Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/226ad5c9-494c-3ab2-8ff6-36852658f30f.roa
File:                     226ad5c9-494c-3ab2-8ff6-36852658f30f.roa (raw, json)
Hash identifier:          74alHH8GNuwvvmixmlvFOuR/1BFxSpQtmDwWX6NV+Nk=
Subject key identifier:   92:2C:DA:5B:0F:8D:78:F2:7B:0D:E5:52:8A:4E:5E:75:51:D8:87:46
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584ABD4B9580BB2D4E024CBD8900
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/226ad5c9-494c-3ab2-8ff6-36852658f30f.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     14618
IP address blocks:        170.114.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:95:80:bb:2d:4e:02:4c:bd:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=eaaef363-d914-498b-9f03-8b8af9eecb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:ae:2f:69:5d:ce:48:06:c5:c9:4a:4f:0f:
                    9f:0a:8b:95:49:58:1a:65:b3:ed:43:4d:8a:8f:91:
                    eb:d2:77:1e:97:89:17:e1:74:2d:53:21:88:1f:9e:
                    30:65:9f:af:1c:97:ee:8c:77:3f:47:56:52:19:47:
                    c2:77:ef:77:c5:10:6f:57:e1:39:5c:14:60:4c:a7:
                    06:f3:01:1e:79:d7:05:aa:e2:7f:77:d2:a6:3e:0b:
                    7c:ba:bc:ed:ff:8c:08:47:c1:b9:89:fb:83:c7:e7:
                    52:18:ca:9e:b9:a7:86:8a:e4:ad:bf:f1:46:d6:33:
                    55:ad:c7:d6:1f:f4:0e:83:b3:67:f2:55:e5:ea:6a:
                    8e:bd:42:41:ee:9f:a3:9a:53:92:09:81:b3:e0:75:
                    e0:2c:99:89:cc:e6:6a:53:ba:57:26:25:d5:3f:a5:
                    06:76:c6:eb:49:11:ac:38:18:a7:7d:73:83:26:65:
                    82:3f:52:e1:6f:ae:f5:00:bb:79:91:8f:ca:9b:53:
                    46:60:ce:2a:30:49:cd:d6:82:57:a6:99:00:85:fa:
                    8b:89:ac:9b:45:26:bb:81:99:ef:38:a5:7e:99:df:
                    2c:f0:bd:70:eb:ad:ad:d8:ee:dc:8b:5f:9a:21:e7:
                    98:2d:7a:df:33:e5:16:05:a5:40:59:3a:c0:a5:29:
                    c2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2C:DA:5B:0F:8D:78:F2:7B:0D:E5:52:8A:4E:5E:75:51:D8:87:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/226ad5c9-494c-3ab2-8ff6-36852658f30f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c9:83:72:c6:48:73:15:fc:87:1e:a0:7c:ba:cd:ed:b1:f1:
         ca:0a:16:df:a1:34:01:ed:52:29:3b:12:98:2b:f8:6a:c8:f7:
         ff:6c:a3:0b:12:82:67:21:99:2b:fe:c4:64:ad:be:d6:ae:8e:
         94:dc:9e:5e:81:dd:ed:41:d3:c1:c1:5f:a0:a6:96:38:8b:9e:
         cf:7f:aa:b5:04:ba:11:c5:a9:70:83:d4:44:d4:d8:ea:9d:73:
         41:97:91:58:76:20:c8:41:1c:a4:38:66:c1:f6:84:a5:e8:64:
         fc:b8:a3:6a:00:c4:86:f1:77:44:1c:43:c4:c7:c2:91:be:84:
         79:fc:4c:1f:13:fb:b2:0a:8b:21:a5:c5:49:8f:d4:b0:44:1e:
         70:d3:f6:76:c1:7e:9f:c8:02:20:80:d8:9b:b6:9f:3e:52:2c:
         53:7d:da:7e:90:bf:84:fc:a8:44:8d:4c:ef:e6:7a:a8:df:8f:
         f2:99:cb:60:e5:2d:c1:ad:22:e8:77:4c:12:9d:9f:7e:9c:f1:
         53:ff:f4:f8:66:85:0a:e6:5a:72:8b:17:09:5a:37:62:4b:90:
         e0:97:3e:d2:45:f7:34:43:8b:21:d7:5a:97:bd:4e:83:cf:6b:
         8e:cb:e4:0c:38:de:3e:cc:d7:0e:26:e7:e0:c2:b1:ea:52:b4:
         6b:f7:bc:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5WAuy1OAky9iQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
ZWFhZWYzNjMtZDkxNC00OThiLTlmMDMtOGI4YWY5ZWVjYjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jiuL2ldzkgGxclKTw+fCouVSVgaZbPtQ02K
j5Hr0ncel4kX4XQtUyGIH54wZZ+vHJfujHc/R1ZSGUfCd+93xRBvV+E5XBRgTKcG
8wEeedcFquJ/d9KmPgt8urzt/4wIR8G5ifuDx+dSGMqeuaeGiuStv/FG1jNVrcfW
H/QOg7Nn8lXl6mqOvUJB7p+jmlOSCYGz4HXgLJmJzOZqU7pXJiXVP6UGdsbrSRGs
OBinfXODJmWCP1Lhb671ALt5kY/Km1NGYM4qMEnN1oJXppkAhfqLiaybRSa7gZnv
OKV+md8s8L1w662t2O7ci1+aIeeYLXrfM+UWBaVAWTrApSnC+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJIs2lsPjXjyew3lUopOXnVR2IdGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMjI2YWQ1YzktNDk0Yy0z
YWIyLThmZjYtMzY4NTI2NThmMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETJg3LGSHMV/IceoHy6ze2x8coKFt+hNAHtUik7Epgr+GrI9/9sowsS
gmchmSv+xGStvtaujpTcnl6B3e1B08HBX6CmljiLns9/qrUEuhHFqXCD1ETU2Oqd
c0GXkVh2IMhBHKQ4ZsH2hKXoZPy4o2oAxIbxd0QcQ8THwpG+hHn8TB8T+7IKiyGl
xUmP1LBEHnDT9nbBfp/IAiCA2Ju2nz5SLFN92n6Qv4T8qESNTO/meqjfj/KZy2Dl
LcGtIuh3TBKdn36c8VP/9PhmhQrmWnKLFwlaN2JLkOCXPtJF9zRDiyHXWpe9ToPP
a47L5Aw43j7M1w4m5+DCsepStGv3vBo=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:11 2025 by rpki-client