Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa
File:                     10192187-defa-3548-b6c6-237adcf28f84.roa (raw, json)
Hash identifier:          c41tr2O8TWxRSrldTGloSm00WkWhUIWHKCgeDkZrcbE=
Subject key identifier:   C5:8C:85:01:E5:20:D8:4F:A9:22:83:E0:B8:65:1A:90:A4:A0:60:DD
Certificate issuer:       /CN=b8a29c46-e0f1-4edc-988a-9420affbc339
Certificate serial:       010D0C9F4328584A90A0B01C1054C3B7C6EDBA00
Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     205627
IP address blocks:        170.2.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b0:1c:10:54:c3:b7:c6:ed:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=6c564669-536e-4717-9af6-d3d576ef398c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:75:7b:18:d2:87:9a:56:46:67:80:02:f8:cd:
                    13:5c:76:d5:f0:a2:0a:63:a5:62:d2:90:37:44:10:
                    31:6f:61:15:4a:50:ec:a5:e3:50:1f:15:b8:e0:69:
                    23:83:41:15:25:61:28:38:57:14:fe:c0:35:98:2c:
                    84:4a:9b:1f:43:dc:97:c4:d3:01:2a:f1:f0:95:2d:
                    85:d8:68:be:bc:da:f5:f4:c0:f5:cb:74:3d:d1:27:
                    5c:6b:e2:e1:da:54:22:91:49:5d:d6:bc:58:78:4f:
                    d9:7f:00:e1:f2:ae:db:bd:9f:4c:5d:c4:ad:1c:8b:
                    94:1f:0f:f0:54:97:e9:9f:44:3b:f4:c5:dd:a2:ae:
                    56:a6:49:f5:f4:03:5d:54:26:0c:53:9f:d3:e3:8b:
                    62:d3:fb:3d:18:8f:0e:04:a3:c2:fe:6a:7b:41:18:
                    31:e4:ae:3b:96:ce:80:4f:3e:52:34:4d:29:7b:5a:
                    fe:cd:ae:f1:5d:dc:59:f4:7a:e8:ca:b8:cc:78:e3:
                    34:ed:03:26:68:6d:b2:52:91:8c:fa:c1:03:96:50:
                    26:6b:00:dc:49:cf:cb:a0:56:b6:1a:30:d8:78:b9:
                    a4:5a:46:93:6a:76:f6:14:8a:0e:e6:02:1a:5d:10:
                    9b:c7:47:78:cb:98:de:b8:71:f2:9c:3e:84:fd:ad:
                    f1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8C:85:01:E5:20:D8:4F:A9:22:83:E0:B8:65:1A:90:A4:A0:60:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/10192187-defa-3548-b6c6-237adcf28f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.2.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3b:35:aa:61:69:e8:94:df:c6:e0:59:64:3d:bb:6c:d2:42:
         c3:91:03:5e:2a:c1:31:3a:0c:d3:41:50:24:45:16:ec:2a:36:
         20:21:c3:e0:10:c9:12:41:ba:fc:0f:b3:f9:57:ad:01:90:94:
         7b:ff:1a:49:60:a3:ce:61:40:07:72:d4:51:9a:c0:89:cf:f2:
         f7:66:42:75:26:2d:94:cd:71:be:6a:a7:0c:9a:46:75:05:46:
         32:a2:3c:59:83:08:ce:1d:67:22:ea:f7:10:f8:5c:cd:90:b5:
         68:77:e9:85:47:cb:11:25:96:dd:8e:9d:d5:74:21:f1:f4:bf:
         fc:06:d6:a3:bb:e1:25:68:f8:e4:6c:ff:43:e4:10:84:9d:71:
         ba:8b:d7:c1:bb:cf:31:84:46:e2:85:05:df:9a:82:94:6c:ae:
         92:2f:5f:e2:1a:39:92:f1:7a:56:14:7b:38:09:cc:a0:84:65:
         b8:26:0e:a3:ee:f8:13:30:0d:84:ee:54:f3:a1:25:e0:3b:ed:
         78:89:8b:d0:40:98:f7:c6:3d:61:84:2f:68:a6:db:f5:22:46:
         f2:65:b7:58:39:b6:b5:f9:e2:55:14:f3:5b:e6:de:bf:9e:7e:
         2c:cb:19:f2:9d:2c:15:b8:73:d0:da:1e:0a:b5:19:cc:e6:43:
         4f:da:f5:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLAcEFTDt8btugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj
MzM5MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
NmM1NjQ2NjktNTM2ZS00NzE3LTlhZjYtZDNkNTc2ZWYzOThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXV7GNKHmlZGZ4AC+M0TXHbV8KIKY6Vi0pA3
RBAxb2EVSlDspeNQHxW44Gkjg0EVJWEoOFcU/sA1mCyESpsfQ9yXxNMBKvHwlS2F
2Gi+vNr19MD1y3Q90Sdca+Lh2lQikUld1rxYeE/ZfwDh8q7bvZ9MXcStHIuUHw/w
VJfpn0Q79MXdoq5Wpkn19ANdVCYMU5/T44ti0/s9GI8OBKPC/mp7QRgx5K47ls6A
Tz5SNE0pe1r+za7xXdxZ9HroyrjMeOM07QMmaG2yUpGM+sEDllAmawDcSc/LoFa2
GjDYeLmkWkaTanb2FIoO5gIaXRCbx0d4y5jeuHHynD6E/a3xpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWMhQHlINhPqSKD4LhlGpCkoGDdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy
OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvMTAxOTIxODctZGVmYS0z
NTQ4LWI2YzYtMjM3YWRjZjI4Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4
OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi
YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw
YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAA7NaphaeiU38bgWWQ9u2zSQsORA14qwTE6DNNBUCRFFuwqNiAhw+AQ
yRJBuvwPs/lXrQGQlHv/Gklgo85hQAdy1FGawInP8vdmQnUmLZTNcb5qpwyaRnUF
RjKiPFmDCM4dZyLq9xD4XM2QtWh36YVHyxEllt2OndV0IfH0v/wG1qO74SVo+ORs
/0PkEISdcbqL18G7zzGERuKFBd+agpRsrpIvX+IaOZLxelYUezgJzKCEZbgmDqPu
+BMwDYTuVPOhJeA77XiJi9BAmPfGPWGEL2im2/UiRvJlt1g5trX54lUU81vm3r+e
fizLGfKdLBW4c9DaHgq1GczmQ0/a9Zc=
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:04:31 2025 by rpki-client