Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a828512-9767-38ae-aa0a-3eb8dc0759dd.roa
File:                     2a828512-9767-38ae-aa0a-3eb8dc0759dd.roa (raw, json)
Hash identifier:          siq1kMx4t6XxqaIhYZQqm/iIpm8LXZ95vAMC9FjuNGE=
Subject key identifier:   AB:65:AC:2A:A9:D6:5E:B2:2F:4F:49:13:E6:75:CC:87:B1:13:84:1C
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584B8A7CCB535E280807FD67B600
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a828512-9767-38ae-aa0a-3eb8dc0759dd.roa
Signing time:             Thu 16 Oct 2025 13:00:38 +0000
ROA not before:           Thu 16 Oct 2025 13:00:38 +0000
ROA not after:            Wed 14 Jan 2026 14:00:38 +0000
asID:                     2914
IP address blocks:        170.130.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:7c:cb:53:5e:28:08:07:fd:67:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct 16 13:00:38 2025 GMT
            Not After : Jan 14 14:00:38 2026 GMT
        Subject: CN=1dec5605-39e2-4b6c-9858-7c661100216a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4a:f9:db:ba:5b:13:59:92:d9:ed:aa:60:bc:
                    d1:2d:3e:93:fb:ee:10:bf:18:1f:51:0d:66:db:44:
                    9d:f0:2b:2b:be:7e:d7:53:ff:41:bd:fe:3d:ed:5a:
                    fd:bd:dc:6d:a5:2d:c8:01:6b:d9:bd:d4:d7:d1:de:
                    9f:f2:51:8b:32:57:8f:a5:3b:13:8b:df:0f:8b:95:
                    f4:08:43:2c:ba:df:d7:f0:f6:d4:f4:13:45:ab:88:
                    d6:c5:3d:60:59:54:ce:09:89:7d:0e:71:16:34:31:
                    9e:ea:54:49:a1:3f:9b:e2:3b:03:6d:2a:44:ed:71:
                    63:2d:f8:1d:de:ab:04:fb:4a:2f:eb:24:84:7f:95:
                    31:7a:c8:4a:fd:35:9b:e1:f9:b3:f7:f2:27:eb:c8:
                    8b:0f:a0:2f:90:e1:ad:e4:4a:62:12:2c:7f:8c:36:
                    cf:93:46:e2:f4:8f:2f:08:29:cd:51:e6:74:d0:5d:
                    1d:31:27:34:04:fd:25:88:bc:2b:d2:cf:59:f9:6e:
                    77:bd:43:10:1a:54:49:3e:87:18:27:9e:d9:84:c0:
                    de:05:00:6f:6e:be:11:de:29:03:7c:d1:8f:40:11:
                    1b:52:89:f8:6b:4d:8b:76:5c:04:3a:1e:ed:a5:99:
                    5c:82:8f:66:9b:48:63:2e:50:e6:86:11:6f:00:46:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:65:AC:2A:A9:D6:5E:B2:2F:4F:49:13:E6:75:CC:87:B1:13:84:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a828512-9767-38ae-aa0a-3eb8dc0759dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:2a:46:b6:14:74:e7:0c:d4:59:0a:a2:fd:23:e8:c5:f9:ec:
         4f:5c:71:36:92:56:72:cb:59:db:0c:ad:e0:aa:c8:c5:31:91:
         a7:dd:62:a3:66:6b:2d:cd:8c:c5:fe:03:1c:89:57:90:6c:e8:
         5a:e9:6d:2d:f3:1a:5f:a7:f5:11:ad:f2:65:fc:17:73:f5:7d:
         bb:17:f0:98:bd:40:10:96:48:85:67:a3:4d:e0:4b:b3:02:87:
         4f:c8:cd:7e:1d:9c:c7:21:45:0c:dd:f1:91:90:cc:f3:fb:40:
         94:97:c3:37:8f:a8:d4:ac:9f:01:4e:10:6c:bb:61:0a:df:43:
         b8:d5:1a:48:c9:fc:b0:5b:6f:e2:86:2e:82:04:18:11:40:8e:
         79:16:16:92:68:4b:ca:42:27:3c:e2:1e:47:9e:da:74:4d:b3:
         5c:de:ff:6c:bd:1a:ed:cd:ed:ff:29:93:5e:a1:fb:14:7e:65:
         20:4b:81:40:c7:a6:1f:e6:bb:8f:7f:3e:b5:71:ac:d5:6f:fc:
         d3:41:af:0b:94:6a:b4:52:4c:36:17:20:1f:d6:bb:05:64:c6:
         d1:9c:7a:a0:10:d4:49:74:bd:fe:bc:60:89:40:e8:f3:6e:d3:
         b5:58:0a:59:bf:84:5d:39:ce:98:f8:86:6b:55:ec:bf:5f:14:
         a9:00:21:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfMtTXigIB/1ntgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk
MWRlYzU2MDUtMzllMi00YjZjLTk4NTgtN2M2NjExMDAyMTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEr527pbE1mS2e2qYLzRLT6T++4QvxgfUQ1m
20Sd8Csrvn7XU/9Bvf497Vr9vdxtpS3IAWvZvdTX0d6f8lGLMlePpTsTi98Pi5X0
CEMsut/X8PbU9BNFq4jWxT1gWVTOCYl9DnEWNDGe6lRJoT+b4jsDbSpE7XFjLfgd
3qsE+0ov6ySEf5UxeshK/TWb4fmz9/In68iLD6AvkOGt5EpiEix/jDbPk0bi9I8v
CCnNUeZ00F0dMSc0BP0liLwr0s9Z+W53vUMQGlRJPocYJ57ZhMDeBQBvbr4R3ikD
fNGPQBEbUon4a02LdlwEOh7tpZlcgo9mm0hjLlDmhhFvAEZZ7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtlrCqp1l6yL09JE+Z1zIexE4QcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMmE4Mjg1MTItOTc2Ny0z
OGFlLWFhMGEtM2ViOGRjMDc1OWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqoJqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsqRrYUdOcM1FkKov0j6MX57E9ccTaSVnLLWdsMreCqyMUxkafdYqNm
ay3NjMX+AxyJV5Bs6FrpbS3zGl+n9RGt8mX8F3P1fbsX8Ji9QBCWSIVno03gS7MC
h0/IzX4dnMchRQzd8ZGQzPP7QJSXwzePqNSsnwFOEGy7YQrfQ7jVGkjJ/LBbb+KG
LoIEGBFAjnkWFpJoS8pCJzziHkee2nRNs1ze/2y9Gu3N7f8pk16h+xR+ZSBLgUDH
ph/mu49/PrVxrNVv/NNBrwuUarRSTDYXIB/WuwVkxtGceqAQ1El0vf68YIlA6PNu
07VYClm/hF05zpj4hmtV7L9fFKkAIfc=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:19:51 2025 by rpki-client