Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/adcbd638-51eb-3ab6-b57d-871ba10f6d1b.roa
File:                     adcbd638-51eb-3ab6-b57d-871ba10f6d1b.roa (raw, json)
Hash identifier:          IYmJrWmzYZhPlBHzjZvvLMVqzooIOrYMdKtzaj4IqSE=
Subject key identifier:   B1:0C:F6:5A:0A:24:DB:C3:9F:10:5D:63:D2:B6:E4:0A:52:CA:5A:12
Certificate issuer:       /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial:       010D0C9F4328584B891777DDF4637EDF20716200
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/adcbd638-51eb-3ab6-b57d-871ba10f6d1b.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     33458
IP address blocks:        170.39.172.0/24 maxlen: 24
                          170.39.173.0/24 maxlen: 24
                          170.39.174.0/24 maxlen: 24
                          170.39.175.0/24 maxlen: 24
                          208.65.84.0/24 maxlen: 24
                          208.65.85.0/24 maxlen: 24
                          208.65.86.0/24 maxlen: 24
                          208.65.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:77:dd:f4:63:7e:df:20:71:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=6e83ecc9-51cf-4234-8d01-b6bec1d67913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f0:1f:7b:a4:e7:8e:56:8d:ca:dc:31:fa:ff:
                    66:f9:30:52:ac:d9:ba:2e:73:ca:33:7e:93:5b:7d:
                    39:9b:ec:bb:26:2c:24:3c:d0:c0:7e:d2:11:ec:d7:
                    fd:02:e6:fb:6c:ea:91:a1:7d:61:92:60:95:36:43:
                    cc:63:df:87:a0:d0:5a:91:a6:f5:42:23:c9:68:1a:
                    cf:2b:1c:3e:14:e9:27:95:5d:b8:53:a0:8e:b4:be:
                    22:c4:a0:2d:a2:6f:a2:68:cd:4d:17:af:29:2e:ac:
                    00:b1:00:c6:f3:c5:c3:61:34:b9:ff:41:08:7a:9f:
                    34:27:2f:03:f7:ff:a3:c5:ed:e1:d7:c1:a9:d7:38:
                    da:5e:47:a7:1e:f4:e0:9f:9a:a9:a0:ce:ad:79:4b:
                    ac:03:ff:98:1d:d4:7b:4b:98:f3:b4:e3:6a:9a:a4:
                    62:18:56:54:e3:89:90:8c:31:00:0d:2f:bb:cd:99:
                    b8:c0:01:c6:e3:12:a2:1e:03:0d:20:8d:e6:37:69:
                    30:af:e6:6b:f4:e5:d4:eb:8c:72:b3:02:0e:3c:b4:
                    44:f1:c6:0d:a0:3d:68:50:a6:48:1e:bb:fc:15:2c:
                    39:87:79:b2:b4:38:db:d8:2e:96:06:50:43:e5:f2:
                    82:57:0f:09:02:29:88:bc:40:c4:0c:4c:c2:21:68:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0C:F6:5A:0A:24:DB:C3:9F:10:5D:63:D2:B6:E4:0A:52:CA:5A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/adcbd638-51eb-3ab6-b57d-871ba10f6d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl

            X509v3 Authority Key Identifier:
                keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.172.0/22
                  208.65.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:31:0c:02:7d:ba:83:fd:86:34:26:21:31:38:43:c8:c1:56:
         13:62:33:f2:af:e5:c7:25:8c:f6:94:54:80:6b:8e:b5:60:3c:
         ec:7c:f5:ac:0e:69:f3:fa:65:0c:af:e2:98:c9:a7:de:25:6e:
         e7:0d:7b:86:38:6f:17:df:e1:a6:27:17:28:4d:52:24:68:82:
         dd:f5:8a:14:fb:dc:56:47:94:35:a8:12:1d:89:41:eb:9a:57:
         1a:21:12:49:32:33:72:58:2c:ac:7d:66:8c:de:f5:50:6c:5f:
         54:72:0f:e0:00:d2:03:c6:30:60:d1:e1:04:c4:06:57:32:a8:
         3f:f1:3e:9f:90:69:bd:cb:f0:70:63:cd:be:8c:e1:a9:01:4f:
         9b:3e:15:68:6a:3e:c6:43:5e:c0:28:ec:0a:da:6c:2d:80:6f:
         67:47:56:d2:6e:c1:7b:4b:39:fc:66:91:ce:f2:96:c3:31:fc:
         7c:25:c2:79:3e:9a:92:23:96:7c:5e:af:b2:21:e8:79:e3:d6:
         16:ae:d7:67:f6:ad:57:65:e3:09:47:46:73:2b:5d:81:cb:db:
         f2:3b:f0:54:43:22:15:69:b8:e0:77:9d:10:75:d2:f1:00:f8:
         16:a2:aa:24:a6:cb:ef:10:a2:8d:fc:5b:6c:f6:75:00:14:50:
         f6:cc:dd:f4
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuJF3fd9GN+3yBxYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDMyMzc0MDgtMDg4OC00YjFmLWJlZDUtYTQ1ODg2NjU2
NDAxMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk
NmU4M2VjYzktNTFjZi00MjM0LThkMDEtYjZiZWMxZDY3OTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PAfe6TnjlaNytwx+v9m+TBSrNm6LnPKM36T
W305m+y7JiwkPNDAftIR7Nf9Aub7bOqRoX1hkmCVNkPMY9+HoNBakab1QiPJaBrP
Kxw+FOknlV24U6COtL4ixKAtom+iaM1NF68pLqwAsQDG88XDYTS5/0EIep80Jy8D
9/+jxe3h18Gp1zjaXkenHvTgn5qpoM6teUusA/+YHdR7S5jztONqmqRiGFZU44mQ
jDEADS+7zZm4wAHG4xKiHgMNII3mN2kwr+Zr9OXU64xyswIOPLRE8cYNoD1oUKZI
Hrv8FSw5h3mytDjb2C6WBlBD5fKCVw8JAimIvEDEDEzCIWjEzwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLEM9loKJNvDnxBdY9K25ApSyloSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzIz
NzQwOC0wODg4LTRiMWYtYmVkNS1hNDU4ODY2NTY0MDEvYWRjYmQ2MzgtNTFlYi0z
YWI2LWI1N2QtODcxYmExMGY2ZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDMyMzc0MDgtMDg4OC00YjFmLWJl
ZDUtYTQ1ODg2NjU2NDAxL2QzMjM3NDA4LTA4ODgtNGIxZi1iZWQ1LWE0NTg4NjY1
NjQwMS5jcmwwHwYDVR0jBBgwFoAU6NdV2XoY+vnTrgS31DEuvEX9JEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzIzNzQwOC0wODg4LTRiMWYtYmVkNS1hNDU4
ODY2NTY0MDEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCqiesAwQC
0EFUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIIxDAJ9uoP9hjQmITE4Q8jBVhNiM/Kv5ccljPaUVIBrjrVg
POx89awOafP6ZQyv4pjJp94lbucNe4Y4bxff4aYnFyhNUiRogt31ihT73FZHlDWo
Eh2JQeuaVxohEkkyM3JYLKx9Zoze9VBsX1RyD+AA0gPGMGDR4QTEBlcyqD/xPp+Q
ab3L8HBjzb6M4akBT5s+FWhqPsZDXsAo7ArabC2Ab2dHVtJuwXtLOfxmkc7ylsMx
/Hwlwnk+mpIjlnxer7Ih6Hnj1hau12f2rVdl4wlHRnMrXYHL2/I78FRDIhVpuOB3
nRB10vEA+BaiqiSmy+8Qoo38W2z2dQAUUPbM3fQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:22:22 2025 by rpki-client