Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/ec596c97-4aa0-3907-9a93-ca179f8ef492.roa
File:                     ec596c97-4aa0-3907-9a93-ca179f8ef492.roa (raw, json)
Hash identifier:          x7l5ma1rG9bFmRzlP8hHHcog/zwmAo7Lp99QlvE5zNs=
Subject key identifier:   72:3A:C9:E7:90:50:9C:2E:39:54:66:BC:9D:10:AC:02:40:FA:7E:B8
Certificate issuer:       /CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Certificate serial:       010D0C9F4328584A7A4B30963B5045E8F02B6040
Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/ec596c97-4aa0-3907-9a93-ca179f8ef492.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     400110
IP address blocks:        184.169.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:30:96:3b:50:45:e8:f0:2b:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=64f19ae9-971d-48e9-a041-dfbb7602a74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ea:ff:d7:60:1b:1e:90:47:d5:3f:0d:59:7a:
                    e7:d0:a6:96:94:53:cd:db:e4:57:ed:03:c6:00:f7:
                    36:08:d1:c0:c2:d0:13:ed:c9:48:51:47:d8:d4:f8:
                    a4:9a:b1:34:35:ca:18:eb:5d:d9:b9:c7:76:ba:2e:
                    88:ea:b8:69:1b:1d:07:01:56:68:4d:c6:4a:99:cf:
                    5c:87:14:00:65:d6:ec:60:48:5f:14:5e:75:c3:4c:
                    b7:8f:0b:2a:9a:9f:bc:ff:fd:88:94:14:9d:35:d4:
                    a1:b6:1f:41:e6:83:4e:57:f3:d1:78:21:30:ec:49:
                    9f:ec:c5:e3:e9:c8:84:ba:1c:4e:36:b5:ab:ae:06:
                    71:f7:24:3c:45:81:a5:29:5a:e9:09:03:e1:d5:1b:
                    75:9e:49:30:cd:6d:79:af:98:ba:6b:35:8f:11:b1:
                    0c:cb:e2:61:7c:43:c0:1b:61:74:46:a1:11:26:27:
                    bc:dc:01:46:87:78:a6:95:19:d8:4d:f7:f7:ea:44:
                    39:86:8d:e3:57:72:c6:88:74:13:10:28:46:ec:55:
                    71:f2:8f:3a:fa:cd:60:ef:83:e7:5f:01:02:96:34:
                    8b:51:ee:17:ef:a3:f6:15:59:4d:b3:ca:97:1c:e5:
                    d6:df:84:24:e2:44:6e:39:18:6a:80:24:86:c8:bf:
                    8e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3A:C9:E7:90:50:9C:2E:39:54:66:BC:9D:10:AC:02:40:FA:7E:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/ec596c97-4aa0-3907-9a93-ca179f8ef492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f5:88:43:db:08:70:a1:70:82:f5:65:8f:06:a7:95:22:7b:
         0e:b3:6f:4a:87:29:d7:eb:64:8b:5d:6b:36:e4:9b:bc:ec:5a:
         e5:41:52:c3:ba:e1:ab:53:88:29:37:6f:2f:c9:c8:ec:f4:dc:
         25:16:c9:64:97:1c:3e:6b:d6:15:0a:e3:bb:6e:8e:0c:54:84:
         5c:7a:3c:61:b1:d6:1a:76:b1:46:75:31:d3:54:73:32:b8:d0:
         da:e0:02:55:2b:67:f2:db:15:c4:0e:aa:2a:6f:27:fb:d5:bd:
         a8:6a:64:b7:f9:2a:7e:d0:38:86:b6:3e:f7:dc:81:93:dd:bc:
         5b:b2:89:aa:cd:4f:62:ca:e7:10:46:9e:8d:0e:09:d2:5a:74:
         05:b6:90:64:26:97:05:e9:45:95:74:3f:41:5e:d1:2c:a0:78:
         9c:57:25:fe:be:1a:6e:c6:c3:f7:47:33:80:db:33:c1:f6:ec:
         cb:01:a3:f3:48:0f:30:f6:86:04:d0:04:da:12:4e:42:14:78:
         13:ea:09:4b:a7:19:c4:58:5d:6a:f6:28:b9:2c:ec:e5:8e:c1:
         7b:2d:5c:e9:b8:d5:1a:26:3e:b8:2c:cf:e7:a8:d5:c0:e7:43:
         1f:5b:8e:9a:4b:88:63:4d:43:d8:c7:bd:54:a4:6b:cc:ff:f2:
         04:80:3f:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SzCWO1BF6PArYEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDNkZmQ3NzctZGUxZi00M2Q0LTgzOWYtMDc0YzVmM2Jk
Mjk4MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk
NjRmMTlhZTktOTcxZC00OGU5LWEwNDEtZGZiYjc2MDJhNzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOr/12AbHpBH1T8NWXrn0KaWlFPN2+RX7QPG
APc2CNHAwtAT7clIUUfY1PikmrE0NcoY613Zucd2ui6I6rhpGx0HAVZoTcZKmc9c
hxQAZdbsYEhfFF51w0y3jwsqmp+8//2IlBSdNdShth9B5oNOV/PReCEw7Emf7MXj
6ciEuhxONrWrrgZx9yQ8RYGlKVrpCQPh1Rt1nkkwzW15r5i6azWPEbEMy+JhfEPA
G2F0RqERJie83AFGh3imlRnYTff36kQ5ho3jV3LGiHQTEChG7FVx8o86+s1g74Pn
XwECljSLUe4X76P2FVlNs8qXHOXW34Qk4kRuORhqgCSGyL+O0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHI6yeeQUJwuOVRmvJ0QrAJA+n64MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80M2Rm
ZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRjNWYzYmQyOTgvZWM1OTZjOTctNGFhMC0z
OTA3LTlhOTMtY2ExNzlmOGVmNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDNkZmQ3NzctZGUxZi00M2Q0LTgz
OWYtMDc0YzVmM2JkMjk4LzQzZGZkNzc3LWRlMWYtNDNkNC04MzlmLTA3NGM1ZjNi
ZDI5OC5jcmwwHwYDVR0jBBgwFoAUr/l6foWPAPqyZCoge4JiOKxPflAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80M2RmZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRj
NWYzYmQyOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuKkqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFD1iEPbCHChcIL1ZY8Gp5Uiew6zb0qHKdfrZItdazbkm7zsWuVBUsO6
4atTiCk3by/JyOz03CUWyWSXHD5r1hUK47tujgxUhFx6PGGx1hp2sUZ1MdNUczK4
0NrgAlUrZ/LbFcQOqipvJ/vVvahqZLf5Kn7QOIa2PvfcgZPdvFuyiarNT2LK5xBG
no0OCdJadAW2kGQmlwXpRZV0P0Fe0SygeJxXJf6+Gm7Gw/dHM4DbM8H27MsBo/NI
DzD2hgTQBNoSTkIUeBPqCUunGcRYXWr2KLks7OWOwXstXOm41RomPrgsz+eo1cDn
Qx9bjppLiGNNQ9jHvVSka8z/8gSAPzY=
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:37:53 2025 by rpki-client