Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa
File:                     31087add-e607-36b0-8d31-ad7c14d91fbb.roa (raw, json)
Hash identifier:          kG/OG0VUzFxJDzhmACykY/32rh/bn6ne79di1sy/QFY=
Subject key identifier:   EE:AD:77:00:5B:C9:5F:BB:A3:16:C9:D1:A4:99:28:06:24:42:3F:5A
Certificate issuer:       /CN=1fe8849b-66cd-4afe-9b0b-970eafad1175
Certificate serial:       010D0C9F4328584AA42B885E2C52857407EB6B80
Authority key identifier: BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     1008
IP address blocks:        170.205.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:88:5e:2c:52:85:74:07:eb:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe8849b-66cd-4afe-9b0b-970eafad1175
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=062dcb2e-2ef8-43c0-b401-960c1d16f588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:7c:15:80:d6:a0:a5:43:0e:06:02:00:2a:
                    dc:6f:8c:c2:e9:a4:e3:48:3f:2f:5c:ca:32:e9:73:
                    ed:8d:b1:52:d6:15:3e:6c:b2:bc:1b:18:d8:c9:f2:
                    f6:6b:8d:aa:fc:83:86:13:9b:2a:39:ce:7b:df:6b:
                    66:2e:34:82:26:a0:bd:7a:aa:32:da:a7:79:5e:07:
                    2d:df:fe:7b:b5:56:ef:18:68:33:42:35:9d:68:45:
                    7e:00:65:25:c1:14:cd:97:74:16:af:33:19:fb:d3:
                    5d:3d:2c:5a:8a:95:ca:f0:59:e5:8f:5f:77:d3:cf:
                    bc:b5:38:fe:94:69:91:35:bd:9d:0f:64:47:11:c7:
                    b3:48:a7:6c:b4:09:3f:a3:ff:e8:12:c7:2a:e5:cb:
                    b4:f7:e7:b1:ee:0f:93:d3:b2:a2:02:65:82:39:d7:
                    77:47:30:94:d9:98:94:25:3d:23:ae:0a:1a:03:33:
                    6c:98:84:fa:94:d0:bb:cc:a3:4e:a4:ac:2b:f3:54:
                    29:45:64:95:84:82:9e:6a:7b:4a:d0:7a:60:a1:8d:
                    a9:bd:5c:b4:67:c8:0a:86:69:0f:80:35:28:25:a3:
                    10:68:70:13:4e:7c:42:77:a8:51:b8:86:c8:88:62:
                    79:15:bc:38:26:39:dd:29:f1:a1:6a:2d:8f:dd:2e:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AD:77:00:5B:C9:5F:BB:A3:16:C9:D1:A4:99:28:06:24:42:3F:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/31087add-e607-36b0-8d31-ad7c14d91fbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl

            X509v3 Authority Key Identifier:
                keyid:BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:3f:84:2c:f9:52:7b:a6:f3:65:62:3d:fd:f2:c1:52:59:f2:
         1d:f4:cd:c5:60:17:86:2a:da:1d:3e:0c:71:4e:98:0a:e3:5d:
         a3:f8:ee:e0:6c:eb:07:66:f6:cd:24:a2:72:94:09:60:90:c8:
         13:57:28:3e:eb:bf:e6:14:81:0b:75:24:b5:33:6c:db:fe:05:
         97:ec:a1:85:4c:0c:68:a3:bd:a9:aa:db:3f:37:da:77:4c:bb:
         bd:e1:ba:ed:29:29:21:09:3f:74:6c:f7:39:6e:1a:04:bf:9d:
         af:b1:5b:c3:bd:8d:70:ca:ee:c4:60:ac:42:60:63:87:f8:5e:
         37:f7:cf:5e:70:b6:50:26:ea:11:d9:5b:f6:d0:9f:79:ce:61:
         0e:d0:81:38:1b:2f:5d:4d:de:6d:b5:2c:e5:96:8c:0e:e1:97:
         fd:7c:35:6a:12:56:e7:ae:33:c1:40:33:cb:45:91:20:67:b1:
         62:df:51:06:c4:5c:68:64:ae:a7:5e:ad:5f:39:58:08:57:92:
         27:8f:2d:f6:3d:8b:3d:bf:54:ae:9a:8c:11:77:c6:40:cd:94:
         9d:70:12:d2:30:93:cb:27:7e:42:cb:2b:e2:cc:4a:10:9f:39:
         35:e3:1a:ca:4b:41:78:39:9c:d7:a4:8b:36:f2:e7:2b:95:4d:
         28:21:b0:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4heLFKFdAfra4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZlODg0OWItNjZjZC00YWZlLTliMGItOTcwZWFmYWQx
MTc1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
MDYyZGNiMmUtMmVmOC00M2MwLWI0MDEtOTYwYzFkMTZmNTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpB8FYDWoKVDDgYCACrcb4zC6aTjSD8vXMoy
6XPtjbFS1hU+bLK8GxjYyfL2a42q/IOGE5sqOc5732tmLjSCJqC9eqoy2qd5Xgct
3/57tVbvGGgzQjWdaEV+AGUlwRTNl3QWrzMZ+9NdPSxaipXK8Fnlj19308+8tTj+
lGmRNb2dD2RHEcezSKdstAk/o//oEscq5cu09+ex7g+T07KiAmWCOdd3RzCU2ZiU
JT0jrgoaAzNsmIT6lNC7zKNOpKwr81QpRWSVhIKeantK0HpgoY2pvVy0Z8gKhmkP
gDUoJaMQaHATTnxCd6hRuIbIiGJ5Fbw4JjndKfGhai2P3S4jnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO6tdwBbyV+7oxbJ0aSZKAYkQj9aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4
ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBlYWZhZDExNzUvMzEwODdhZGQtZTYwNy0z
NmIwLThkMzEtYWQ3YzE0ZDkxZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWZlODg0OWItNjZjZC00YWZlLTli
MGItOTcwZWFmYWQxMTc1LzFmZTg4NDliLTY2Y2QtNGFmZS05YjBiLTk3MGVhZmFk
MTE3NS5jcmwwHwYDVR0jBBgwFoAUvqggnBNe/PnuaZjOhE646NyD9JUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBl
YWZhZDExNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqs0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEo/hCz5Unum82ViPf3ywVJZ8h30zcVgF4Yq2h0+DHFOmArjXaP47uBs
6wdm9s0konKUCWCQyBNXKD7rv+YUgQt1JLUzbNv+BZfsoYVMDGijvamq2z832ndM
u73huu0pKSEJP3Rs9zluGgS/na+xW8O9jXDK7sRgrEJgY4f4Xjf3z15wtlAm6hHZ
W/bQn3nOYQ7QgTgbL11N3m21LOWWjA7hl/18NWoSVueuM8FAM8tFkSBnsWLfUQbE
XGhkrqderV85WAhXkiePLfY9iz2/VK6ajBF3xkDNlJ1wEtIwk8snfkLLK+LMShCf
OTXjGspLQXg5nNekizby5yuVTSghsG4=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:41:18 2025 by rpki-client