Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bf607bd4-c593-35b7-8e93-60f04488cbd3.roa
File:                     bf607bd4-c593-35b7-8e93-60f04488cbd3.roa (raw, json)
Hash identifier:          8GB9uIYdo8BLDOvSQhO3jq3QqKYSGhAkpZhB8TIJkgU=
Subject key identifier:   41:B8:59:A5:7D:E0:B2:71:76:D3:80:11:B3:3B:EB:44:C6:02:0F:04
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B6BC757786047D24649449F00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bf607bd4-c593-35b7-8e93-60f04488cbd3.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     64267
IP address blocks:        170.199.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:57:78:60:47:d2:46:49:44:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=c901de0b-4060-456f-bd07-858a6ef8aff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cf:f8:10:3c:45:50:a9:3a:9a:52:3f:aa:75:
                    06:28:d6:c6:24:da:d4:19:3f:79:7b:03:be:23:0f:
                    6c:7c:24:42:e5:7c:da:76:e4:ab:77:4f:be:83:54:
                    d3:c5:7d:cd:09:a8:04:83:9d:48:76:e6:ba:be:61:
                    39:b2:ae:6f:9a:26:6e:fa:c1:fd:7b:11:71:3a:59:
                    b8:7c:ac:db:1d:5c:e4:9d:89:73:26:d3:be:20:e5:
                    db:2f:3d:8c:0f:c2:dd:a9:fb:10:93:9d:60:1d:fd:
                    8b:ac:89:dd:43:b7:6d:6e:ac:95:fa:b1:ea:1f:f9:
                    13:de:50:38:bb:dd:48:c5:e8:97:ee:1f:b6:2f:29:
                    fb:87:2e:3a:27:9d:b3:64:f1:3d:fe:2e:66:70:27:
                    e0:a0:27:62:d0:c8:7e:f4:c1:f9:a3:79:a4:29:1d:
                    18:5e:74:24:85:90:b7:f1:cb:8b:24:e9:a5:56:30:
                    2f:8d:d1:f7:4d:1d:ae:fc:95:ac:d5:7e:ca:97:14:
                    dc:80:36:9c:33:14:02:76:87:ef:8a:99:12:37:f8:
                    18:69:c5:d9:1d:33:46:5f:ee:4c:84:ba:09:57:21:
                    bb:36:1d:fb:54:76:c9:ec:d6:11:12:95:07:16:a2:
                    a1:ac:95:39:cb:a7:7b:40:02:ac:3e:96:b2:7e:61:
                    dc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B8:59:A5:7D:E0:B2:71:76:D3:80:11:B3:3B:EB:44:C6:02:0F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bf607bd4-c593-35b7-8e93-60f04488cbd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:c8:82:60:9f:28:f1:3d:0f:8d:7c:d7:4a:82:7d:e1:f1:c8:
         5b:33:2f:2a:41:62:b6:af:ed:09:86:de:a3:b2:e3:3f:d0:ad:
         54:a5:71:7b:1b:de:2c:4e:d3:a2:a7:d3:ec:4b:4a:2c:56:26:
         38:6a:df:aa:ca:c6:f5:74:bc:a8:6b:5d:27:94:7d:fe:48:82:
         2e:a3:5e:67:1a:81:7c:c1:41:9d:44:b5:83:38:79:ff:3b:5c:
         50:18:ca:9a:7b:be:c0:02:3c:f4:39:22:49:92:71:f2:a0:e8:
         b3:5e:05:69:b5:ef:5f:7b:81:05:67:71:3a:d5:b5:22:8f:43:
         87:6b:e4:4e:3e:7c:e6:aa:04:52:87:10:84:07:f3:a7:2f:e4:
         22:48:de:05:56:fa:27:da:38:73:38:b1:a3:e8:82:87:eb:6b:
         01:41:23:f8:d3:6d:dc:86:be:84:84:e5:23:66:01:4f:74:38:
         eb:18:87:bf:cc:e1:43:d0:cc:c1:2d:f8:20:f2:cf:69:64:ed:
         bd:98:b2:91:92:10:d0:53:cb:1e:bc:65:07:e2:9f:54:48:11:
         56:f2:d8:32:79:61:44:57:27:45:b5:67:b1:e8:f9:1b:d1:3d:
         70:0d:4d:59:82:4a:03:21:e4:1c:b4:c9:b1:9c:6b:f5:bd:67:
         26:88:6b:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1d4YEfSRklEnwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk
YzkwMWRlMGItNDA2MC00NTZmLWJkMDctODU4YTZlZjhhZmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4c/4EDxFUKk6mlI/qnUGKNbGJNrUGT95ewO+
Iw9sfCRC5XzaduSrd0++g1TTxX3NCagEg51Idua6vmE5sq5vmiZu+sH9exFxOlm4
fKzbHVzknYlzJtO+IOXbLz2MD8LdqfsQk51gHf2LrIndQ7dtbqyV+rHqH/kT3lA4
u91IxeiX7h+2Lyn7hy46J52zZPE9/i5mcCfgoCdi0Mh+9MH5o3mkKR0YXnQkhZC3
8cuLJOmlVjAvjdH3TR2u/JWs1X7KlxTcgDacMxQCdofvipkSN/gYacXZHTNGX+5M
hLoJVyG7Nh37VHbJ7NYREpUHFqKhrJU5y6d7QAKsPpayfmHc+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEG4WaV94LJxdtOAEbM760TGAg8EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYmY2MDdiZDQtYzU5My0z
NWI3LThlOTMtNjBmMDQ0ODhjYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqsfgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMfIgmCfKPE9D41810qCfeHxyFszLypBYrav7QmG3qOy4z/QrVSlcXsb
3ixO06Kn0+xLSixWJjhq36rKxvV0vKhrXSeUff5Igi6jXmcagXzBQZ1EtYM4ef87
XFAYypp7vsACPPQ5IkmScfKg6LNeBWm17197gQVncTrVtSKPQ4dr5E4+fOaqBFKH
EIQH86cv5CJI3gVW+ifaOHM4saPogofrawFBI/jTbdyGvoSE5SNmAU90OOsYh7/M
4UPQzMEt+CDyz2lk7b2YspGSENBTyx68ZQfin1RIEVby2DJ5YURXJ0W1Z7Ho+RvR
PXANTVmCSgMh5By0ybGca/W9ZyaIa5Y=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:42 2025 by rpki-client