Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa
File:                     aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa (raw, json)
Hash identifier:          VvtOA5eoLH7n/vW71EYgbAWRHZmMiSnRZB2MjyrHp2A=
Subject key identifier:   62:7D:E5:20:B1:8A:31:11:66:D1:97:EB:63:DD:2E:43:B5:9B:29:2F
Certificate issuer:       /CN=31671c23-3278-409b-837d-7dfe69606940
Certificate serial:       010D0C9F43285849EEB4FA6BB6FDF182481385C0
Authority key identifier: 67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        170.62.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b4:fa:6b:b6:fd:f1:82:48:13:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31671c23-3278-409b-837d-7dfe69606940
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=15f1b593-6c18-490b-a689-da7100d31398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5c:a8:4a:76:1d:a7:ee:32:e7:52:6f:ae:d6:
                    be:15:b3:c1:b4:ed:5f:13:f9:4d:cf:0c:04:0e:f3:
                    84:6c:36:18:1f:8e:76:ed:46:09:64:e3:f4:b9:1e:
                    2f:5d:1b:6a:67:34:89:c3:b9:11:36:ad:35:67:a2:
                    1c:67:d7:7c:a3:a9:b7:f8:bb:17:0e:f8:80:ce:90:
                    20:82:99:b9:1b:bb:92:2e:22:79:8a:e3:08:29:6c:
                    01:11:96:12:58:d0:c0:68:78:c2:ba:3d:f2:63:47:
                    82:64:0b:d9:70:6b:cd:d9:84:3c:6e:5a:71:c3:93:
                    97:f9:11:cc:7f:6a:87:bd:bc:ce:c6:f7:c6:4e:18:
                    ab:d9:e3:7f:8f:b8:36:25:71:72:d3:b6:af:e3:a7:
                    e1:b9:17:ea:c9:d7:3a:c1:67:2f:27:03:64:f1:9e:
                    1d:f6:49:3e:38:87:66:cf:dc:1f:d9:c2:e8:ee:18:
                    82:13:a4:34:9e:60:36:15:62:39:12:13:bf:a8:70:
                    7c:48:7c:fe:17:84:2a:d3:73:d6:89:20:d9:e2:80:
                    a6:c8:87:c0:4e:23:1e:3c:7d:92:b0:ba:19:c2:00:
                    dd:47:ab:30:6d:5e:08:ec:98:03:7e:8e:87:c9:3a:
                    09:25:33:33:60:19:f3:d2:c2:02:52:35:2d:98:67:
                    37:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7D:E5:20:B1:8A:31:11:66:D1:97:EB:63:DD:2E:43:B5:9B:29:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl

            X509v3 Authority Key Identifier:
                keyid:67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2c:9e:e1:47:c8:58:90:58:da:2d:92:54:80:0e:6e:48:7a:
         c9:c7:5b:80:2a:4f:ea:76:ae:8c:3b:c6:e7:2f:c9:e9:40:59:
         cf:d5:0a:60:1f:ee:f6:42:ad:ef:ac:cd:a3:10:0b:06:9a:8f:
         ee:58:76:ef:d1:42:cc:94:79:0c:be:af:52:da:73:9e:1f:7b:
         1b:fd:ee:bb:ff:50:23:93:43:9e:54:c5:91:78:17:e7:aa:22:
         28:cb:4c:2f:23:69:5e:c8:ea:1d:bb:12:1f:c2:66:03:de:3f:
         9f:60:fa:ee:ed:60:ef:c0:2b:3a:af:f6:9c:fc:d6:9d:06:b5:
         d8:c0:cf:93:48:0b:9a:dc:5b:8f:c1:a7:9c:10:7c:fe:a0:38:
         58:e6:c2:f2:7d:f1:6d:8e:19:0a:80:0c:4f:78:7c:76:81:5c:
         cf:5a:2e:09:b2:9f:24:4b:71:88:61:3d:d9:f1:e6:b4:3d:a2:
         6b:db:c8:29:d0:cc:36:e1:e5:f8:1c:dc:bd:df:11:86:59:68:
         8c:a9:fc:4a:92:71:4f:c6:a5:0c:7b:4e:14:fb:7c:6e:d2:bf:
         f5:7d:74:e0:31:62:58:7a:bd:b7:54:fe:9c:6e:b3:2d:22:3a:
         b3:4e:d9:c7:2b:e4:8c:ff:6c:f8:ed:f1:1d:1a:a5:b5:d7:77:
         50:58:45:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutPprtv3xgkgThcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE2NzFjMjMtMzI3OC00MDliLTgzN2QtN2RmZTY5NjA2
OTQwMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk
MTVmMWI1OTMtNmMxOC00OTBiLWE2ODktZGE3MTAwZDMxMzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlyoSnYdp+4y51Jvrta+FbPBtO1fE/lNzwwE
DvOEbDYYH4527UYJZOP0uR4vXRtqZzSJw7kRNq01Z6IcZ9d8o6m3+LsXDviAzpAg
gpm5G7uSLiJ5iuMIKWwBEZYSWNDAaHjCuj3yY0eCZAvZcGvN2YQ8blpxw5OX+RHM
f2qHvbzOxvfGThir2eN/j7g2JXFy07av46fhuRfqydc6wWcvJwNk8Z4d9kk+OIdm
z9wf2cLo7hiCE6Q0nmA2FWI5EhO/qHB8SHz+F4Qq03PWiSDZ4oCmyIfATiMePH2S
sLoZwgDdR6swbV4I7JgDfo6HyToJJTMzYBnz0sICUjUtmGc31QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGJ95SCxijERZtGX62PdLkO1mykvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMTY3
MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZlNjk2MDY5NDAvYWFjZjgzNWUtYTkwYi0z
ZTRhLTliMzQtZmRhZmRkODgyN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzE2NzFjMjMtMzI3OC00MDliLTgz
N2QtN2RmZTY5NjA2OTQwLzMxNjcxYzIzLTMyNzgtNDA5Yi04MzdkLTdkZmU2OTYw
Njk0MC5jcmwwHwYDVR0jBBgwFoAUZxYj4GdaMB9RUq8/Ry/8J86NPxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zMTY3MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZl
Njk2MDY5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj4rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYsnuFHyFiQWNotklSADm5IesnHW4AqT+p2row7xucvyelAWc/VCmAf
7vZCre+szaMQCwaaj+5Ydu/RQsyUeQy+r1Lac54fexv97rv/UCOTQ55UxZF4F+eq
IijLTC8jaV7I6h27Eh/CZgPeP59g+u7tYO/AKzqv9pz81p0GtdjAz5NIC5rcW4/B
p5wQfP6gOFjmwvJ98W2OGQqADE94fHaBXM9aLgmynyRLcYhhPdnx5rQ9omvbyCnQ
zDbh5fgc3L3fEYZZaIyp/EqScU/GpQx7ThT7fG7Sv/V9dOAxYlh6vbdU/pxusy0i
OrNO2ccr5Iz/bPjt8R0apbXXd1BYRco=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:43:20 2025 by rpki-client