Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/45eb56dc-6d37-3a59-9c2d-c76ca633df2d.roa
File:                     45eb56dc-6d37-3a59-9c2d-c76ca633df2d.roa (raw, json)
Hash identifier:          qvXkQSq1eBi0rMdelI5wmApSN4WdNhf1lueLw53gbbo=
Subject key identifier:   67:71:AA:A1:D6:88:9B:8A:1A:4A:C5:60:FF:B2:29:9C:F6:61:98:4D
Certificate issuer:       /CN=47ab474f-e86e-457c-8e4f-525e473f9e01
Certificate serial:       010D0C9F4328584ADFADF785C8185652BBE43720
Authority key identifier: 98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/45eb56dc-6d37-3a59-9c2d-c76ca633df2d.roa
Signing time:             Sat 16 Aug 2025 08:36:33 +0000
ROA not before:           Sat 16 Aug 2025 08:36:33 +0000
ROA not after:            Fri 14 Nov 2025 09:36:33 +0000
asID:                     33527
IP address blocks:        170.190.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:df:ad:f7:85:c8:18:56:52:bb:e4:37:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ab474f-e86e-457c-8e4f-525e473f9e01
        Validity
            Not Before: Aug 16 08:36:33 2025 GMT
            Not After : Nov 14 09:36:33 2025 GMT
        Subject: CN=e4ac7708-79f8-4213-b6da-3b0fc557c9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:eb:0f:ea:80:76:cb:db:17:26:e0:43:21:
                    85:21:b6:1c:8a:dc:da:84:f8:ca:72:ae:88:15:68:
                    dd:88:12:3a:ef:eb:3b:0f:c6:e9:9a:16:c9:bf:a0:
                    ce:67:51:d4:b8:72:45:81:73:01:c7:41:dd:bd:d7:
                    86:50:94:d0:e5:d6:13:d7:17:b5:ae:f0:ab:7b:9a:
                    12:c8:63:88:9c:00:30:5d:4c:0b:0d:f6:66:c1:13:
                    14:87:76:42:0c:8c:bb:22:12:1e:36:4f:c2:19:ea:
                    bb:e9:02:6c:3a:d3:fe:71:cb:bf:c4:05:79:52:d5:
                    0e:9b:0d:08:f0:35:6a:a4:c6:83:ac:cf:92:d0:9f:
                    0f:76:70:6d:2f:b9:f7:26:ef:a3:58:65:e7:c3:49:
                    72:18:16:9c:f1:76:6a:9d:68:cb:55:2c:4a:21:ea:
                    ae:8b:68:6d:f9:96:88:23:e2:35:0d:02:98:a3:ab:
                    c9:4b:0a:55:7b:4f:19:48:61:90:c7:a2:1c:58:40:
                    0a:43:88:ff:e4:5d:5a:24:3f:49:a6:d7:09:3c:3c:
                    d9:05:b3:1f:b6:90:13:35:21:7a:91:cd:5f:74:ee:
                    7b:d2:b6:38:67:6a:9a:38:fb:a6:92:45:2f:20:fa:
                    61:de:bb:41:8c:f8:02:84:c6:27:d1:c8:8a:37:74:
                    12:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:71:AA:A1:D6:88:9B:8A:1A:4A:C5:60:FF:B2:29:9C:F6:61:98:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/45eb56dc-6d37-3a59-9c2d-c76ca633df2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.crl

            X509v3 Authority Key Identifier:
                keyid:98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:c1:0c:cb:b4:6d:42:29:e2:36:cb:64:7f:3c:49:62:4c:3d:
         dc:8d:af:47:81:0a:2a:f4:12:b2:30:5e:da:a6:4e:d3:c8:05:
         ec:8a:14:70:97:81:fc:14:26:43:58:b5:68:c6:04:8c:59:5e:
         ca:2c:64:94:e3:62:89:9c:e5:8e:42:c8:c7:3b:5a:9f:d5:02:
         e3:f6:14:57:a1:29:6b:05:8b:9e:4f:58:16:8c:f9:a2:62:73:
         24:1d:6a:0a:7c:89:61:ce:63:31:b6:ab:95:db:1e:34:28:4c:
         47:00:43:b5:b5:08:d3:47:c6:ea:51:34:31:a2:68:9f:83:5d:
         5f:de:6a:70:35:c7:b0:86:05:87:22:da:05:57:ab:7b:04:54:
         c4:47:4a:8c:30:bd:12:bf:55:4a:df:42:05:6d:9b:32:4b:63:
         5e:98:f4:39:87:b6:a5:6c:79:fa:06:dc:cf:98:7e:27:e9:7d:
         3a:cb:38:73:e6:f8:a4:86:b4:05:8a:ec:2c:dd:85:62:47:8d:
         ae:e5:e8:db:84:60:d6:4b:5b:83:de:44:11:48:16:b4:db:46:
         93:94:18:84:9c:c8:ff:18:a3:1d:82:55:5b:23:ac:ff:e6:ff:
         bc:95:07:e2:3f:0e:39:24:be:1d:3d:cb:00:11:0b:6d:6b:18:
         f7:e5:4b:e8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErfrfeFyBhWUrvkNyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDdhYjQ3NGYtZTg2ZS00NTdjLThlNGYtNTI1ZTQ3M2Y5
ZTAxMB4XDTI1MDgxNjA4MzYzM1oXDTI1MTExNDA5MzYzM1owLzEtMCsGA1UEAxMk
ZTRhYzc3MDgtNzlmOC00MjEzLWI2ZGEtM2IwZmM1NTdjOWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwzrD+qAdsvbFybgQyGFIbYcitzahPjKcq6I
FWjdiBI67+s7D8bpmhbJv6DOZ1HUuHJFgXMBx0HdvdeGUJTQ5dYT1xe1rvCre5oS
yGOInAAwXUwLDfZmwRMUh3ZCDIy7IhIeNk/CGeq76QJsOtP+ccu/xAV5UtUOmw0I
8DVqpMaDrM+S0J8PdnBtL7n3Ju+jWGXnw0lyGBac8XZqnWjLVSxKIequi2ht+ZaI
I+I1DQKYo6vJSwpVe08ZSGGQx6IcWEAKQ4j/5F1aJD9JptcJPDzZBbMftpATNSF6
kc1fdO570rY4Z2qaOPumkkUvIPph3rtBjPgChMYn0ciKN3QSsQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGdxqqHWiJuKGkrFYP+yKZz2YZhNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80N2Fi
NDc0Zi1lODZlLTQ1N2MtOGU0Zi01MjVlNDczZjllMDEvNDVlYjU2ZGMtNmQzNy0z
YTU5LTljMmQtYzc2Y2E2MzNkZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDdhYjQ3NGYtZTg2ZS00NTdjLThl
NGYtNTI1ZTQ3M2Y5ZTAxLzQ3YWI0NzRmLWU4NmUtNDU3Yy04ZTRmLTUyNWU0NzNm
OWUwMS5jcmwwHwYDVR0jBBgwFoAUmLjiKxPCPsM43Lo6U1UYTTFS8DEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC80N2FiNDc0Zi1lODZlLTQ1N2MtOGU0Zi01MjVl
NDczZjllMDEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqr4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAt8EMy7RtQiniNstkfzxJYkw93I2vR4EKKvQSsjBe2qZO08gF7IoUcJeB
/BQmQ1i1aMYEjFleyixklONiiZzljkLIxztan9UC4/YUV6EpawWLnk9YFoz5omJz
JB1qCnyJYc5jMbarldseNChMRwBDtbUI00fG6lE0MaJon4NdX95qcDXHsIYFhyLa
BVerewRUxEdKjDC9Er9VSt9CBW2bMktjXpj0OYe2pWx5+gbcz5h+J+l9Oss4c+b4
pIa0BYrsLN2FYkeNruXo24Rg1ktbg95EEUgWtNtGk5QYhJzI/xijHYJVWyOs/+b/
vJUH4j8OOSS+HT3LABELbWsY9+VL6A==
-----END CERTIFICATE-----
Generated at Wed Aug 20 03:34:01 2025 by rpki-client