Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/8a0d8ff9-0e83-3f7d-9da4-b8164674e7ec.roa
File:                     8a0d8ff9-0e83-3f7d-9da4-b8164674e7ec.roa (raw, json)
Hash identifier:          WjTJkmNWYhQQSc0bw8zgAPsBFYOdXlHn/jf2i1UhDp4=
Subject key identifier:   F5:0C:73:2C:F7:B2:3E:79:58:AA:E5:C9:8F:24:60:B8:F4:8F:A2:39
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584B01AE7743D4DB610AE9573280
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/8a0d8ff9-0e83-3f7d-9da4-b8164674e7ec.roa
Signing time:             Thu 28 Aug 2025 12:55:02 +0000
ROA not before:           Thu 28 Aug 2025 12:55:02 +0000
ROA not after:            Wed 26 Nov 2025 13:55:02 +0000
asID:                     16504
IP address blocks:        156.70.184.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:ae:77:43:d4:db:61:0a:e9:57:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Aug 28 12:55:02 2025 GMT
            Not After : Nov 26 13:55:02 2025 GMT
        Subject: CN=6997bf10-6faa-4405-bb3e-b67dfa4793cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:06:96:91:af:79:cf:11:0e:77:5e:0c:f7:
                    1b:50:4d:b7:88:59:92:06:30:ab:78:f2:9c:cb:d0:
                    d0:9b:27:f1:b8:b4:e9:70:46:81:da:d2:67:e9:e2:
                    24:02:df:c9:ee:f3:b3:c7:6c:a3:4b:35:84:8a:9c:
                    f4:18:7c:c1:78:d1:67:cc:06:39:c0:cd:b4:d5:93:
                    79:1b:f6:f8:67:37:17:06:2a:88:fa:1f:54:49:8a:
                    84:9e:d0:60:16:f9:f1:0f:fa:57:d6:45:4e:0e:d0:
                    62:0e:3e:93:11:6a:e9:45:b4:01:47:c2:4b:19:8d:
                    58:bc:72:8f:19:22:28:31:fb:8c:8f:91:34:87:59:
                    52:ae:1c:63:da:cb:de:3d:5b:e5:4d:46:87:c1:e4:
                    c7:df:d9:68:03:e1:bb:1d:1e:cc:5c:94:52:d8:38:
                    8c:53:9a:64:8d:3f:4a:10:95:a9:c7:39:7c:97:ef:
                    1d:4b:24:26:aa:7d:b1:90:46:81:87:9e:c4:33:b9:
                    71:b4:1e:a7:e7:cf:43:a8:47:6c:a3:d3:f7:b0:89:
                    dc:6a:ce:7a:f9:92:a6:9b:bc:4d:a4:a4:04:a0:bb:
                    43:d0:15:1a:40:b8:a4:92:33:fb:2a:f9:a9:fc:c9:
                    86:0d:92:2f:5c:4d:ce:6f:82:a8:f9:a5:7d:d5:f1:
                    3d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0C:73:2C:F7:B2:3E:79:58:AA:E5:C9:8F:24:60:B8:F4:8F:A2:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/8a0d8ff9-0e83-3f7d-9da4-b8164674e7ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.70.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a4:7a:6d:fb:f1:f2:c8:62:6e:d6:8e:b9:f3:35:94:4e:d8:
         cf:d3:39:2e:5f:3f:c7:52:2d:1f:16:1e:a0:4a:f3:fb:c3:9c:
         32:3b:3f:0e:61:b6:74:88:80:cd:97:2b:97:93:7d:16:16:93:
         03:cf:4c:c8:98:66:f8:b8:c8:48:ec:16:de:12:dc:19:c1:b3:
         22:ca:0e:ef:23:ef:65:9d:65:c9:86:c6:fa:96:4d:4b:d7:63:
         27:ed:0e:07:de:67:35:79:14:de:74:2e:0b:bc:40:d5:12:3e:
         68:38:7f:ed:85:e4:6e:76:c5:8f:62:e8:3d:d7:af:b3:a0:e3:
         9f:c5:e7:82:e6:ec:5d:7d:81:32:10:fb:a9:3c:cf:68:31:29:
         70:ca:d2:95:cc:69:91:fd:5f:1e:7e:5d:3e:7c:58:77:23:9b:
         d3:36:96:e4:45:7e:fc:8c:79:89:05:56:03:eb:57:e5:6a:f4:
         b8:4b:5c:47:ff:c0:6f:89:44:ed:ba:19:85:b6:a9:e2:71:4c:
         81:73:41:d4:af:a7:ce:48:cd:51:2e:f6:9d:6a:88:25:32:6d:
         12:23:8f:c3:76:2f:1a:99:68:61:08:a6:62:32:bf:8b:0b:2e:
         a5:95:b6:ad:99:30:fe:0c:e3:c9:15:c1:87:ef:62:f4:a3:59:
         88:4b:66:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsBrndD1NthCulXMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw
YWVlMB4XDTI1MDgyODEyNTUwMloXDTI1MTEyNjEzNTUwMlowLzEtMCsGA1UEAxMk
Njk5N2JmMTAtNmZhYS00NDA1LWJiM2UtYjY3ZGZhNDc5M2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsQGlpGvec8RDndeDPcbUE23iFmSBjCrePKc
y9DQmyfxuLTpcEaB2tJn6eIkAt/J7vOzx2yjSzWEipz0GHzBeNFnzAY5wM201ZN5
G/b4ZzcXBiqI+h9USYqEntBgFvnxD/pX1kVODtBiDj6TEWrpRbQBR8JLGY1YvHKP
GSIoMfuMj5E0h1lSrhxj2svePVvlTUaHweTH39loA+G7HR7MXJRS2DiMU5pkjT9K
EJWpxzl8l+8dSyQmqn2xkEaBh57EM7lxtB6n589DqEdso9P3sIncas56+ZKmm7xN
pKQEoLtD0BUaQLikkjP7Kvmp/MmGDZIvXE3Ob4Ko+aV91fE9rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUMcyz3sj55WKrlyY8kYLj0j6I5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl
OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvOGEwZDhmZjktMGU4My0z
ZjdkLTlkYTQtYjgxNjQ2NzRlN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0
M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy
MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2
ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnEa4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACqkem378fLIYm7WjrnzNZRO2M/TOS5fP8dSLR8WHqBK8/vDnDI7Pw5h
tnSIgM2XK5eTfRYWkwPPTMiYZvi4yEjsFt4S3BnBsyLKDu8j72WdZcmGxvqWTUvX
YyftDgfeZzV5FN50Lgu8QNUSPmg4f+2F5G52xY9i6D3Xr7Og45/F54Lm7F19gTIQ
+6k8z2gxKXDK0pXMaZH9Xx5+XT58WHcjm9M2luRFfvyMeYkFVgPrV+Vq9LhLXEf/
wG+JRO26GYW2qeJxTIFzQdSvp85IzVEu9p1qiCUybRIjj8N2LxqZaGEIpmIyv4sL
LqWVtq2ZMP4M48kVwYfvYvSjWYhLZqs=
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:31:36 2025 by rpki-client