Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/b51dc5b9-c983-3e96-8672-c8d5ce13d82d.roa
File:                     b51dc5b9-c983-3e96-8672-c8d5ce13d82d.roa (raw, json)
Hash identifier:          W9ynTb4DotyMaskdbO5jqc+QMSgeYlvbAOHWgCvJgC8=
Subject key identifier:   1C:34:ED:14:9B:0E:5F:6F:5A:40:05:F0:A0:3D:26:CA:3D:C1:7C:C3
Certificate issuer:       /CN=ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0
Certificate serial:       010D0C9F4328584B719E87B4543F767B02294840
Authority key identifier: 52:7A:49:74:BA:82:82:68:ED:97:35:DC:BE:AB:72:D6:94:92:F6:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/b51dc5b9-c983-3e96-8672-c8d5ce13d82d.roa
Signing time:             Tue 07 Oct 2025 15:13:28 +0000
ROA not before:           Tue 07 Oct 2025 15:13:28 +0000
ROA not after:            Mon 05 Jan 2026 16:13:28 +0000
asID:                     46274
IP address blocks:        170.212.0.0/24 maxlen: 24
                          170.212.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:9e:87:b4:54:3f:76:7b:02:29:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0
        Validity
            Not Before: Oct  7 15:13:28 2025 GMT
            Not After : Jan  5 16:13:28 2026 GMT
        Subject: CN=960ffe41-4d6b-45e2-8a07-79f7ca1b9b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:42:2a:89:f0:99:28:8a:44:88:40:f0:3b:
                    18:79:b3:dc:f2:42:8e:36:9e:8f:96:f5:a2:ca:b1:
                    ca:43:a0:ef:9e:23:2c:82:c7:60:fb:54:71:0c:1b:
                    41:aa:d1:37:29:44:76:47:ec:24:75:f2:06:5b:b0:
                    4f:fe:8e:18:31:29:de:d9:4d:b6:b9:83:ba:0a:f1:
                    dd:a8:70:66:8d:2b:10:fc:60:21:3f:de:35:be:b1:
                    3e:22:eb:1d:b0:cc:26:36:ea:69:19:51:34:4b:22:
                    74:56:20:7d:8f:a7:b9:59:47:5f:3e:15:f0:9a:55:
                    4a:08:e3:01:56:83:cb:d8:08:e8:d2:b2:38:55:89:
                    c7:f2:ae:19:c4:c0:16:ba:d9:f5:de:e3:f3:4f:fa:
                    32:27:cb:eb:71:ec:82:6a:b9:d4:78:1c:2a:c6:7e:
                    8e:ee:44:4e:4b:76:09:a6:f0:47:96:dd:80:19:84:
                    d8:a1:d2:c9:f6:41:27:e5:35:54:90:1f:c4:58:59:
                    81:db:6b:3b:17:25:be:d2:8a:ff:cf:7f:f4:50:1e:
                    9f:bb:59:24:67:9d:df:5f:a1:e6:3c:06:c6:fe:60:
                    17:45:7f:52:73:1f:df:7e:0e:a4:63:3b:f4:cd:8a:
                    8f:fc:dd:c2:10:32:cc:0a:fe:9b:ba:f4:f9:97:56:
                    ac:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:34:ED:14:9B:0E:5F:6F:5A:40:05:F0:A0:3D:26:CA:3D:C1:7C:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/b51dc5b9-c983-3e96-8672-c8d5ce13d82d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.crl

            X509v3 Authority Key Identifier:
                keyid:52:7A:49:74:BA:82:82:68:ED:97:35:DC:BE:AB:72:D6:94:92:F6:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.212.0.0/24
                  170.212.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:65:bf:56:2f:43:21:87:4d:e9:7c:76:4f:10:42:49:59:df:
         0b:8c:4a:bc:14:22:f6:61:a1:2f:6a:32:a7:32:de:2a:5e:e9:
         03:44:8d:2b:94:a0:19:e7:24:6c:ea:8d:d9:9d:49:87:ff:22:
         35:09:f1:36:8d:6f:07:3d:75:0e:38:28:68:40:65:4b:c0:ff:
         50:75:34:45:6f:0a:5d:e1:e7:87:71:0b:0e:8f:c3:17:6a:b7:
         69:f9:73:39:4a:43:1a:eb:92:13:29:8a:24:30:49:6c:4d:5b:
         63:a7:0c:c0:bf:6b:3e:87:8e:5a:d4:65:4a:49:8d:83:6a:e8:
         a3:c0:ac:83:9e:3a:84:4d:93:e6:ea:be:03:65:f6:cb:33:1a:
         3e:a8:d4:6a:a0:5e:bd:30:5b:56:77:12:60:8b:64:55:a3:d3:
         30:cf:56:8e:b4:05:ff:c9:a8:8a:b2:6c:b3:35:d3:24:64:6b:
         92:9d:d8:6d:b8:a9:31:c1:97:b1:cd:94:22:d2:dc:02:db:01:
         9b:1d:a6:e6:46:fa:44:38:4d:c5:7b:cc:8f:25:d2:87:4b:a6:
         ed:fb:ea:4c:29:52:f6:83:2b:bb:a2:c9:7c:52:19:2b:82:1d:
         dd:88:5f:d1:ce:5d:b5:56:7b:e5:f7:b6:b0:08:49:c1:1a:4b:
         17:72:ef:03
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtxnoe0VD92ewIpSEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWE0YTUyZDYtNDZhNC00MmI1LWI5ZWEtZDQ0ZjViYTY4
ZGYwMB4XDTI1MTAwNzE1MTMyOFoXDTI2MDEwNTE2MTMyOFowLzEtMCsGA1UEAxMk
OTYwZmZlNDEtNGQ2Yi00NWUyLThhMDctNzlmN2NhMWI5YjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4BCKonwmSiKRIhA8DsYebPc8kKONp6PlvWi
yrHKQ6DvniMsgsdg+1RxDBtBqtE3KUR2R+wkdfIGW7BP/o4YMSne2U22uYO6CvHd
qHBmjSsQ/GAhP941vrE+IusdsMwmNuppGVE0SyJ0ViB9j6e5WUdfPhXwmlVKCOMB
VoPL2Ajo0rI4VYnH8q4ZxMAWutn13uPzT/oyJ8vrceyCarnUeBwqxn6O7kROS3YJ
pvBHlt2AGYTYodLJ9kEn5TVUkB/EWFmB22s7FyW+0or/z3/0UB6fu1kkZ53fX6Hm
PAbG/mAXRX9Scx/ffg6kYzv0zYqP/N3CEDLMCv6buvT5l1as+QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBw07RSbDl9vWkAF8KA9Jso9wXzDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lYTRh
NTJkNi00NmE0LTQyYjUtYjllYS1kNDRmNWJhNjhkZjAvYjUxZGM1YjktYzk4My0z
ZTk2LTg2NzItYzhkNWNlMTNkODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWE0YTUyZDYtNDZhNC00MmI1LWI5
ZWEtZDQ0ZjViYTY4ZGYwL2VhNGE1MmQ2LTQ2YTQtNDJiNS1iOWVhLWQ0NGY1YmE2
OGRmMC5jcmwwHwYDVR0jBBgwFoAUUnpJdLqCgmjtlzXcvqty1pSS9jQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9lYTRhNTJkNi00NmE0LTQyYjUtYjllYS1kNDRm
NWJhNjhkZjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAqtQAAwQA
qtQwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADVlv1YvQyGHTel8dk8QQklZ3wuMSrwUIvZhoS9qMqcy3ipe
6QNEjSuUoBnnJGzqjdmdSYf/IjUJ8TaNbwc9dQ44KGhAZUvA/1B1NEVvCl3h54dx
Cw6Pwxdqt2n5czlKQxrrkhMpiiQwSWxNW2OnDMC/az6HjlrUZUpJjYNq6KPArIOe
OoRNk+bqvgNl9sszGj6o1GqgXr0wW1Z3EmCLZFWj0zDPVo60Bf/JqIqybLM10yRk
a5Kd2G24qTHBl7HNlCLS3ALbAZsdpuZG+kQ4TcV7zI8l0odLpu376kwpUvaDK7ui
yXxSGSuCHd2IX9HOXbVWe+X3trAIScEaSxdy7wM=
-----END CERTIFICATE-----
Generated at Wed Oct 8 17:19:33 2025 by rpki-client