Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7fe34e73-a79c-387e-9aae-e57a4a16a29e.roa
File:                     7fe34e73-a79c-387e-9aae-e57a4a16a29e.roa (raw, json)
Hash identifier:          YMWPEO66Gy5jHlDbnZRK103g8cOjSwdRTU84qU1xPVU=
Subject key identifier:   68:EB:79:37:57:BD:EF:C2:AD:27:4B:49:95:47:B7:0C:F2:06:08:6B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AFD43866BC7A9698022E3E980
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7fe34e73-a79c-387e-9aae-e57a4a16a29e.roa
Signing time:             Tue 26 Aug 2025 22:56:20 +0000
ROA not before:           Tue 26 Aug 2025 22:56:20 +0000
ROA not after:            Mon 24 Nov 2025 23:56:20 +0000
asID:                     31898
IP address blocks:        170.9.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fd:43:86:6b:c7:a9:69:80:22:e3:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 26 22:56:20 2025 GMT
            Not After : Nov 24 23:56:20 2025 GMT
        Subject: CN=8141da6d-c55b-4257-8e03-dbb2f1273677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:58:19:fc:eb:d6:90:30:6d:4d:f3:9e:98:
                    21:df:87:8c:1a:23:77:38:a7:41:18:7d:69:d4:3b:
                    f5:f7:d3:a9:91:18:5f:12:93:33:10:57:d1:74:b0:
                    ec:98:b5:57:69:18:91:1c:e0:72:7e:04:35:c8:5f:
                    01:66:cb:db:f1:94:6e:7f:01:9c:ca:5a:9d:af:e0:
                    90:0e:74:9e:91:c2:56:7a:43:d4:83:2a:30:54:a4:
                    df:80:17:97:39:fd:ca:b1:43:9c:32:d5:1d:ed:5f:
                    8e:5d:d8:6a:3e:63:66:06:b9:78:20:1e:02:0c:54:
                    16:b1:d0:64:72:ec:8b:49:84:ed:60:06:a3:a6:8d:
                    55:8f:a0:0d:8a:0c:06:c1:9e:d0:3f:3f:e1:35:51:
                    23:52:ad:63:68:f7:80:a4:bb:58:e1:70:b7:6c:e3:
                    7e:70:fd:ef:fb:9c:52:47:43:b8:9d:54:63:ec:b1:
                    20:7f:1e:ed:88:df:2d:28:74:ec:b4:94:17:da:34:
                    60:14:ad:33:2b:6a:d9:a6:85:af:7b:69:d9:1e:48:
                    8c:b8:c4:be:d2:09:18:2c:53:5a:48:33:71:64:cd:
                    72:e6:2d:ba:e1:eb:d8:93:3b:7e:db:27:52:bc:9f:
                    22:3d:63:d7:e8:e5:56:24:fe:c5:61:7e:1e:47:4e:
                    97:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EB:79:37:57:BD:EF:C2:AD:27:4B:49:95:47:B7:0C:F2:06:08:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7fe34e73-a79c-387e-9aae-e57a4a16a29e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.9.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:93:8e:30:46:40:9b:a1:48:63:e9:e5:08:11:40:53:82:96:
         b6:5d:14:22:f3:95:b5:78:0f:97:96:ef:40:e1:a7:b5:34:3f:
         a6:7d:83:be:69:7b:9b:bc:f2:7c:6c:7e:c0:28:11:79:16:42:
         4b:df:ab:6c:31:0e:3e:20:89:55:00:62:e1:85:09:c8:f3:59:
         cd:11:59:5e:ac:f1:7d:3b:70:b0:da:b1:c4:fe:49:6d:c1:eb:
         0d:c7:64:e5:ae:bb:56:03:37:84:09:64:f2:e5:1b:39:89:e4:
         a0:b8:0b:51:00:2d:cd:5d:85:a3:9f:8c:fc:bf:ad:ad:b6:cf:
         dc:64:ff:63:98:c8:f5:b2:71:07:ac:d8:1f:b1:b1:06:e3:f4:
         7f:c9:19:31:96:81:4d:17:19:b1:40:fc:e9:bb:90:da:32:52:
         5d:13:7d:98:bf:2c:53:ae:ac:51:fb:f4:7d:16:48:ff:66:3d:
         df:6a:6b:29:8d:b1:65:3f:3d:7c:67:9f:5a:bc:45:03:6f:0a:
         5f:e7:d7:c8:a5:1a:cf:8e:9c:36:93:1a:76:7f:92:51:48:de:
         45:2a:49:55:9a:e5:d8:a3:ea:44:9f:ef:59:5c:0d:4d:19:c6:
         53:a8:16:f0:99:2a:73:ae:f6:9e:b6:a0:5a:52:63:96:31:a8:
         dd:14:03:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q4Zrx6lpgCLj6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDgyNjIyNTYyMFoXDTI1MTEyNDIzNTYyMFowLzEtMCsGA1UEAxMk
ODE0MWRhNmQtYzU1Yi00MjU3LThlMDMtZGJiMmYxMjczNjc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMRYGfzr1pAwbU3znpgh34eMGiN3OKdBGH1p
1Dv199OpkRhfEpMzEFfRdLDsmLVXaRiRHOByfgQ1yF8BZsvb8ZRufwGcylqdr+CQ
DnSekcJWekPUgyowVKTfgBeXOf3KsUOcMtUd7V+OXdhqPmNmBrl4IB4CDFQWsdBk
cuyLSYTtYAajpo1Vj6ANigwGwZ7QPz/hNVEjUq1jaPeApLtY4XC3bON+cP3v+5xS
R0O4nVRj7LEgfx7tiN8tKHTstJQX2jRgFK0zK2rZpoWve2nZHkiMuMS+0gkYLFNa
SDNxZM1y5i264evYkzt+2ydSvJ8iPWPX6OVWJP7FYX4eR06X7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjreTdXve/CrSdLSZVHtwzyBghrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2ZlMzRlNzMtYTc5Yy0z
ODdlLTlhYWUtZTU3YTRhMTZhMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqglAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAImTjjBGQJuhSGPp5QgRQFOClrZdFCLzlbV4D5eW70Dhp7U0P6Z9g75p
e5u88nxsfsAoEXkWQkvfq2wxDj4giVUAYuGFCcjzWc0RWV6s8X07cLDascT+SW3B
6w3HZOWuu1YDN4QJZPLlGzmJ5KC4C1EALc1dhaOfjPy/ra22z9xk/2OYyPWycQes
2B+xsQbj9H/JGTGWgU0XGbFA/Om7kNoyUl0TfZi/LFOurFH79H0WSP9mPd9qaymN
sWU/PXxnn1q8RQNvCl/n18ilGs+OnDaTGnZ/klFI3kUqSVWa5dij6kSf71lcDU0Z
xlOoFvCZKnOu9p62oFpSY5YxqN0UA4E=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:13:06 2025 by rpki-client