Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa
File:                     d17eba83-4637-30d8-a17c-efa5eadc2b67.roa (raw, json)
Hash identifier:          q33wquvkOgWz/ec4uoz2bA8f2C+zBcYfee8/6B4AzmU=
Subject key identifier:   33:0B:A9:4C:2D:FA:1F:5A:57:1D:EF:1E:C5:39:45:FA:84:63:CF:DD
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584B13D6C51FD8C05828A8C39400
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     8075
IP address blocks:        170.110.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c5:1f:d8:c0:58:28:a8:c3:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=9b4a1dbc-8cc1-496c-a1c9-92e21ca7939f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:cc:6d:fe:da:9b:b2:d6:a2:ea:de:f5:e9:
                    85:01:c6:76:31:bb:34:44:18:d0:5d:c2:a0:7d:b0:
                    d0:45:e0:8e:35:bf:8f:81:00:ab:d1:1b:e0:e6:25:
                    df:69:8e:ff:5b:06:e0:3f:2e:66:3d:b7:78:3d:44:
                    2a:2c:9c:3d:51:bb:71:54:81:e6:4c:fb:94:9b:72:
                    b6:f3:5d:5e:0f:13:e6:6f:37:1f:cd:8b:65:5c:e9:
                    b4:ed:bb:35:65:b4:0f:9a:ec:c6:91:0d:ed:3d:f3:
                    e8:af:57:f6:6f:da:73:0b:23:4f:2a:02:7f:7b:90:
                    7c:49:be:08:c3:f1:0f:88:c1:50:f2:5a:3a:8e:8c:
                    9e:cd:b3:49:f5:3e:b4:a3:51:ac:38:f7:df:9b:fb:
                    7f:fe:92:52:da:93:91:bc:14:e3:48:55:6b:98:92:
                    56:64:d5:db:ee:ca:57:57:3f:31:f0:99:24:c1:bd:
                    d8:5d:70:3c:26:99:3b:7f:a0:b4:10:60:5c:40:4e:
                    11:b3:34:5b:69:ee:f0:da:66:3d:35:0f:99:d8:63:
                    a5:4f:7e:71:c0:ba:db:03:5c:d2:39:f8:f0:36:87:
                    e9:61:35:87:a6:38:9c:ce:6c:2e:fe:c3:e0:1a:14:
                    e3:8c:ab:e2:e4:6d:81:11:2e:99:f5:23:2d:87:8e:
                    d9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0B:A9:4C:2D:FA:1F:5A:57:1D:EF:1E:C5:39:45:FA:84:63:CF:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.110.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:a4:2b:00:d9:a6:3d:db:b5:a8:36:10:a5:21:d6:3f:e3:f6:
         1d:a7:0d:b5:d0:9a:ec:c3:b8:10:75:d5:77:bb:29:6c:42:2c:
         9f:9d:9b:de:80:eb:74:56:fe:81:a8:c7:4c:bc:bd:58:2c:4e:
         5f:df:5c:67:30:28:2c:1a:d5:7f:b5:b3:83:17:cb:98:c7:e0:
         18:a6:58:20:17:b4:11:2a:cb:d7:52:57:08:82:14:f7:c3:c0:
         db:c2:8c:8d:26:63:0b:15:0f:ef:59:dd:8c:f5:58:57:1a:81:
         4f:cf:1f:60:97:e7:3d:af:a2:30:ed:1d:ac:50:99:dc:41:d6:
         99:f8:5c:17:33:0e:ef:21:6c:56:2d:c1:64:30:e5:f7:cf:dd:
         3e:ec:fc:99:c9:8d:48:e5:c9:c1:e1:74:69:64:e8:52:19:9f:
         96:81:4e:4a:57:9f:8d:d3:bd:dd:2b:24:c3:03:16:b9:78:c4:
         3b:1a:43:ce:f7:06:a9:14:97:c3:f5:5c:5c:51:e9:ad:ab:80:
         dd:63:61:5e:ef:13:2b:00:53:c7:a9:29:89:ca:e8:f9:69:9c:
         3e:09:3e:5b:5c:ca:6d:d2:d0:a5:03:bf:04:42:67:f3:3f:37:
         01:83:ed:40:30:38:50:12:95:3f:a5:c1:5b:eb:2c:b0:ac:48:
         2a:64:25:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sUf2MBYKKjDlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGJlMGQxYTQtMmM4OC00NTk2LTgxZDctM2I2Njg1ZTA0
YTJkMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
OWI0YTFkYmMtOGNjMS00OTZjLWExYzktOTJlMjFjYTc5MzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIPMbf7am7LWoure9emFAcZ2Mbs0RBjQXcKg
fbDQReCONb+PgQCr0Rvg5iXfaY7/WwbgPy5mPbd4PUQqLJw9UbtxVIHmTPuUm3K2
811eDxPmbzcfzYtlXOm07bs1ZbQPmuzGkQ3tPfPor1f2b9pzCyNPKgJ/e5B8Sb4I
w/EPiMFQ8lo6joyezbNJ9T60o1GsOPffm/t//pJS2pORvBTjSFVrmJJWZNXb7spX
Vz8x8Jkkwb3YXXA8Jpk7f6C0EGBcQE4RszRbae7w2mY9NQ+Z2GOlT35xwLrbA1zS
OfjwNofpYTWHpjiczmwu/sPgGhTjjKvi5G2BES6Z9SMth47ZBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMLqUwt+h9aVx3vHsU5RfqEY8/dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wYmUw
ZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2ODVlMDRhMmQvZDE3ZWJhODMtNDYzNy0z
MGQ4LWExN2MtZWZhNWVhZGMyYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGJlMGQxYTQtMmM4OC00NTk2LTgx
ZDctM2I2Njg1ZTA0YTJkLzBiZTBkMWE0LTJjODgtNDU5Ni04MWQ3LTNiNjY4NWUw
NGEyZC5jcmwwHwYDVR0jBBgwFoAUv5vktT4TlR8HU9jpDI5FWg61DIIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wYmUwZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2
ODVlMDRhMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqm76MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALOkKwDZpj3btag2EKUh1j/j9h2nDbXQmuzDuBB11Xe7KWxCLJ+dm96A
63RW/oGox0y8vVgsTl/fXGcwKCwa1X+1s4MXy5jH4BimWCAXtBEqy9dSVwiCFPfD
wNvCjI0mYwsVD+9Z3Yz1WFcagU/PH2CX5z2vojDtHaxQmdxB1pn4XBczDu8hbFYt
wWQw5ffP3T7s/JnJjUjlycHhdGlk6FIZn5aBTkpXn43Tvd0rJMMDFrl4xDsaQ873
BqkUl8P1XFxR6a2rgN1jYV7vEysAU8epKYnK6PlpnD4JPltcym3S0KUDvwRCZ/M/
NwGD7UAwOFASlT+lwVvrLLCsSCpkJe4=
-----END CERTIFICATE-----
Generated at Fri Oct 10 21:09:08 2025 by rpki-client