Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa
File:                     aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa (raw, json)
Hash identifier:          TjxKb18qw61x8JUkx+miL3K5/Ud/JDX7Znh2chMXoT4=
Subject key identifier:   B0:0C:28:64:AB:5C:14:92:48:CA:35:2A:A8:1C:E3:38:3D:BA:1E:AE
Certificate issuer:       /CN=31671c23-3278-409b-837d-7dfe69606940
Certificate serial:       010D0C9F4328584ACF70F690581BB1C681237880
Authority key identifier: 67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        170.62.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:70:f6:90:58:1b:b1:c6:81:23:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31671c23-3278-409b-837d-7dfe69606940
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=65d05ff4-bc67-4048-a06e-39a9a2daf111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4c:1d:05:b9:42:d0:43:d7:fc:00:02:c1:e9:
                    94:49:1a:23:f4:a7:24:ce:2a:0f:35:57:d8:e3:d8:
                    82:f0:01:91:d9:fb:93:a7:c7:17:48:aa:20:ee:d9:
                    84:a8:a8:2f:95:30:b4:aa:fd:4b:3b:6a:ee:e6:06:
                    1d:05:90:37:23:ad:de:bd:62:8b:24:11:f3:f8:9d:
                    97:30:d4:69:00:87:1e:2d:eb:9b:71:7f:88:67:91:
                    c6:d9:9a:0e:70:40:58:39:3d:2e:80:81:b1:fa:5e:
                    cc:7f:52:43:ff:71:3f:1f:62:91:4e:91:b9:53:16:
                    fd:af:5b:83:69:62:17:02:32:3c:09:72:38:cc:e5:
                    c6:f7:69:34:ae:d0:d4:63:40:90:f0:03:4a:7e:45:
                    b1:a8:3a:20:6f:66:10:81:7e:d2:95:16:d4:39:26:
                    3b:32:3a:b1:2f:ac:c3:26:b9:1e:7c:13:f4:8b:85:
                    3c:c0:8b:bd:6a:91:42:4b:d8:77:59:8b:c7:d0:9d:
                    8c:df:37:8c:4e:83:f1:06:24:43:b0:03:19:f2:64:
                    41:1c:01:e5:bb:aa:1d:76:79:96:87:b3:b4:5b:96:
                    ce:b2:81:00:2e:1f:93:5b:3d:93:b9:17:96:bb:3c:
                    3a:89:71:20:6c:3f:1b:be:95:72:8d:50:30:98:38:
                    fe:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0C:28:64:AB:5C:14:92:48:CA:35:2A:A8:1C:E3:38:3D:BA:1E:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl

            X509v3 Authority Key Identifier:
                keyid:67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:9a:b1:f6:68:e4:79:5b:b2:78:27:76:91:fd:78:30:e3:89:
         35:8d:b8:71:28:26:7f:b5:7d:14:76:02:2c:ed:98:41:34:c4:
         22:9a:d7:19:97:32:1d:75:9c:85:c3:c1:f3:15:73:17:6d:b8:
         6b:a2:df:c0:ac:f0:49:35:e2:01:91:95:cb:d2:4e:8a:b8:75:
         33:93:54:30:6b:a7:ce:c6:8b:81:e0:a3:a6:7a:03:9f:58:fb:
         0b:4d:47:c1:87:a1:93:d4:de:f3:f2:d5:c4:6a:b0:03:7f:8e:
         07:19:14:ca:b4:8c:dc:78:dd:0e:8b:f2:41:cf:ae:2a:86:f8:
         6d:93:51:2e:5f:4c:79:23:f1:81:e0:1a:3c:78:61:3e:82:ca:
         84:22:49:c3:48:cd:7a:35:e6:93:0c:77:2a:ee:cf:e8:08:29:
         0a:f0:27:66:68:2f:74:4d:11:7d:bc:75:f7:d4:11:57:f5:33:
         9e:1b:90:bf:80:1f:15:63:6a:7e:22:29:2a:19:2a:c6:45:58:
         35:2b:3c:93:3c:f3:a6:6e:20:57:31:30:2e:86:a7:72:ed:d1:
         d5:a7:2e:0c:1c:39:5e:19:86:24:2b:ae:8d:45:b4:5f:8f:ab:
         25:2c:0a:fb:05:2f:81:6b:da:14:f8:0e:6c:44:8d:3f:88:de:
         7b:45:d0:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcPaQWBuxxoEjeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE2NzFjMjMtMzI3OC00MDliLTgzN2QtN2RmZTY5NjA2
OTQwMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk
NjVkMDVmZjQtYmM2Ny00MDQ4LWEwNmUtMzlhOWEyZGFmMTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEwdBblC0EPX/AACwemUSRoj9KckzioPNVfY
49iC8AGR2fuTp8cXSKog7tmEqKgvlTC0qv1LO2ru5gYdBZA3I63evWKLJBHz+J2X
MNRpAIceLeubcX+IZ5HG2ZoOcEBYOT0ugIGx+l7Mf1JD/3E/H2KRTpG5Uxb9r1uD
aWIXAjI8CXI4zOXG92k0rtDUY0CQ8ANKfkWxqDogb2YQgX7SlRbUOSY7MjqxL6zD
JrkefBP0i4U8wIu9apFCS9h3WYvH0J2M3zeMToPxBiRDsAMZ8mRBHAHlu6oddnmW
h7O0W5bOsoEALh+TWz2TuReWuzw6iXEgbD8bvpVyjVAwmDj+ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLAMKGSrXBSSSMo1Kqgc4zg9uh6uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMTY3
MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZlNjk2MDY5NDAvYWFjZjgzNWUtYTkwYi0z
ZTRhLTliMzQtZmRhZmRkODgyN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzE2NzFjMjMtMzI3OC00MDliLTgz
N2QtN2RmZTY5NjA2OTQwLzMxNjcxYzIzLTMyNzgtNDA5Yi04MzdkLTdkZmU2OTYw
Njk0MC5jcmwwHwYDVR0jBBgwFoAUZxYj4GdaMB9RUq8/Ry/8J86NPxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zMTY3MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZl
Njk2MDY5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj4rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABaasfZo5HlbsngndpH9eDDjiTWNuHEoJn+1fRR2AiztmEE0xCKa1xmX
Mh11nIXDwfMVcxdtuGui38Cs8Ek14gGRlcvSToq4dTOTVDBrp87Gi4Hgo6Z6A59Y
+wtNR8GHoZPU3vPy1cRqsAN/jgcZFMq0jNx43Q6L8kHPriqG+G2TUS5fTHkj8YHg
Gjx4YT6CyoQiScNIzXo15pMMdyruz+gIKQrwJ2ZoL3RNEX28dffUEVf1M54bkL+A
HxVjan4iKSoZKsZFWDUrPJM886ZuIFcxMC6Gp3Lt0dWnLgwcOV4ZhiQrro1FtF+P
qyUsCvsFL4Fr2hT4DmxEjT+I3ntF0Co=
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:17:15 2025 by rpki-client