Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2105b82-d5d4-318a-be9c-cb5fe58c7813.roa
File:                     e2105b82-d5d4-318a-be9c-cb5fe58c7813.roa (raw, json)
Hash identifier:          onnBkL4weiycpP25sVmycbZI2Ed4M3QcDhE9EjlqlII=
Subject key identifier:   DD:29:AE:51:25:1D:F9:B5:2A:62:7F:66:6B:19:2D:89:EF:E2:C9:86
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849F7152E99C92492A3168D3600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2105b82-d5d4-318a-be9c-cb5fe58c7813.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     16625
IP address blocks:        184.26.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:2e:99:c9:24:92:a3:16:8d:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=34ea388f-e492-4580-b046-3fbe550014a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:87:d3:ad:b3:4c:92:e1:7e:7b:34:f2:22:c9:
                    e9:22:4f:b0:f2:6b:66:a7:d3:0a:14:39:94:85:a5:
                    81:fc:81:44:aa:df:c3:4d:58:18:03:9e:3a:de:ab:
                    05:7d:62:62:cf:56:d3:ba:c8:2b:67:13:4a:bf:28:
                    7b:73:3a:5b:18:7d:86:8f:af:d6:41:65:0a:16:65:
                    06:ed:f9:e3:a7:be:29:b3:cf:80:80:14:7b:d6:df:
                    c9:43:93:01:9f:6b:d7:61:76:93:bf:2a:32:5d:f8:
                    e4:66:6a:18:47:e0:c1:a5:c1:c5:77:1a:99:d2:44:
                    9f:b2:35:8f:0b:c5:f6:6a:65:a1:7d:c3:2f:17:93:
                    c3:b9:7f:33:1f:4a:e7:ba:b6:3e:84:39:99:a8:0c:
                    d1:dd:89:ac:2f:5e:67:4c:6b:ea:fd:91:2e:22:da:
                    fe:78:42:52:56:26:2e:1b:f9:dd:05:05:85:d9:f9:
                    bf:2b:30:f3:ae:ed:e6:ab:42:53:04:0b:19:57:6c:
                    b7:e5:85:7d:fb:69:d9:18:d6:ed:f0:47:3e:49:2b:
                    12:e1:c6:fe:7e:c9:e4:ac:fc:fb:28:3f:e9:49:e0:
                    d0:84:4b:10:e7:14:b4:85:c1:7b:65:bf:dc:31:75:
                    63:aa:5b:a6:7a:95:15:9f:65:22:64:da:de:59:55:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:29:AE:51:25:1D:F9:B5:2A:62:7F:66:6B:19:2D:89:EF:E2:C9:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2105b82-d5d4-318a-be9c-cb5fe58c7813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.26.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:98:94:b5:bd:53:03:31:02:0b:ca:7e:f8:37:8e:ed:3d:c5:
         94:84:5f:ca:46:9d:93:fe:3c:92:29:33:14:39:b2:31:a5:ae:
         a0:26:bd:71:ae:4c:33:1e:54:07:e3:c7:d5:9c:44:e6:a0:a8:
         9f:60:08:0d:b6:23:21:cc:31:e5:11:af:43:cc:32:81:fc:bc:
         e6:82:22:9d:88:cb:96:73:70:6e:fc:cb:8b:a2:90:89:68:8d:
         2d:75:68:ef:f9:03:16:8a:5f:bf:f7:1b:78:d8:90:5c:81:4b:
         2a:6c:87:b5:19:fd:da:04:35:29:7b:2c:18:58:dc:5c:25:a7:
         50:f5:e3:90:bb:13:9f:1a:52:c7:a2:ef:a6:7d:5d:07:f9:8d:
         76:63:3c:0e:3d:30:b9:87:32:b3:96:29:75:f2:e5:be:3c:b8:
         6b:fe:96:e6:00:c8:06:14:94:d2:17:ae:42:a7:60:8c:3f:08:
         e6:85:82:04:fd:41:d7:a9:c5:92:66:7c:67:56:fc:79:58:1e:
         b1:4c:5e:8d:65:95:9a:f6:36:9d:9e:ee:28:1a:af:29:f2:ef:
         d4:20:67:47:46:d6:b4:ee:e9:92:79:0c:4b:2d:e7:34:0d:0f:
         e4:65:59:e2:98:40:ef:52:d8:9a:f2:be:0b:62:38:ec:ae:c6:
         cd:d7:ef:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FS6ZySSSoxaNNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
MzRlYTM4OGYtZTQ5Mi00NTgwLWIwNDYtM2ZiZTU1MDAxNGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIfTrbNMkuF+ezTyIsnpIk+w8mtmp9MKFDmU
haWB/IFEqt/DTVgYA5463qsFfWJiz1bTusgrZxNKvyh7czpbGH2Gj6/WQWUKFmUG
7fnjp74ps8+AgBR71t/JQ5MBn2vXYXaTvyoyXfjkZmoYR+DBpcHFdxqZ0kSfsjWP
C8X2amWhfcMvF5PDuX8zH0rnurY+hDmZqAzR3YmsL15nTGvq/ZEuItr+eEJSViYu
G/ndBQWF2fm/KzDzru3mq0JTBAsZV2y35YV9+2nZGNbt8Ec+SSsS4cb+fsnkrPz7
KD/pSeDQhEsQ5xS0hcF7Zb/cMXVjqlumepUVn2UiZNreWVX0xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN0prlElHfm1KmJ/ZmsZLYnv4smGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTIxMDViODItZDVkNC0z
MThhLWJlOWMtY2I1ZmU1OGM3ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBqqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmYlLW9UwMxAgvKfvg3ju09xZSEX8pGnZP+PJIpMxQ5sjGlrqAmvXGu
TDMeVAfjx9WcROagqJ9gCA22IyHMMeURr0PMMoH8vOaCIp2Iy5ZzcG78y4uikIlo
jS11aO/5AxaKX7/3G3jYkFyBSypsh7UZ/doENSl7LBhY3Fwlp1D145C7E58aUsei
76Z9XQf5jXZjPA49MLmHMrOWKXXy5b48uGv+luYAyAYUlNIXrkKnYIw/COaFggT9
QdepxZJmfGdW/HlYHrFMXo1llZr2Np2e7igaryny79QgZ0dG1rTu6ZJ5DEst5zQN
D+RlWeKYQO9S2JryvgtiOOyuxs3X71E=
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:03:09 2025 by rpki-client