Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa
File:                     e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa (raw, json)
Hash identifier:          F/HEwk2Q6Dw5xsbo4cNY0qIN06sDtK+P9ay9/VYEtls=
Subject key identifier:   85:40:51:8C:CF:6D:DC:EA:A4:FA:E9:A9:3E:E8:19:15:DE:E7:78:7E
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584A7FE09667371B4001FBA6A100
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     931
IP address blocks:        170.39.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:96:67:37:1b:40:01:fb:a6:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=fe6fabf3-7ec1-474c-9f5e-9d9bb37ab774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:90:d5:89:c2:0e:fc:3e:27:f7:5e:04:66:5f:
                    b8:4f:53:6a:e7:e3:7f:6b:64:c4:6b:7e:05:7f:00:
                    9c:0a:7c:6d:b4:8b:15:42:41:76:ad:bd:9b:80:99:
                    77:a0:d7:c8:1e:23:2b:af:8c:ee:86:ae:3c:5e:9d:
                    ce:99:79:8b:bb:8d:3f:a0:be:97:11:72:f4:90:81:
                    c8:49:99:c7:4a:9c:d4:7a:c6:38:f2:3b:c3:dc:49:
                    11:66:c8:ac:27:19:3e:2b:3d:31:1a:ab:86:a4:af:
                    12:c9:23:8a:b9:80:2b:ff:3b:e5:7b:af:45:ea:21:
                    81:91:5f:a4:58:9a:bf:d0:93:ba:e0:91:1b:fa:43:
                    31:e4:58:ee:3b:52:0d:41:de:f9:46:c1:39:62:0a:
                    69:cb:e2:d1:0b:c3:81:c3:c5:1c:31:20:a9:93:88:
                    18:17:8f:2c:85:67:9f:d9:0f:5c:4b:60:47:b7:0b:
                    fa:62:aa:58:d6:bc:6d:36:44:0b:8e:0f:7c:ab:7c:
                    2c:b7:f2:9c:79:04:96:ff:4d:54:cb:fc:7a:49:e3:
                    a9:86:24:a0:4c:d4:5f:31:41:ca:71:2e:cc:cf:16:
                    ab:4a:f0:9a:ff:8d:b1:01:55:55:3e:8a:24:ef:3e:
                    66:eb:9b:86:54:e7:93:ba:23:9e:13:79:21:98:de:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:40:51:8C:CF:6D:DC:EA:A4:FA:E9:A9:3E:E8:19:15:DE:E7:78:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:58:5a:8e:02:47:f9:d9:83:f5:aa:85:60:cf:cd:a4:b2:21:
         a9:86:6d:f6:75:c9:89:b9:cc:11:29:94:8f:a0:b8:e3:c2:16:
         b5:ce:e1:3a:78:d9:ae:cd:7d:4d:22:f0:49:5e:d7:d5:01:29:
         ed:87:a2:f9:cd:38:61:4b:70:88:d5:db:ca:57:45:7a:ba:11:
         6b:07:7f:b2:c9:f0:46:41:c2:e3:2d:34:89:d4:e1:48:4f:b5:
         14:8d:2e:58:5a:91:23:bd:e7:93:88:ca:1d:ed:81:84:49:4c:
         53:ae:b5:00:4d:9d:24:9c:0a:72:b2:76:50:b2:af:a9:32:7f:
         15:76:5b:4c:ea:dc:d8:67:08:10:5d:e0:d1:73:74:2e:bd:f9:
         5b:10:56:22:fc:73:b9:12:b4:a7:61:27:ef:1a:d7:6b:65:5c:
         b9:ed:87:fb:8d:97:8e:e3:8d:bd:76:9f:9c:6c:7e:1e:1e:95:
         19:26:03:2e:a7:65:62:50:80:2e:b3:38:9d:19:dd:72:24:03:
         f7:04:c3:ad:74:03:c2:84:9e:2e:d2:2f:17:81:43:5b:b4:d2:
         dc:b3:51:e5:96:38:61:eb:b6:db:2d:5f:76:07:85:41:8e:c8:
         fd:26:8b:3b:f6:01:af:16:9a:34:af:92:a9:45:98:7a:fa:14:
         3e:b4:c6:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JZnNxtAAfumoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0
YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk
ZmU2ZmFiZjMtN2VjMS00NzRjLTlmNWUtOWQ5YmIzN2FiNzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JDVicIO/D4n914EZl+4T1Nq5+N/a2TEa34F
fwCcCnxttIsVQkF2rb2bgJl3oNfIHiMrr4zuhq48Xp3OmXmLu40/oL6XEXL0kIHI
SZnHSpzUesY48jvD3EkRZsisJxk+Kz0xGquGpK8SySOKuYAr/zvle69F6iGBkV+k
WJq/0JO64JEb+kMx5FjuO1INQd75RsE5Ygppy+LRC8OBw8UcMSCpk4gYF48shWef
2Q9cS2BHtwv6YqpY1rxtNkQLjg98q3wst/KceQSW/01Uy/x6SeOphiSgTNRfMUHK
cS7MzxarSvCa/42xAVVVPook7z5m65uGVOeTuiOeE3khmN5SawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVAUYzPbdzqpPrpqT7oGRXe53h+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0
NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZTNlZmNjOGQtNDczYy0z
MzM3LWE3YjMtOTFjY2YyY2JkMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0
NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4
NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3
YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNYWo4CR/nZg/WqhWDPzaSyIamGbfZ1yYm5zBEplI+guOPCFrXO4Tp4
2a7NfU0i8Ele19UBKe2HovnNOGFLcIjV28pXRXq6EWsHf7LJ8EZBwuMtNInU4UhP
tRSNLlhakSO955OIyh3tgYRJTFOutQBNnSScCnKydlCyr6kyfxV2W0zq3NhnCBBd
4NFzdC69+VsQViL8c7kStKdhJ+8a12tlXLnth/uNl47jjb12n5xsfh4elRkmAy6n
ZWJQgC6zOJ0Z3XIkA/cEw610A8KEni7SLxeBQ1u00tyzUeWWOGHrttstX3YHhUGO
yP0mizv2Aa8WmjSvkqlFmHr6FD60xpg=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:11:27 2025 by rpki-client