Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/d490b4ec-a37d-3473-800b-69852b5ca56d.roa
File:                     d490b4ec-a37d-3473-800b-69852b5ca56d.roa (raw, json)
Hash identifier:          bDp4oaiSELvBC/ap6tvN/WdhRtmzLaBe+g0ew92oGww=
Subject key identifier:   F8:B0:7A:8B:26:D7:E6:C9:10:36:5E:86:68:ED:4D:8C:79:C4:40:42
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F4328584AADF108477F0FA84B9B945DC0
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/d490b4ec-a37d-3473-800b-69852b5ca56d.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        170.176.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:08:47:7f:0f:a8:4b:9b:94:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=44a391f4-a56d-4dda-8694-34147550af07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:72:ed:66:7a:67:38:be:16:f7:83:32:95:a9:
                    7e:12:2e:34:51:12:03:ec:0c:2d:37:4f:48:83:bd:
                    4f:2d:58:51:2b:b2:e8:f7:48:f2:90:bc:3a:cc:b9:
                    05:bd:03:95:4a:78:8d:21:9c:fa:43:0b:15:8d:dc:
                    d8:ea:98:80:28:95:da:48:ac:52:ce:d9:23:67:59:
                    b8:93:d8:8d:5d:a9:f3:6b:47:d8:33:b7:0e:39:dd:
                    3a:af:9d:a9:1d:27:56:b9:b2:ee:0b:e1:9c:86:ba:
                    ee:74:ba:fb:98:74:c0:d7:2e:52:f1:ae:21:4f:5b:
                    7c:7c:5b:df:27:25:d7:95:48:6a:1e:58:85:67:40:
                    69:95:6b:17:15:b5:53:48:5a:e1:ec:ca:f0:ed:57:
                    74:f8:e1:7f:90:f6:d9:5a:ea:13:d2:b1:f1:4a:8a:
                    38:7d:72:93:0a:da:c8:35:bb:e4:73:51:4c:d9:75:
                    07:46:9a:d4:36:53:b8:d5:cc:5d:b3:fa:f5:f5:9f:
                    b4:a2:2b:1a:c6:9a:99:b4:39:e2:70:b7:56:1b:5c:
                    3d:5b:2f:8d:64:af:c8:db:a6:ab:7c:bc:79:41:75:
                    52:9c:13:b2:d1:3d:57:e2:a5:f2:0e:e9:cb:38:5f:
                    f6:c5:46:7b:37:a1:1d:cb:06:3e:2d:ad:e9:18:78:
                    96:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B0:7A:8B:26:D7:E6:C9:10:36:5E:86:68:ED:4D:8C:79:C4:40:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/d490b4ec-a37d-3473-800b-69852b5ca56d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9e:d9:74:6e:5c:8c:59:30:f1:56:21:d9:0a:84:c7:30:64:
         96:6a:34:88:3d:29:61:50:d6:67:61:68:3b:96:c7:d4:4b:d4:
         93:14:05:68:12:24:73:82:36:08:32:65:45:43:19:9a:85:d7:
         36:f5:de:f4:9f:c1:3a:32:45:30:37:12:81:65:48:32:3d:de:
         e8:37:30:e6:4b:18:dd:b1:c5:18:97:28:90:fe:d7:dd:21:6b:
         5c:28:a7:26:5b:cb:77:4d:e5:01:df:9f:06:25:2f:82:9b:e2:
         eb:83:3e:2e:7d:ac:97:f2:e1:56:fe:30:28:fb:e8:9f:0c:45:
         67:2f:ea:ad:11:ba:a9:b9:4f:3a:cc:37:4c:e3:11:9c:e2:66:
         af:88:12:b9:fc:cb:b7:8b:f4:0f:f5:29:e2:4c:71:85:44:60:
         af:c7:15:46:ab:55:01:74:3d:b3:58:8f:d7:69:c8:31:57:59:
         3a:80:61:43:7c:58:ab:5c:f0:21:0c:7a:6e:89:19:ab:19:d0:
         de:3f:2f:db:2c:d6:0a:35:f1:af:a2:85:6b:50:05:71:2c:db:
         dc:6f:77:52:dd:ec:85:4f:58:55:f4:ae:2f:d2:46:46:01:ca:
         17:d8:21:45:c5:80:0d:7b:2e:78:2f:c9:94:64:cf:22:82:0c:
         ac:19:45:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QhHfw+oS5uUXcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk
Y2M0MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
NDRhMzkxZjQtYTU2ZC00ZGRhLTg2OTQtMzQxNDc1NTBhZjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03LtZnpnOL4W94Mylal+Ei40URID7AwtN09I
g71PLVhRK7Lo90jykLw6zLkFvQOVSniNIZz6QwsVjdzY6piAKJXaSKxSztkjZ1m4
k9iNXanza0fYM7cOOd06r52pHSdWubLuC+GchrrudLr7mHTA1y5S8a4hT1t8fFvf
JyXXlUhqHliFZ0BplWsXFbVTSFrh7Mrw7Vd0+OF/kPbZWuoT0rHxSoo4fXKTCtrI
Nbvkc1FM2XUHRprUNlO41cxds/r19Z+0oisaxpqZtDnicLdWG1w9Wy+NZK/I26ar
fLx5QXVSnBOy0T1X4qXyDunLOF/2xUZ7N6EdywY+La3pGHiWGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPiweosm1+bJEDZehmjtTYx5xEBCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk
ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvZDQ5MGI0ZWMtYTM3ZC0z
NDczLTgwMGItNjk4NTJiNWNhNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz
MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3
ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5
M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKe2XRuXIxZMPFWIdkKhMcwZJZqNIg9KWFQ1mdhaDuWx9RL1JMUBWgS
JHOCNggyZUVDGZqF1zb13vSfwToyRTA3EoFlSDI93ug3MOZLGN2xxRiXKJD+190h
a1wopyZby3dN5QHfnwYlL4Kb4uuDPi59rJfy4Vb+MCj76J8MRWcv6q0Ruqm5TzrM
N0zjEZziZq+IErn8y7eL9A/1KeJMcYVEYK/HFUarVQF0PbNYj9dpyDFXWTqAYUN8
WKtc8CEMem6JGasZ0N4/L9ss1go18a+ihWtQBXEs29xvd1Ld7IVPWFX0ri/SRkYB
yhfYIUXFgA17LngvyZRkzyKCDKwZRRQ=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:44:11 2025 by rpki-client