Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ace29f0c-b772-3a43-9ed3-929a30f74bae.roa
File:                     ace29f0c-b772-3a43-9ed3-929a30f74bae.roa (raw, json)
Hash identifier:          hfykdoNRLStWfCQlulVWaHE6B+6z5fat+bhKtGlcWI4=
Subject key identifier:   84:A4:9D:65:33:61:38:5B:28:AE:9A:45:63:5A:98:D0:11:54:3F:A5
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584AD23BBE9F9332E64B91B2DFB0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ace29f0c-b772-3a43-9ed3-929a30f74bae.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        170.114.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:be:9f:93:32:e6:4b:91:b2:df:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=1cbbfd6b-1fcd-4864-9ea7-91dd0566f16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:53:3e:2b:fa:e8:b6:ee:3a:6b:8c:ad:6e:aa:
                    c2:c4:69:8d:3a:54:79:a9:da:f1:dc:35:8b:80:62:
                    94:af:7c:25:fe:d6:a3:5b:3a:c5:58:af:6e:1c:5f:
                    a6:84:e8:a5:2f:bc:13:25:58:7b:50:a9:48:d0:3c:
                    41:c6:5d:2d:d5:7a:f9:3c:96:77:73:d8:09:b5:06:
                    09:81:12:44:eb:eb:57:a2:44:5d:9e:3d:f9:fe:3c:
                    8d:f0:81:a4:bc:5a:d5:e0:fb:25:e7:86:45:96:c3:
                    0c:67:e0:85:86:e9:63:4f:71:8e:a7:8f:0b:2f:21:
                    09:bb:ce:23:ec:f3:dc:e1:fb:8c:8d:71:45:11:1b:
                    5c:ff:7f:3b:c2:51:6f:97:33:45:35:fb:b0:32:be:
                    a3:50:e5:aa:99:79:6a:9d:ca:f0:25:20:25:02:f3:
                    2e:78:51:df:7e:b5:fb:b1:ab:19:8e:3f:97:41:7d:
                    b3:53:44:98:b4:37:7b:ac:54:b3:4b:0e:54:11:75:
                    66:3c:56:82:58:93:68:0c:7e:9e:d0:c1:c7:03:27:
                    84:80:80:78:af:5c:a2:14:ac:5c:fd:6e:85:4e:88:
                    9c:b6:f8:31:49:a4:a8:cb:34:3a:76:41:8b:2e:f8:
                    bf:02:3d:b4:24:04:4f:0f:5e:e0:c9:01:63:a2:33:
                    7b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A4:9D:65:33:61:38:5B:28:AE:9A:45:63:5A:98:D0:11:54:3F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ace29f0c-b772-3a43-9ed3-929a30f74bae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:13:f0:76:d1:90:da:cb:c8:dd:d5:a2:d5:a0:e5:68:da:21:
         d8:57:fc:3f:26:6b:09:e4:47:ae:cd:6c:8e:59:79:a2:c4:83:
         53:80:60:2c:6e:b5:c8:29:e1:e4:4b:cf:69:38:e8:0c:70:d7:
         b5:76:75:dc:1f:9d:93:b3:e3:fa:a2:ce:eb:88:16:fd:d1:fb:
         44:e4:b5:d3:22:51:3e:3e:ec:29:5b:43:ea:eb:f6:84:0a:00:
         37:e9:6f:c9:e6:e5:59:41:f7:93:74:95:b4:50:f1:08:3b:e6:
         f6:12:9f:bc:46:40:9d:81:f7:c7:ab:25:90:d4:9e:75:ea:13:
         1d:b5:ea:5a:01:27:e9:b2:81:db:30:dd:7f:fc:49:65:fd:34:
         b5:f4:58:27:8a:71:7a:7a:2a:ca:ee:62:18:ad:a7:d5:84:4c:
         e7:cc:47:42:9a:e0:cd:cc:2b:df:0d:30:55:eb:62:eb:14:a8:
         51:e3:2d:9f:d7:d9:3a:62:6d:1d:92:b5:71:64:ba:83:d8:43:
         48:31:fd:99:05:79:db:6e:23:9c:91:99:49:2c:b3:82:dc:40:
         a6:d8:d8:df:8d:0b:7c:f7:8b:ac:12:1f:b0:68:52:5b:fe:70:
         f1:4a:7f:4b:7a:d9:b9:b5:b4:7b:d2:5c:ae:2e:4a:41:6e:f5:
         96:67:4c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:10:15 2025 by rpki-client