Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa
File:                     d17eba83-4637-30d8-a17c-efa5eadc2b67.roa (raw, json)
Hash identifier:          XMsda+ZdKBVrJeDVNfTHyL1Dipq0N3ogAWNpyt/inVo=
Subject key identifier:   A1:CD:39:83:24:F7:34:2A:FB:90:4A:3B:20:75:42:45:7E:84:14:B4
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584A331AF87B999EC1972A2D02F0
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     8075
IP address blocks:        170.110.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f8:7b:99:9e:c1:97:2a:2d:02:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=84e0a88b-448e-4a6b-b7a2-290725a1facc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:71:90:30:f5:c8:1c:76:7c:e2:7e:b0:c0:24:
                    f7:49:0e:6a:cf:44:6e:3b:83:cb:a4:1b:51:fa:5f:
                    5d:be:9e:d0:ef:a1:c8:57:f5:d1:08:d0:1f:e4:80:
                    0e:00:13:be:fc:70:a9:a8:80:a1:06:4e:5c:f8:c7:
                    6c:aa:3a:2d:c2:04:38:e1:c2:e1:20:d8:5a:10:ce:
                    3d:af:fb:0f:34:b3:af:bf:d1:b5:0b:0b:fe:83:83:
                    44:37:5d:07:1f:cd:fc:ca:73:0a:08:f7:3a:49:1a:
                    45:ce:ba:5f:77:78:f7:7f:00:bf:43:bd:7c:d0:64:
                    95:a7:20:d7:ee:71:d4:ee:56:6f:77:10:f0:b7:0d:
                    e5:9a:0b:ed:78:0a:0a:16:f9:e5:44:f8:76:c8:53:
                    79:2f:7f:99:96:7c:40:9b:2e:32:b6:aa:9a:28:57:
                    9e:9b:2c:74:9b:36:7c:40:f6:32:b0:b0:3b:18:fb:
                    9d:69:95:e0:4a:0d:86:b1:4b:bc:d1:51:42:90:a1:
                    ac:c4:fc:3d:05:23:7d:43:08:e9:5d:b3:ce:17:83:
                    a7:45:54:26:9e:49:39:dc:b5:ee:b2:81:b7:10:20:
                    d2:49:f8:65:28:ff:75:66:d1:5f:92:68:c5:4e:2b:
                    3a:d5:3b:bb:0f:56:c7:6e:99:fb:e1:c8:47:26:a7:
                    e3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CD:39:83:24:F7:34:2A:FB:90:4A:3B:20:75:42:45:7E:84:14:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.110.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:a8:a5:75:34:65:73:b4:dd:81:5c:a8:d8:59:83:0b:f2:f8:
         95:eb:b5:dd:95:b1:3e:42:59:11:04:74:e0:db:e1:ad:ab:7a:
         4a:26:ad:59:d9:2e:7a:05:41:a4:dd:c1:ab:eb:75:60:36:f7:
         bc:20:2a:3d:f0:bd:83:c9:92:33:12:c7:70:80:39:d0:75:f9:
         fc:b5:41:e1:07:89:6e:71:81:d3:bb:b2:50:d5:9c:1e:d3:68:
         be:4c:bf:bb:e6:b2:a5:da:2f:bc:c1:3a:b7:97:3d:26:5d:33:
         14:8c:9c:78:db:bb:28:3a:a5:c8:85:a5:5d:ae:bc:20:bc:a1:
         cd:2f:f8:e8:12:e9:74:31:d4:ee:50:cb:d6:8b:49:1c:ac:38:
         cf:e5:f9:10:87:fe:4e:77:40:6e:a7:61:ce:d6:5d:42:ef:1d:
         70:53:57:1a:44:d1:87:ae:f4:f7:7a:96:78:78:76:1e:ae:23:
         74:9d:d2:a6:e4:ec:70:ba:a5:ad:7f:b1:4b:50:98:1b:da:64:
         df:f2:7a:35:5b:1e:78:46:9f:e1:bd:71:ec:62:2f:a7:c7:e9:
         d9:6d:3c:93:a8:72:4e:07:91:71:45:ae:e8:6e:b1:c7:8c:07:
         6e:bb:55:ab:63:86:f3:3c:f4:8e:20:2c:30:f2:b6:fa:68:0e:
         2a:2c:76:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGvh7mZ7BlyotAvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGJlMGQxYTQtMmM4OC00NTk2LTgxZDctM2I2Njg1ZTA0
YTJkMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
ODRlMGE4OGItNDQ4ZS00YTZiLWI3YTItMjkwNzI1YTFmYWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nGQMPXIHHZ84n6wwCT3SQ5qz0RuO4PLpBtR
+l9dvp7Q76HIV/XRCNAf5IAOABO+/HCpqIChBk5c+MdsqjotwgQ44cLhINhaEM49
r/sPNLOvv9G1Cwv+g4NEN10HH838ynMKCPc6SRpFzrpfd3j3fwC/Q7180GSVpyDX
7nHU7lZvdxDwtw3lmgvteAoKFvnlRPh2yFN5L3+ZlnxAmy4ytqqaKFeemyx0mzZ8
QPYysLA7GPudaZXgSg2GsUu80VFCkKGsxPw9BSN9QwjpXbPOF4OnRVQmnkk53LXu
soG3ECDSSfhlKP91ZtFfkmjFTis61Tu7D1bHbpn74chHJqfjawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKHNOYMk9zQq+5BKOyB1QkV+hBS0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wYmUw
ZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2ODVlMDRhMmQvZDE3ZWJhODMtNDYzNy0z
MGQ4LWExN2MtZWZhNWVhZGMyYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGJlMGQxYTQtMmM4OC00NTk2LTgx
ZDctM2I2Njg1ZTA0YTJkLzBiZTBkMWE0LTJjODgtNDU5Ni04MWQ3LTNiNjY4NWUw
NGEyZC5jcmwwHwYDVR0jBBgwFoAUv5vktT4TlR8HU9jpDI5FWg61DIIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wYmUwZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2
ODVlMDRhMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqm76MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALaopXU0ZXO03YFcqNhZgwvy+JXrtd2VsT5CWREEdODb4a2rekomrVnZ
LnoFQaTdwavrdWA297wgKj3wvYPJkjMSx3CAOdB1+fy1QeEHiW5xgdO7slDVnB7T
aL5Mv7vmsqXaL7zBOreXPSZdMxSMnHjbuyg6pciFpV2uvCC8oc0v+OgS6XQx1O5Q
y9aLSRysOM/l+RCH/k53QG6nYc7WXULvHXBTVxpE0Yeu9Pd6lnh4dh6uI3Sd0qbk
7HC6pa1/sUtQmBvaZN/yejVbHnhGn+G9cexiL6fH6dltPJOock4HkXFFruhusceM
B267VatjhvM89I4gLDDytvpoDiosduU=
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:45:18 2025 by rpki-client