Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa
File:                     d17eba83-4637-30d8-a17c-efa5eadc2b67.roa (raw, json)
Hash identifier:          KYQWJpw9stYem+lIniMYoULH+lcXWofrN5Su5sWwjHw=
Subject key identifier:   A1:55:10:3F:86:C1:DC:55:FA:63:FA:87:C3:CA:C2:28:26:2E:19:72
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584E94EA5E89EBF8CD34D86EE2AE
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     8075
IP address blocks:        170.110.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:5e:89:eb:f8:cd:34:d8:6e:e2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=969437a7-8b65-49b9-9218-df696bfaaca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:3b:2d:31:2d:75:25:26:5e:fe:fc:51:f7:
                    ff:0d:00:3f:15:30:36:75:a4:d2:36:a6:08:c0:6a:
                    eb:73:be:2e:4f:12:d4:98:d4:59:b4:0b:88:2b:b9:
                    6d:f5:79:f3:5f:65:74:ca:8b:f3:90:18:74:d4:09:
                    ea:46:9e:40:42:9a:cd:f8:19:b6:07:43:f1:62:9c:
                    c8:09:5a:0d:5e:12:97:91:2c:7b:3a:7e:e0:9f:47:
                    a9:1b:b5:d1:4c:a4:56:67:a4:a4:d7:1a:89:56:eb:
                    8c:87:e5:60:e8:48:7a:1e:e3:87:41:19:05:8d:15:
                    c5:26:b2:73:36:e9:26:4b:3c:8e:e1:ba:dc:15:a7:
                    dd:6c:cd:4a:ec:4a:2c:77:ed:d3:ad:ad:fe:43:f0:
                    7d:f8:58:c7:ae:00:53:a6:1a:7f:3d:ba:aa:8f:31:
                    e7:e1:df:30:ec:bb:71:ee:60:5e:0c:9d:6b:3a:8b:
                    79:dc:2a:a7:83:c7:73:1f:13:a1:a5:aa:19:1c:2e:
                    9b:97:70:0b:6a:a9:75:6e:9f:8c:c5:04:83:6b:64:
                    95:d4:be:c2:6e:d1:04:a2:6d:7e:f8:1f:0b:10:c2:
                    ee:19:ae:00:6c:5e:71:fb:99:e5:3a:f3:38:10:38:
                    0f:a7:f6:12:e8:15:c2:b0:0c:a0:29:df:2d:19:53:
                    bd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:55:10:3F:86:C1:DC:55:FA:63:FA:87:C3:CA:C2:28:26:2E:19:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.110.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:4a:a9:9c:4e:16:fa:6c:33:20:be:98:10:96:08:48:25:bc:
         dc:01:cd:15:0b:98:e1:65:7c:02:c9:f0:5b:3c:81:8f:78:27:
         09:6f:ee:6a:69:9d:30:c2:bf:4f:b7:c7:25:56:fa:d5:ed:50:
         62:ba:09:1a:77:fa:1b:6a:33:b8:92:ff:5e:5c:55:a2:46:7f:
         2d:26:a6:98:e4:49:c4:9f:1e:e7:31:69:49:d8:35:15:4a:9b:
         42:4c:ff:dc:65:43:63:97:69:14:e8:fa:d6:d6:07:bb:04:e2:
         cf:df:37:b0:38:0d:74:35:7e:0a:97:d7:7e:93:35:8f:48:5a:
         60:54:4c:26:f4:3f:05:f7:a9:5c:b1:9b:42:3b:4a:20:e4:09:
         7a:a1:a1:a8:4e:a7:ab:05:19:ea:e8:ca:55:98:4b:2b:2a:0d:
         95:4b:9d:4a:31:ad:86:4e:52:fd:41:e4:26:f1:84:67:16:40:
         a0:ab:7d:d5:67:1c:ae:8c:71:80:db:d7:4d:10:5b:4c:0d:06:
         6f:05:10:7d:a9:2b:06:36:9d:33:c5:6c:82:a9:e0:83:f6:7e:
         d6:6a:37:f6:6d:37:a6:95:d9:1a:06:fc:84:c1:27:33:57:ed:
         e6:a9:98:b7:6c:f5:06:e2:a8:1f:ce:b5:42:d2:2b:b3:f2:90:
         cc:fc:d3:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6l6J6/jNNNhu4q4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGJlMGQxYTQtMmM4OC00NTk2LTgxZDctM2I2Njg1ZTA0
YTJkMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
OTY5NDM3YTctOGI2NS00OWI5LTkyMTgtZGY2OTZiZmFhY2E1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zI7LTEtdSUmXv78Uff/DQA/FTA2daTSNqYI
wGrrc74uTxLUmNRZtAuIK7lt9XnzX2V0yovzkBh01AnqRp5AQprN+Bm2B0PxYpzI
CVoNXhKXkSx7On7gn0epG7XRTKRWZ6Sk1xqJVuuMh+Vg6Eh6HuOHQRkFjRXFJrJz
NukmSzyO4brcFafdbM1K7Eosd+3Tra3+Q/B9+FjHrgBTphp/PbqqjzHn4d8w7Ltx
7mBeDJ1rOot53Cqng8dzHxOhpaoZHC6bl3ALaql1bp+MxQSDa2SV1L7CbtEEom1+
+B8LEMLuGa4AbF5x+5nlOvM4EDgPp/YS6BXCsAygKd8tGVO9+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKFVED+GwdxV+mP6h8PKwigmLhlyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wYmUw
ZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2ODVlMDRhMmQvZDE3ZWJhODMtNDYzNy0z
MGQ4LWExN2MtZWZhNWVhZGMyYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGJlMGQxYTQtMmM4OC00NTk2LTgx
ZDctM2I2Njg1ZTA0YTJkLzBiZTBkMWE0LTJjODgtNDU5Ni04MWQ3LTNiNjY4NWUw
NGEyZC5jcmwwHwYDVR0jBBgwFoAUv5vktT4TlR8HU9jpDI5FWg61DIIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wYmUwZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2
ODVlMDRhMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqm76MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRKqZxOFvpsMyC+mBCWCEglvNwBzRULmOFlfALJ8Fs8gY94Jwlv7mpp
nTDCv0+3xyVW+tXtUGK6CRp3+htqM7iS/15cVaJGfy0mppjkScSfHucxaUnYNRVK
m0JM/9xlQ2OXaRTo+tbWB7sE4s/fN7A4DXQ1fgqX136TNY9IWmBUTCb0PwX3qVyx
m0I7SiDkCXqhoahOp6sFGeroylWYSysqDZVLnUoxrYZOUv1B5CbxhGcWQKCrfdVn
HK6McYDb100QW0wNBm8FEH2pKwY2nTPFbIKp4IP2ftZqN/ZtN6aV2RoG/ITBJzNX
7eapmLds9QbiqB/OtULSK7PykMz808E=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:59:10 2026 by rpki-client