Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa
File:                     c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa (raw, json)
Hash identifier:          LxXpeuskxGA/2Rh9X+vdQQXd39qfDYDPU6Bd/NfYARg=
Subject key identifier:   7F:C8:7A:EA:EC:1F:B5:FE:1A:70:5C:78:3D:C1:08:60:5E:ED:A8:92
Certificate issuer:       /CN=dba0d862-3d0e-4150-90de-3c956c1b532d
Certificate serial:       010D0C9F4328584AD23BD322EC14EB4CE98213C0
Authority key identifier: 8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     394177
IP address blocks:        170.75.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:d3:22:ec:14:eb:4c:e9:82:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba0d862-3d0e-4150-90de-3c956c1b532d
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=d71eac03-6b70-4978-8412-44b23c2bb8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:1e:21:b3:e8:4b:34:96:73:c5:46:e2:55:
                    4f:7d:bc:a7:0a:b0:b6:b7:4f:22:77:42:d0:dd:a7:
                    4f:78:7d:40:37:9e:48:0e:3b:88:f5:f9:f5:da:09:
                    48:3b:88:32:5d:11:82:e3:c4:84:39:ce:09:12:71:
                    57:f1:a7:07:a0:67:cb:cb:86:2c:f4:cf:64:a6:ac:
                    b8:65:bd:6a:a0:79:76:9a:f5:0d:70:b3:85:22:21:
                    65:c7:07:db:8b:4e:3f:82:92:e5:b9:79:f5:0a:ea:
                    08:ef:9e:df:d2:96:3e:30:b9:72:74:f2:f7:3f:ab:
                    98:92:db:26:8c:d5:51:24:bf:ed:c8:bd:94:ef:ab:
                    57:8b:b9:2c:3a:88:e2:a7:59:e3:a1:17:8f:11:86:
                    0a:bb:09:6d:8b:6a:63:06:4e:2e:ab:a3:7e:ea:d2:
                    4c:ca:1e:bc:22:7d:ed:2e:a9:f9:65:5a:79:ec:c5:
                    e4:4e:7b:52:c1:c7:66:48:fe:64:d5:7b:95:2c:a4:
                    f6:c0:3a:b6:c7:a6:60:c7:a8:c6:36:42:eb:97:a3:
                    82:4e:d0:96:ef:f4:96:f6:6a:28:19:01:c5:95:a5:
                    77:8c:4c:95:b3:30:a3:35:90:dd:91:e0:9a:d9:ea:
                    c6:6b:72:79:77:e5:a2:b1:e0:b2:37:5a:7e:46:42:
                    12:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C8:7A:EA:EC:1F:B5:FE:1A:70:5C:78:3D:C1:08:60:5E:ED:A8:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl

            X509v3 Authority Key Identifier:
                keyid:8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:aa:0d:4f:5c:9b:eb:86:dc:15:1c:ad:16:2f:e7:93:1a:f9:
         3c:6c:3e:30:8a:9b:52:e2:77:69:88:5c:6b:9e:55:0c:2d:4b:
         c4:97:7b:09:d8:c8:c6:1b:58:30:a5:87:16:21:e9:36:bf:6c:
         28:11:af:6d:42:29:ec:bd:e8:70:ee:66:3f:a6:90:3a:57:92:
         fb:ab:e2:05:2b:57:3f:b2:41:c6:bb:0b:f0:f6:03:9a:32:98:
         a0:d7:a3:6d:a6:24:ad:7b:ea:63:a8:b4:2c:80:20:b8:28:a5:
         7b:be:85:8e:4c:3b:92:e4:58:a9:10:2d:db:6f:6a:38:56:d4:
         7b:d8:02:5c:58:d2:2c:53:16:31:b8:21:6f:72:f5:c9:99:9c:
         38:fe:a0:27:27:41:7b:66:9c:98:91:4c:f5:ff:ac:7d:05:9b:
         ff:3b:13:a3:03:db:9c:ae:7e:2b:74:6d:a4:a9:4c:d8:60:d3:
         d8:e6:7e:38:5f:b2:bd:40:29:da:58:32:2a:20:01:e7:8d:bd:
         5c:1c:81:ea:d1:1a:c5:16:e8:b5:78:01:ea:de:48:ea:2e:b8:
         85:9f:c7:59:8e:de:1f:26:81:c2:f3:1e:5b:60:60:fb:69:fb:
         48:b8:ef:65:6a:bf:2f:26:8a:c7:34:be:8e:d4:92:09:eb:75:
         d3:a2:d0:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9Mi7BTrTOmCE8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGJhMGQ4NjItM2QwZS00MTUwLTkwZGUtM2M5NTZjMWI1
MzJkMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
ZDcxZWFjMDMtNmI3MC00OTc4LTg0MTItNDRiMjNjMmJiOGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1MeIbPoSzSWc8VG4lVPfbynCrC2t08id0LQ
3adPeH1AN55IDjuI9fn12glIO4gyXRGC48SEOc4JEnFX8acHoGfLy4Ys9M9kpqy4
Zb1qoHl2mvUNcLOFIiFlxwfbi04/gpLluXn1CuoI757f0pY+MLlydPL3P6uYktsm
jNVRJL/tyL2U76tXi7ksOojip1njoRePEYYKuwlti2pjBk4uq6N+6tJMyh68In3t
Lqn5ZVp57MXkTntSwcdmSP5k1XuVLKT2wDq2x6Zgx6jGNkLrl6OCTtCW7/SW9moo
GQHFlaV3jEyVszCjNZDdkeCa2erGa3J5d+WiseCyN1p+RkISawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/IeursH7X+GnBceD3BCGBe7aiSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYmEw
ZDg2Mi0zZDBlLTQxNTAtOTBkZS0zYzk1NmMxYjUzMmQvYzBmNjY3MmMtMGQxZS0z
M2M3LTgyYTItN2RlNjIyYjEwMjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGJhMGQ4NjItM2QwZS00MTUwLTkw
ZGUtM2M5NTZjMWI1MzJkL2RiYTBkODYyLTNkMGUtNDE1MC05MGRlLTNjOTU2YzFi
NTMyZC5jcmwwHwYDVR0jBBgwFoAUixpiLfa8wUDAoIW4NK7DDDxt8lswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9kYmEwZDg2Mi0zZDBlLTQxNTAtOTBkZS0zYzk1
NmMxYjUzMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqkv5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFCqDU9cm+uG3BUcrRYv55Ma+TxsPjCKm1Lid2mIXGueVQwtS8SXewnY
yMYbWDClhxYh6Ta/bCgRr21CKey96HDuZj+mkDpXkvur4gUrVz+yQca7C/D2A5oy
mKDXo22mJK176mOotCyAILgopXu+hY5MO5LkWKkQLdtvajhW1HvYAlxY0ixTFjG4
IW9y9cmZnDj+oCcnQXtmnJiRTPX/rH0Fm/87E6MD25yufit0baSpTNhg09jmfjhf
sr1AKdpYMiogAeeNvVwcgerRGsUW6LV4AereSOouuIWfx1mO3h8mgcLzHltgYPtp
+0i472Vqvy8misc0vo7UkgnrddOi0EQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:12:52 2025 by rpki-client