Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa
File:                     a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa (raw, json)
Hash identifier:          9LgVQYh5WkpY9BtbJ1A4RHUzfoP9uN6+fAwR/mgkHSM=
Subject key identifier:   AA:AF:1A:ED:71:CC:A5:F2:FA:38:2C:AF:AE:03:4C:E7:4F:02:38:F2
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584A9D30DB8FADB78377ACB25100
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     1239
IP address blocks:        65.160.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:db:8f:ad:b7:83:77:ac:b2:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=27823f72-5e01-4fb6-8d2f-434332cad22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:e8:a2:ce:65:23:a3:c7:55:91:6d:d9:2e:
                    06:0c:9e:97:d6:50:b0:de:28:7d:4d:90:e6:e3:d7:
                    27:05:79:3b:16:93:8a:d0:f2:22:7f:7e:b6:cc:b5:
                    8c:2c:cd:b0:c8:f9:30:8b:90:8b:46:0c:a9:37:ae:
                    87:e8:06:cc:d9:50:1e:4b:a7:b4:9d:cc:8e:07:c2:
                    4b:fb:da:5b:57:3b:c5:ce:ea:e9:aa:c7:09:6e:02:
                    cf:75:54:4c:0c:83:5a:f9:f5:71:78:73:c4:e7:e2:
                    90:b7:ce:f5:5d:b5:58:b3:42:04:34:c9:79:6b:e9:
                    a2:17:89:b5:71:ee:4d:4a:82:ee:67:09:2f:c7:5f:
                    14:74:a7:1d:b8:44:04:42:4c:50:30:1c:bd:5e:b3:
                    96:8c:69:06:ac:77:bd:8b:d4:94:d8:a4:93:02:c5:
                    13:f3:2d:88:ad:45:26:98:b2:44:b0:ef:4f:a4:9a:
                    9a:6d:6d:f3:b6:97:a6:5f:c6:ce:88:77:0c:b5:20:
                    f9:7c:39:77:6c:8f:8e:2e:22:e2:55:ef:00:65:e5:
                    c5:08:09:bb:bf:8d:00:6a:14:3f:29:ff:7e:0f:38:
                    cd:0a:03:08:c5:69:a9:69:50:2a:2f:fc:74:7b:fb:
                    da:0b:7f:35:19:7a:6a:a9:6e:15:9d:ed:9b:6b:84:
                    4a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AF:1A:ED:71:CC:A5:F2:FA:38:2C:AF:AE:03:4C:E7:4F:02:38:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.160.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:b9:4e:ab:bf:6c:96:61:5c:4e:02:3a:98:20:b4:ae:c2:47:
         67:38:e5:2d:07:9b:e7:08:e5:40:6f:57:e9:31:fb:f4:5c:1f:
         0e:56:e8:93:d9:b0:9d:11:76:c9:9c:4d:15:87:b6:1c:53:1b:
         a2:df:b1:5a:08:ef:bc:91:c2:90:7b:f4:f3:3d:0f:16:51:2a:
         e1:f5:0b:46:97:82:38:f3:09:68:e4:02:ad:d5:2b:2d:91:e8:
         bb:19:0a:01:69:4f:59:b9:8a:f3:72:b9:3b:31:95:ca:15:78:
         12:18:49:fd:83:22:63:c0:b0:ac:6e:4a:34:75:45:e3:04:40:
         23:70:52:b3:8a:e3:7a:68:0e:90:e6:8b:02:63:d4:83:9a:ea:
         24:45:40:d7:61:5f:ae:82:5a:14:91:2a:cb:6d:49:26:b3:3b:
         38:f5:40:1b:14:57:a4:43:fe:84:1a:b0:ec:91:98:6c:01:75:
         f8:ce:15:84:05:4d:a5:42:b6:43:98:e3:af:e4:dd:9a:fb:74:
         e5:c5:60:56:8c:fd:a0:a8:4d:49:46:7f:6f:cc:f2:0b:a4:12:
         24:bd:5d:22:37:a5:49:ff:1a:f6:55:4a:84:15:19:ac:ed:29:
         05:1b:3e:1a:22:72:19:a3:e1:d4:6b:18:fe:db:ec:f6:ea:2a:
         5f:fa:21:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMNuPrbeDd6yyUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk
ZjZkMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk
Mjc4MjNmNzItNWUwMS00ZmI2LThkMmYtNDM0MzMyY2FkMjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoToos5lI6PHVZFt2S4GDJ6X1lCw3ih9TZDm
49cnBXk7FpOK0PIif362zLWMLM2wyPkwi5CLRgypN66H6AbM2VAeS6e0ncyOB8JL
+9pbVzvFzurpqscJbgLPdVRMDINa+fVxeHPE5+KQt871XbVYs0IENMl5a+miF4m1
ce5NSoLuZwkvx18UdKcduEQEQkxQMBy9XrOWjGkGrHe9i9SU2KSTAsUT8y2IrUUm
mLJEsO9PpJqabW3ztpemX8bOiHcMtSD5fDl3bI+OLiLiVe8AZeXFCAm7v40AahQ/
Kf9+DzjNCgMIxWmpaVAqL/x0e/vaC381GXpqqW4Vne2ba4RKfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKqvGu1xzKXy+jgsr64DTOdPAjjyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm
MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvYTM5NWQ4YzUtMzViZS0z
YjM4LThhYTQtYTQ4YmEzZWZjMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw
MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy
ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy
ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQaBGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIq5Tqu/bJZhXE4COpggtK7CR2c45S0Hm+cI5UBvV+kx+/RcHw5W6JPZ
sJ0RdsmcTRWHthxTG6LfsVoI77yRwpB79PM9DxZRKuH1C0aXgjjzCWjkAq3VKy2R
6LsZCgFpT1m5ivNyuTsxlcoVeBIYSf2DImPAsKxuSjR1ReMEQCNwUrOK43poDpDm
iwJj1IOa6iRFQNdhX66CWhSRKsttSSazOzj1QBsUV6RD/oQasOyRmGwBdfjOFYQF
TaVCtkOY46/k3Zr7dOXFYFaM/aCoTUlGf2/M8gukEiS9XSI3pUn/GvZVSoQVGazt
KQUbPhoichmj4dRrGP7b7PbqKl/6IeQ=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:45 2025 by rpki-client