Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0a1ff368-ad7a-3f30-9fdc-0946412cf449.roa
File:                     0a1ff368-ad7a-3f30-9fdc-0946412cf449.roa (raw, json)
Hash identifier:          3Ba0AYmL+YW7Iaa1VyLrWRargVOTtawKD4WbZ6Gy7k0=
Subject key identifier:   A1:EF:F9:2A:2A:42:23:D3:13:03:16:CD:70:60:69:15:61:BF:49:94
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584A7FE0981F62B855CDE74E0480
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0a1ff368-ad7a-3f30-9fdc-0946412cf449.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     213122
IP address blocks:        170.39.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:98:1f:62:b8:55:cd:e7:4e:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=12cfcee9-cf9c-439e-bf84-deac843fa247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:f1:61:2b:ad:ae:f3:d5:cf:fb:68:b2:55:
                    4f:05:b1:45:1b:34:a7:22:a3:3b:f1:24:64:b0:d7:
                    b1:fe:82:58:42:46:88:1a:79:36:39:ae:2e:23:6b:
                    3e:c4:dc:12:16:a7:92:26:d3:a9:e4:a6:ae:7b:c8:
                    81:0c:08:80:6e:de:38:22:4c:42:bf:10:95:3a:a2:
                    09:20:79:fd:b2:05:b0:e8:9a:80:34:86:c5:60:79:
                    ef:ac:2a:34:f4:cf:a1:d0:53:50:fc:e3:07:b5:51:
                    86:fb:2d:63:0f:e9:9f:47:be:6c:50:17:e9:73:60:
                    ae:78:2a:9e:c5:23:6c:55:69:68:ec:42:15:05:5c:
                    5a:8a:25:f1:c0:04:1e:f5:b9:b9:bc:66:c7:1c:95:
                    e7:24:ea:63:2f:bc:8f:be:64:ba:53:0f:d1:c1:7c:
                    a7:27:6f:ab:f6:d9:e1:a4:01:8a:38:f0:47:74:37:
                    af:a1:41:75:e5:bb:89:0d:d7:2d:9e:28:a1:9b:5d:
                    ed:97:90:83:64:3c:fc:f3:96:85:90:4b:08:36:bf:
                    dc:7d:ba:98:8c:52:ba:63:d3:5b:46:f1:49:f9:4e:
                    8f:4f:ac:95:32:f4:a8:2f:af:0f:c5:4d:3f:d7:2d:
                    a9:ab:8d:a7:30:64:89:02:b8:92:93:1f:f6:16:cb:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EF:F9:2A:2A:42:23:D3:13:03:16:CD:70:60:69:15:61:BF:49:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/0a1ff368-ad7a-3f30-9fdc-0946412cf449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c9:bc:63:17:7f:26:c0:c9:91:3b:52:0b:91:20:77:09:00:
         1c:35:27:82:de:a6:62:5b:db:39:f7:4d:50:8a:d6:70:cf:3d:
         0d:6e:5e:02:00:ad:08:3f:77:10:e5:b6:2b:8c:cd:d6:ee:16:
         6a:24:ff:83:16:62:02:5a:3a:98:5a:24:7a:7f:ee:b0:0c:cd:
         6f:57:78:92:a1:cf:f6:f6:c3:7c:e1:20:9f:d1:71:a1:ad:ce:
         7b:62:52:b7:6f:dd:46:32:fa:8c:ea:10:89:33:6f:5c:10:fb:
         7c:cf:15:c6:f2:43:42:f9:34:35:b9:b2:c7:78:76:90:2f:f3:
         bf:d6:f4:0f:47:e5:0c:11:50:b3:80:e4:fc:43:15:e2:00:6b:
         c5:d6:c1:0d:e7:62:3c:6d:da:5b:05:fd:38:3c:25:72:41:66:
         5e:87:11:ba:e5:f1:81:60:34:8e:ae:e0:89:f0:2f:d5:7f:ef:
         f7:27:22:26:ff:07:9f:91:66:6f:65:6f:46:2d:d5:4c:bb:1c:
         4a:5e:10:17:45:e9:6c:eb:09:1c:c1:01:8f:9c:54:6c:bb:82:
         d9:71:8c:7c:5a:a3:7f:d7:50:f5:8c:4e:9c:4e:3d:40:5a:f8:
         ab:ae:d6:4e:35:d9:60:0a:b0:ab:d3:99:97:f5:c0:b5:2b:cd:
         10:99:90:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JgfYrhVzedOBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0
YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk
MTJjZmNlZTktY2Y5Yy00MzllLWJmODQtZGVhYzg0M2ZhMjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVnxYSutrvPVz/toslVPBbFFGzSnIqM78SRk
sNex/oJYQkaIGnk2Oa4uI2s+xNwSFqeSJtOp5Kaue8iBDAiAbt44IkxCvxCVOqIJ
IHn9sgWw6JqANIbFYHnvrCo09M+h0FNQ/OMHtVGG+y1jD+mfR75sUBfpc2CueCqe
xSNsVWlo7EIVBVxaiiXxwAQe9bm5vGbHHJXnJOpjL7yPvmS6Uw/RwXynJ2+r9tnh
pAGKOPBHdDevoUF15buJDdctniihm13tl5CDZDz885aFkEsINr/cfbqYjFK6Y9Nb
RvFJ+U6PT6yVMvSoL68PxU0/1y2pq42nMGSJAriSkx/2Fst26QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKHv+SoqQiPTEwMWzXBgaRVhv0mUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0
NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMGExZmYzNjgtYWQ3YS0z
ZjMwLTlmZGMtMDk0NjQxMmNmNDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0
NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4
NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3
YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDJvGMXfybAyZE7UguRIHcJABw1J4LepmJb2zn3TVCK1nDPPQ1uXgIA
rQg/dxDltiuMzdbuFmok/4MWYgJaOphaJHp/7rAMzW9XeJKhz/b2w3zhIJ/RcaGt
zntiUrdv3UYy+ozqEIkzb1wQ+3zPFcbyQ0L5NDW5ssd4dpAv87/W9A9H5QwRULOA
5PxDFeIAa8XWwQ3nYjxt2lsF/Tg8JXJBZl6HEbrl8YFgNI6u4InwL9V/7/cnIib/
B5+RZm9lb0Yt1Uy7HEpeEBdF6WzrCRzBAY+cVGy7gtlxjHxao3/XUPWMTpxOPUBa
+Kuu1k412WAKsKvTmZf1wLUrzRCZkEY=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:05:23 2025 by rpki-client