Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e10b3a14-5183-3e4a-97b4-26949e9f52b1.roa
File:                     e10b3a14-5183-3e4a-97b4-26949e9f52b1.roa (raw, json)
Hash identifier:          3CCMqQeJsIN2VBn0o6aDGsgnb+nFAF8+vUQFAkcfFis=
Subject key identifier:   C1:51:35:36:A3:0D:F3:37:A9:D3:0F:88:01:BC:68:7F:CE:BD:E7:06
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB00704F58B58705D00AB68
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e10b3a14-5183-3e4a-97b4-26949e9f52b1.roa
Signing time:             Sun 03 Aug 2025 02:35:47 +0000
ROA not before:           Sun 03 Aug 2025 02:35:47 +0000
ROA not after:            Sat 01 Nov 2025 02:35:47 +0000
asID:                     62044
IP address blocks:        170.85.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:07:04:f5:8b:58:70:5d:00:ab:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:47 2025 GMT
            Not After : Nov  1 02:35:47 2025 GMT
        Subject: CN=2b544fee-43a1-4e8b-ac66-605f100f5451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:b5:4f:05:ec:fd:a8:90:89:59:d2:33:d2:
                    85:68:67:64:50:a5:25:aa:f6:48:f6:e8:c1:8e:d0:
                    3c:bc:c2:a0:04:a3:6a:02:e7:2e:8e:34:fa:2a:42:
                    84:01:0e:86:84:82:fe:36:11:60:b0:ef:30:ad:d2:
                    46:d6:1c:ff:c3:1a:d4:40:f3:76:c0:38:1d:35:ae:
                    75:37:0a:6b:ae:ee:d0:1f:5f:7c:79:18:e2:f8:0e:
                    3c:a3:a4:85:07:f9:8e:fe:06:79:9c:6e:a4:aa:66:
                    72:2a:01:d5:b3:33:36:12:fc:95:06:32:6e:ff:ca:
                    0c:b2:54:33:dc:f5:f7:42:10:ae:43:4e:da:ca:6a:
                    08:88:07:01:e3:26:d0:c5:3d:d9:3b:f7:83:d6:cd:
                    a2:ce:02:f1:26:71:ed:71:11:bf:85:d7:a3:5c:13:
                    89:09:51:15:23:3c:bc:67:c4:26:04:bb:dd:b2:6c:
                    2e:89:c4:23:01:3b:8e:0a:ef:98:63:81:14:49:34:
                    20:2b:37:51:c4:4f:df:9d:ba:f3:15:16:fb:91:04:
                    a7:84:06:96:b9:37:ab:47:a9:0b:52:b6:32:2f:6b:
                    62:a1:6b:cc:b9:21:5f:0c:46:4e:3f:3d:8f:11:50:
                    11:1d:fe:5f:31:82:c4:67:be:00:58:3b:83:c4:91:
                    06:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:51:35:36:A3:0D:F3:37:A9:D3:0F:88:01:BC:68:7F:CE:BD:E7:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e10b3a14-5183-3e4a-97b4-26949e9f52b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:76:4d:d3:36:79:ad:64:f4:88:96:d8:f5:b7:8e:ec:2a:e5:
         8d:64:2e:c4:1f:63:c0:a5:8b:d0:ad:96:11:7c:8d:09:74:00:
         e6:bd:7c:5f:78:15:6c:42:36:38:7e:c3:03:33:8c:7f:4c:2a:
         4a:34:26:6d:b2:9d:80:9a:ce:ef:5c:6b:05:c4:1f:83:21:2f:
         32:be:c3:3a:e0:3b:58:59:45:8b:95:ca:97:5c:c8:e7:7f:2d:
         f3:f4:bd:a2:c8:24:19:ec:fd:81:c7:34:36:7c:fc:72:ef:1e:
         20:34:51:36:89:4e:28:8a:59:75:6b:c6:2c:87:1f:b0:66:2f:
         7e:31:33:a6:ad:bb:a4:92:0b:92:81:c9:99:9f:18:16:57:8a:
         a1:f5:80:36:25:01:1b:9a:06:3d:cc:2f:d5:10:b0:1b:dc:74:
         69:86:98:32:9e:90:73:3e:db:e6:31:f2:2f:63:9b:a4:48:dd:
         5b:45:1c:d1:49:5e:31:6c:11:6c:7c:97:5b:45:61:ef:f1:53:
         ec:03:41:82:80:e7:51:bf:f4:db:4c:c9:b6:8d:08:33:5e:4a:
         de:93:a6:45:29:f3:4e:ca:0b:d8:cf:c5:c3:fd:9e:e0:c1:86:
         2a:4e:c4:3f:66:40:aa:3b:ff:8e:6f:e7:0f:10:cf:30:5a:68:
         f8:b5:9a:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAcE9YtYcF0Aq2gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDgwMzAyMzU0N1oXDTI1MTEwMTAyMzU0N1owLzEtMCsGA1UEAxMk
MmI1NDRmZWUtNDNhMS00ZThiLWFjNjYtNjA1ZjEwMGY1NDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMi1TwXs/aiQiVnSM9KFaGdkUKUlqvZI9ujB
jtA8vMKgBKNqAucujjT6KkKEAQ6GhIL+NhFgsO8wrdJG1hz/wxrUQPN2wDgdNa51
Nwprru7QH198eRji+A48o6SFB/mO/gZ5nG6kqmZyKgHVszM2EvyVBjJu/8oMslQz
3PX3QhCuQ07aymoIiAcB4ybQxT3ZO/eD1s2izgLxJnHtcRG/hdejXBOJCVEVIzy8
Z8QmBLvdsmwuicQjATuOCu+YY4EUSTQgKzdRxE/fnbrzFRb7kQSnhAaWuTerR6kL
UrYyL2tioWvMuSFfDEZOPz2PEVARHf5fMYLEZ74AWDuDxJEGywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFRNTajDfM3qdMPiAG8aH/OvecGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZTEwYjNhMTQtNTE4My0z
ZTRhLTk3YjQtMjY5NDllOWY1MmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJp2TdM2ea1k9IiW2PW3juwq5Y1kLsQfY8Cli9CtlhF8jQl0AOa9fF94
FWxCNjh+wwMzjH9MKko0Jm2ynYCazu9cawXEH4MhLzK+wzrgO1hZRYuVypdcyOd/
LfP0vaLIJBns/YHHNDZ8/HLvHiA0UTaJTiiKWXVrxiyHH7BmL34xM6atu6SSC5KB
yZmfGBZXiqH1gDYlARuaBj3ML9UQsBvcdGmGmDKekHM+2+Yx8i9jm6RI3VtFHNFJ
XjFsEWx8l1tFYe/xU+wDQYKA51G/9NtMybaNCDNeSt6TpkUp807KC9jPxcP9nuDB
hipOxD9mQKo7/45v5w8QzzBaaPi1mh8=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:00 2025 by rpki-client