Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa
File:                     4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa (raw, json)
Hash identifier:          kPzE+jLu/G3aPbAkj2jl/g0QRtrJ3hXUhatsCxgaGPw=
Subject key identifier:   84:2B:17:12:13:57:B0:F2:7F:45:F8:D6:0A:7E:13:38:A0:94:32:C6
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584B1AD192F79CC3190117946D2C
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     33343
IP address blocks:        170.110.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:92:f7:9c:c3:19:01:17:94:6d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=9dff50dc-dba7-4605-bab6-1e09957bc9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:9b:72:77:1a:fe:c0:9c:f7:35:90:33:bc:
                    d7:0e:65:ed:c0:b9:54:95:54:d3:d3:d8:19:ec:3e:
                    db:b9:0b:04:a9:4e:72:de:49:06:47:3e:f3:f7:69:
                    3a:15:26:90:06:55:f6:d0:01:4f:80:ea:1b:94:0c:
                    be:c1:1b:85:3e:98:84:3f:4e:40:96:b9:f0:d4:b9:
                    d4:74:af:ec:85:f2:56:b8:84:fa:30:72:87:6a:4a:
                    c2:31:aa:39:69:e4:41:4c:94:1a:74:2b:0c:aa:dc:
                    62:ec:ab:6e:04:23:12:51:20:aa:a8:c4:c6:7d:3f:
                    0b:b8:10:56:05:df:97:be:a9:b0:42:11:6a:4a:27:
                    f5:0b:32:75:11:22:63:7c:c5:6c:e1:52:88:a5:ba:
                    27:bc:f3:94:33:cd:75:91:34:59:a9:09:a8:62:d2:
                    63:e3:16:73:c4:f2:54:21:6e:87:c1:7e:c6:af:a0:
                    29:7e:8e:a5:af:ab:a8:1e:cb:ed:b1:c8:2b:fd:7f:
                    b4:be:e7:35:58:46:8f:88:46:27:f7:d2:4b:cb:61:
                    1c:aa:cc:c5:a0:15:c3:ee:9f:84:69:10:ef:83:c5:
                    0b:2e:36:c2:db:3a:b8:9e:e5:e3:4a:51:d3:d0:a6:
                    43:b5:bd:16:d3:4b:11:69:44:50:4e:aa:b5:ee:dd:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2B:17:12:13:57:B0:F2:7F:45:F8:D6:0A:7E:13:38:A0:94:32:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:88:a3:02:fd:82:01:01:ca:43:20:93:3b:04:c3:73:cb:11:
         6e:ea:58:c6:0f:c1:4d:9d:7b:58:f1:62:fa:db:4a:6b:02:0f:
         3b:1a:a1:6a:67:08:5f:77:51:e6:e0:a5:0f:77:c0:14:34:55:
         62:e7:17:32:4e:4d:2f:8f:6e:fb:02:5c:8b:41:e2:fd:9a:c7:
         f8:15:ee:03:31:cc:96:9d:66:85:b7:05:74:1e:c5:21:16:66:
         a7:90:b8:49:6e:9a:f0:6a:da:b1:ed:99:e4:de:c7:23:2a:f2:
         05:d2:a3:11:ab:f7:fc:cb:e1:1f:cb:65:45:80:4e:57:87:ed:
         66:1c:cd:d4:ed:e5:1e:7c:b3:81:88:8e:f0:14:28:7a:ed:b4:
         b7:9d:e8:7f:18:63:8e:d1:63:1f:40:27:83:8f:24:23:f6:85:
         f0:ab:a0:13:d8:fc:7f:60:14:a8:15:0b:8d:4d:1b:2d:2e:bb:
         78:fc:09:eb:c7:02:04:99:d0:e5:88:31:f7:a0:77:c2:2b:dc:
         28:56:36:e6:81:47:d5:e2:b4:96:a3:ec:d5:62:47:3d:98:7c:
         7a:e2:55:3e:e0:04:73:96:8e:f4:53:2e:56:cc:14:3d:13:3b:
         b9:db:be:16:ea:fa:73:5f:cc:bd:b0:1a:e8:7a:e9:bd:45:a7:
         ee:7e:a1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:09:08 2025 by rpki-client