd:ac:b6:c7:c8:
                    0e:f9:40:25:96:88:62:39:6e:1a:43:42:83:1f:d7:
                    19:13:18:06:65:b3:cd:28:83:e3:98:e4:4c:20:40:
                    a4:2e:72:fa:93:4a:73:53:89:71:1e:ea:cb:75:e5:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DB:1D:EA:F4:CA:2C:59:F6:C9:21:0E:52:B4:48:C7:94:C3:6A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e1b26021-ae16-3ae8-a738-804e93838156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl

            X509v3 Authority Key Identifier:
                keyid:1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ee:e2:ba:35:aa:68:ed:a0:5a:4d:4c:98:5d:16:bf:b0:04:
         57:0f:1a:58:2b:a5:3b:0c:bb:09:34:7b:86:be:bc:56:ea:be:
         0a:e2:e2:5c:fa:80:7d:04:bb:ff:df:ed:4a:b3:b3:4f:7c:45:
         b2:da:39:e5:cd:1d:17:08:8e:89:cf:a6:38:2c:99:19:80:2e:
         c7:9b:4e:cd:79:62:6e:ad:fa:c9:e5:87:32:77:40:20:2d:e5:
         3b:d5:01:c7:22:6d:f0:94:9c:49:74:cb:ed:53:f0:0f:06:3c:
         da:eb:62:45:96:fe:11:b1:f3:b8:f0:60:6d:3d:24:a4:e8:d9:
         95:05:98:30:ad:4f:83:7c:36:2c:a3:db:82:ba:8d:5a:b8:dc:
         43:62:de:25:16:30:6c:8d:c2:70:23:9e:be:96:e3:3c:83:55:
         2f:54:c5:a8:aa:5b:ff:a8:db:98:2b:6b:b8:b1:7b:8f:82:72:
         53:dd:40:63:51:ac:6c:83:fb:8b:3e:07:5c:cd:fb:57:d2:b4:
         5c:12:7f:fd:da:27:e4:93:69:41:19:ce:d7:36:af:bd:95:f0:
         e1:bd:3b:b2:81:12:39:f2:3c:ac:97:07:d9:95:13:b1:ee:b3:
         d5:7f:f7:a1:61:f6:64:07:04:fb:0f:66:e6:7d:ea:7b:94:c5:
         ce:30:38:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Sho//elTyOiuMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdmNDI2YmMtZTAxNi00ZTMxLTg0MjQtYmM3Y2I4NmE4
MDhlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
ZTUyNTVlYzYtOThkYi00YTMzLTllMjgtZDcyMThkMzdlNzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbkFrGwv2zfjqWBR5tyatXo56wDhRoVHN9ey
/1zx0LeTHRskSb/23ZGOI4J0odnnfsX/Ud62C+p/tnc4XnDQC6fTuZ8ophUIseiq
vOBNbmAaNjqBUczn69l8SzcQ/4XLzqs7x5oSBf9kApvhRQYUFASY14VoEMbEBHVe
iT17lx4t5GT2OhuXWqQ8zPZ9uhTz3pSy0t0s8H1PRUf/q9yRGFJmoaXQt5d1pZ8W
c+dHlmRwmdKWs3PMzcR6E87hlqWc48ZgKyLMfWRmXTYovay2x8gO+UAllohiOW4a
Q0KDH9cZExgGZbPNKIPjmORMIECkLnL6k0pzU4lxHurLdeWj+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvbHer0yixZ9skhDlK0SMeUw2pCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hN2Y0
MjZiYy1lMDE2LTRlMzEtODQyNC1iYzdjYjg2YTgwOGUvZTFiMjYwMjEtYWUxNi0z
YWU4LWE3MzgtODA0ZTkzODM4MTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTdmNDI2YmMtZTAxNi00ZTMxLTg0
MjQtYmM3Y2I4NmE4MDhlL2E3ZjQyNmJjLWUwMTYtNGUzMS04NDI0LWJjN2NiODZh
ODA4ZS5jcmwwHwYDVR0jBBgwFoAUGw6WAE4CF+OdBPmjHZ7ZA+pr0HEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hN2Y0MjZiYy1lMDE2LTRlMzEtODQyNC1iYzdj
Yjg2YTgwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG4qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILu4ro1qmjtoFpNTJhdFr+wBFcPGlgrpTsMuwk0e4a+vFbqvgri4lz6
gH0Eu//f7Uqzs098RbLaOeXNHRcIjonPpjgsmRmALsebTs15Ym6t+snlhzJ3QCAt
5TvVAccibfCUnEl0y+1T8A8GPNrrYkWW/hGx87jwYG09JKTo2ZUFmDCtT4N8Niyj
24K6jVq43ENi3iUWMGyNwnAjnr6W4zyDVS9UxaiqW/+o25gra7ixe4+CclPdQGNR
rGyD+4s+B1zN+1fStFwSf/3aJ+STaUEZztc2r72V8OG9O7KBEjnyPKyXB9mVE7Hu
s9V/96Fh9mQHBPsPZuZ96nuUxc4wOOQ=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:35:45 2025 by rpki-client