Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa
File:                     954248a7-1747-37a2-8e59-18157153fb0f.roa (raw, json)
Hash identifier:          L9H5CAVGh9dQwpYGRcStMMXcH96AMX36g9pYOnURH88=
Subject key identifier:   F8:5F:96:46:35:A6:08:8F:BA:3B:21:2C:88:13:E7:E4:AE:23:BB:2C
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F4328584AC01631BCA9C052CA53447880
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        170.176.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:31:bc:a9:c0:52:ca:53:44:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=5f47793b-f429-4a04-9aa8-07293db51df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:7b:a4:1e:9f:64:5c:2c:9b:32:24:98:aa:
                    c0:7f:2d:cf:c3:e2:19:cb:ab:8b:ca:e7:e0:9e:fc:
                    f6:98:1d:91:65:a4:87:9d:30:5e:96:27:28:6f:25:
                    b7:73:72:19:5c:26:b8:ff:88:75:73:53:32:d9:f0:
                    ac:90:60:55:fc:b3:5c:09:f7:4a:c5:a7:cd:1e:d7:
                    1f:e0:a9:8b:38:31:b4:12:f1:77:09:74:5c:a0:82:
                    03:88:13:8c:a7:84:ea:9d:ad:23:fe:f2:08:dc:d4:
                    59:df:68:b7:ac:88:03:e3:3d:f9:7d:86:ab:d0:81:
                    a9:c7:d9:ee:58:9e:23:6d:c3:90:d6:e3:b2:49:c3:
                    35:f0:ed:16:d8:1a:c6:b1:aa:fb:20:df:c9:d6:18:
                    41:c7:a3:52:72:c5:5f:10:bd:65:ab:fd:a7:18:53:
                    db:75:bc:4e:41:be:0c:5c:22:cf:00:78:71:66:05:
                    46:0c:1b:fa:56:72:06:7e:ef:70:1b:7c:76:a9:72:
                    f4:b5:9c:69:d0:61:dd:e9:6b:4a:62:75:df:d8:7a:
                    d5:c8:5b:0d:e7:0c:ca:d3:fb:74:0a:f5:fe:be:6f:
                    f0:ea:cd:b7:6f:87:37:92:dc:d2:a7:b3:4f:4c:cf:
                    ce:7b:35:08:34:1d:69:6b:a0:e2:5a:43:86:b3:47:
                    9d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5F:96:46:35:A6:08:8F:BA:3B:21:2C:88:13:E7:E4:AE:23:BB:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:66:f7:32:ba:a7:63:8e:80:38:ae:5e:37:90:84:92:06:56:
         92:36:d2:59:f3:22:48:e9:8a:22:2c:57:be:bf:35:56:66:26:
         bd:c4:31:7b:3a:4c:63:aa:c6:68:c2:f0:1e:80:6a:04:51:7c:
         c2:1e:7a:83:4a:82:75:8e:49:f8:71:d1:5f:9b:23:c0:ce:3f:
         be:66:ea:01:89:dd:b6:31:ca:37:42:81:a3:05:ba:63:d3:ac:
         85:1d:11:27:1f:48:a2:49:29:68:c5:b5:67:c4:f4:03:1a:44:
         6a:e8:d4:fc:e4:43:21:75:f6:62:09:af:bc:f6:3f:17:d9:5c:
         4f:bd:cc:72:d6:5a:f8:6c:ed:02:a2:8b:25:10:3b:bb:3c:66:
         2d:83:d9:30:b5:d2:05:3f:73:6d:f0:13:e9:f8:57:f3:d9:63:
         45:7c:55:69:4e:92:b0:02:4d:89:e4:ed:2a:ef:53:24:2d:ff:
         5f:56:2a:43:17:4a:b2:59:22:84:a3:32:13:0a:eb:f2:ab:5d:
         07:20:89:41:34:54:c9:eb:93:55:a1:8a:a0:d3:1d:9e:b8:d0:
         60:80:58:a2:7d:3c:2b:3d:81:75:0c:2a:46:a4:bd:a8:40:7b:
         52:21:e7:2d:bb:9a:62:16:74:3e:8f:bb:1b:a6:2d:ae:55:27:
         1a:f9:43:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFjG8qcBSylNEeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk
Y2M0MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
NWY0Nzc5M2ItZjQyOS00YTA0LTlhYTgtMDcyOTNkYjUxZGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKB7pB6fZFwsmzIkmKrAfy3Pw+IZy6uLyufg
nvz2mB2RZaSHnTBelicobyW3c3IZXCa4/4h1c1My2fCskGBV/LNcCfdKxafNHtcf
4KmLODG0EvF3CXRcoIIDiBOMp4Tqna0j/vII3NRZ32i3rIgD4z35fYar0IGpx9nu
WJ4jbcOQ1uOyScM18O0W2BrGsar7IN/J1hhBx6NScsVfEL1lq/2nGFPbdbxOQb4M
XCLPAHhxZgVGDBv6VnIGfu9wG3x2qXL0tZxp0GHd6WtKYnXf2HrVyFsN5wzK0/t0
CvX+vm/w6s23b4c3ktzSp7NPTM/OezUINB1pa6DiWkOGs0edCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPhflkY1pgiPujshLIgT5+SuI7ssMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk
ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvOTU0MjQ4YTctMTc0Ny0z
N2EyLThlNTktMTgxNTcxNTNmYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz
MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3
ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5
M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKhm9zK6p2OOgDiuXjeQhJIGVpI20lnzIkjpiiIsV76/NVZmJr3EMXs6
TGOqxmjC8B6AagRRfMIeeoNKgnWOSfhx0V+bI8DOP75m6gGJ3bYxyjdCgaMFumPT
rIUdEScfSKJJKWjFtWfE9AMaRGro1PzkQyF19mIJr7z2PxfZXE+9zHLWWvhs7QKi
iyUQO7s8Zi2D2TC10gU/c23wE+n4V/PZY0V8VWlOkrACTYnk7SrvUyQt/19WKkMX
SrJZIoSjMhMK6/KrXQcgiUE0VMnrk1WhiqDTHZ640GCAWKJ9PCs9gXUMKkakvahA
e1Ih5y27mmIWdD6PuxumLa5VJxr5Q04=
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:47:38 2025 by rpki-client