Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/78b98705-7ab7-340c-b066-b3bc2945da06.roa
File:                     78b98705-7ab7-340c-b066-b3bc2945da06.roa (raw, json)
Hash identifier:          NnzHu2XAqfbFbOoHqPse4Jvc/2Ph72ImUzhJ2VWDMQc=
Subject key identifier:   4E:25:C3:66:E2:FF:02:5C:FB:AB:59:11:87:69:A9:3D:C9:B5:D9:6C
Certificate issuer:       /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial:       010D0C9F4328584AF52128E40BCA92D0F9BEE480
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/78b98705-7ab7-340c-b066-b3bc2945da06.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        170.176.212.0/24 maxlen: 24
                          170.176.213.0/24 maxlen: 24
                          170.176.214.0/24 maxlen: 24
                          170.176.215.0/24 maxlen: 24
                          170.176.216.0/24 maxlen: 24
                          170.176.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:28:e4:0b:ca:92:d0:f9:be:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=2e239ada-3328-4965-9181-48f613c15143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:09:b8:f9:c5:23:d9:84:cd:7f:a3:87:54:db:
                    b2:bb:e0:24:ad:a0:3c:1e:1d:f0:0f:9e:98:c8:e0:
                    81:a7:ae:16:b7:c1:6c:15:d6:1f:a8:86:27:1b:5b:
                    bb:0d:8d:cc:5d:d8:98:b9:fe:16:2c:88:0f:45:6b:
                    8c:23:ab:e7:25:50:f8:2a:00:07:7c:be:87:e0:e9:
                    2e:db:07:23:83:f5:59:33:45:c5:04:51:2a:33:cf:
                    4a:b6:97:7b:de:bf:ff:f5:7d:86:66:fd:b4:bd:a5:
                    6b:ee:ea:dc:ca:4e:64:b1:12:11:e4:bb:58:52:16:
                    40:cf:65:fa:f9:57:b4:16:74:a9:ef:33:c2:bb:34:
                    20:a8:b7:53:37:c9:f4:28:95:ad:cf:a0:e0:df:22:
                    3b:d0:95:e5:55:3c:18:2b:a3:ab:fc:f9:5a:04:1b:
                    f1:4b:65:56:3c:fd:1d:bb:67:16:1f:43:b9:de:e2:
                    cb:b6:a1:14:7e:82:c3:1a:ca:7c:60:50:06:f9:71:
                    a0:7a:c9:13:c5:b5:e5:2c:e5:bd:a1:2b:9b:0f:3f:
                    36:3d:70:02:f7:60:b3:cd:93:8c:33:1f:15:df:b3:
                    8c:83:0a:53:2a:94:f3:1e:c4:87:c5:a7:f7:fa:95:
                    6e:05:79:4e:d8:c3:db:3e:0a:ca:fb:1e:88:0f:e3:
                    24:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:25:C3:66:E2:FF:02:5C:FB:AB:59:11:87:69:A9:3D:C9:B5:D9:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/78b98705-7ab7-340c-b066-b3bc2945da06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl

            X509v3 Authority Key Identifier:
                keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.212.0-170.176.217.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:3f:cc:ac:cc:01:fb:aa:8d:61:3f:93:7e:c4:5a:91:fb:53:
         0c:f3:0c:cd:c5:56:7f:2a:3e:dc:bb:06:e8:73:a2:81:9d:d8:
         f1:7e:5f:b4:e0:cf:fa:91:63:d7:a5:97:05:43:83:ae:7c:67:
         62:f4:a5:47:b9:3d:f0:ca:d8:02:b2:4c:70:06:0c:20:8c:b5:
         1f:47:c3:ac:3f:ad:bb:ed:f9:01:83:0a:6f:59:bd:37:51:f5:
         e1:9a:fa:21:94:8d:d2:6f:8a:a8:03:0a:c2:89:00:82:26:46:
         72:c6:de:23:a7:66:72:f2:13:7f:38:a8:28:f0:d6:f4:33:2f:
         17:84:1f:60:ee:7f:d2:ea:82:47:0e:59:10:0e:94:7f:d2:e4:
         b9:97:62:af:73:95:65:61:7b:12:6e:50:c6:18:19:b2:c3:b4:
         4e:e4:d3:67:22:5a:ed:c7:91:26:49:78:6c:83:da:72:a4:45:
         97:be:20:d0:80:fc:95:b0:58:c1:21:b8:af:97:52:dc:aa:7a:
         6d:de:22:25:ac:74:bc:9b:5a:6e:19:d2:dd:cc:40:a1:b6:ad:
         0a:bb:ca:04:72:09:c0:1e:07:31:7c:87:a2:cf:b7:60:01:b8:
         1b:39:36:a7:5b:77:5e:c9:5b:1b:b8:10:4f:d2:dd:1f:45:34:
         c9:24:15:ab
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEr1ISjkC8qS0Pm+5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjFhZGNiYjgtYjUwMC00NjBmLTkwY2ItYmNhMDUyNWFh
YmNiMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
MmUyMzlhZGEtMzMyOC00OTY1LTkxODEtNDhmNjEzYzE1MTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAm4+cUj2YTNf6OHVNuyu+AkraA8Hh3wD56Y
yOCBp64Wt8FsFdYfqIYnG1u7DY3MXdiYuf4WLIgPRWuMI6vnJVD4KgAHfL6H4Oku
2wcjg/VZM0XFBFEqM89Ktpd73r//9X2GZv20vaVr7urcyk5ksRIR5LtYUhZAz2X6
+Ve0FnSp7zPCuzQgqLdTN8n0KJWtz6Dg3yI70JXlVTwYK6Or/PlaBBvxS2VWPP0d
u2cWH0O53uLLtqEUfoLDGsp8YFAG+XGgeskTxbXlLOW9oSubDz82PXAC92CzzZOM
Mx8V37OMgwpTKpTzHsSHxaf3+pVuBXlO2MPbPgrK+x6ID+MkxQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFE4lw2bi/wJc+6tZEYdpqT3JtdlsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFk
Y2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2EwNTI1YWFiY2IvNzhiOTg3MDUtN2FiNy0z
NDBjLWIwNjYtYjNiYzI5NDVkYTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjFhZGNiYjgtYjUwMC00NjBmLTkw
Y2ItYmNhMDUyNWFhYmNiLzIxYWRjYmI4LWI1MDAtNDYwZi05MGNiLWJjYTA1MjVh
YWJjYi5jcmwwHwYDVR0jBBgwFoAUYisKHntT0uIra1r/HcGq7QoGaT0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFkY2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2Ew
NTI1YWFiY2IuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKqsNQD
BAGqsNgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAlD/MrMwB+6qNYT+TfsRakftTDPMMzcVWfyo+3LsG6HOi
gZ3Y8X5ftODP+pFj16WXBUODrnxnYvSlR7k98MrYArJMcAYMIIy1H0fDrD+tu+35
AYMKb1m9N1H14Zr6IZSN0m+KqAMKwokAgiZGcsbeI6dmcvITfzioKPDW9DMvF4Qf
YO5/0uqCRw5ZEA6Uf9LkuZdir3OVZWF7Em5QxhgZssO0TuTTZyJa7ceRJkl4bIPa
cqRFl74g0ID8lbBYwSG4r5dS3Kp6bd4iJax0vJtabhnS3cxAobatCrvKBHIJwB4H
MXyHos+3YAG4Gzk2p1t3XslbG7gQT9LdH0U0ySQVqw==
-----END CERTIFICATE-----
Generated at Wed Sep 3 19:36:09 2025 by rpki-client