Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f9591b0-4083-39f8-8942-3519df96e89a.roa
File:                     1f9591b0-4083-39f8-8942-3519df96e89a.roa (raw, json)
Hash identifier:          l8eRlTWbKVOxQaQRT+foUzfaTXBOPIbGluXRAmqzowU=
Subject key identifier:   C6:86:70:94:7E:FF:4A:5A:B4:61:E6:EF:92:20:0F:A8:7D:98:74:6C
Certificate issuer:       /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial:       010D0C9F4328584A6290D37144766522809C1060
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f9591b0-4083-39f8-8942-3519df96e89a.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     30058
IP address blocks:        217.149.96.0/22 maxlen: 24
                          2602:fb1b:60::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d3:71:44:76:65:22:80:9c:10:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=d406d7c1-517e-47a5-a99d-e5d30ebf5cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:47:ee:ad:36:9a:9f:86:8e:c6:e4:1b:82:8c:
                    ef:90:fc:1d:68:08:df:a4:be:90:41:06:a7:d2:dc:
                    d0:26:36:31:0e:99:c6:7d:ce:74:75:84:1f:02:11:
                    74:fc:71:ba:2e:e1:c8:ce:e6:08:b7:59:92:63:f4:
                    ba:5d:5a:8e:5f:0a:e8:de:b6:f8:cb:70:b6:9d:24:
                    1a:ec:ee:43:8a:a5:53:d3:19:18:a3:e0:07:85:6d:
                    9f:6d:50:24:c7:30:39:70:e9:d8:90:5e:11:f5:8e:
                    c1:2f:52:10:88:f8:0d:7c:78:d9:b1:7b:34:10:e6:
                    08:25:b2:0e:2e:ae:bd:18:68:7f:bb:18:70:7c:cb:
                    b8:8a:3a:0c:47:27:4c:79:fc:07:fb:76:f8:e2:3f:
                    46:9a:f1:c3:4d:f7:42:36:ec:b5:ca:20:3a:80:47:
                    3b:5a:12:2d:ac:65:d9:09:03:ce:e5:aa:e5:db:bb:
                    0e:16:1c:df:ad:eb:b1:c3:e3:eb:9c:e8:20:19:13:
                    c5:98:e2:f1:85:51:f9:42:61:a3:db:e1:ec:ae:6d:
                    58:bb:0a:00:6d:56:a9:1e:53:74:ea:23:9d:0b:cd:
                    0a:d5:b4:07:58:18:03:13:9b:f2:42:c7:bf:d8:02:
                    98:dd:ca:73:eb:de:35:66:aa:9c:6e:a7:39:f5:59:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:86:70:94:7E:FF:4A:5A:B4:61:E6:EF:92:20:0F:A8:7D:98:74:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f9591b0-4083-39f8-8942-3519df96e89a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.149.96.0/22
                IPv6:
                  2602:fb1b:60::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:66:a2:25:45:a9:44:e3:f7:bb:40:57:21:a8:bc:bc:a0:c4:
         e0:60:a3:a8:ab:b2:e9:31:ee:4a:14:ea:57:8f:77:b0:5d:e7:
         36:8b:67:48:a6:03:09:ca:c2:cc:ed:16:dc:41:b3:43:e6:04:
         cf:c6:0f:ab:6c:67:38:c9:38:df:f0:67:61:98:a3:fb:ed:99:
         12:40:cc:7e:64:42:89:9a:66:ba:52:96:f9:23:a8:ea:bf:8b:
         ca:08:b6:e3:02:3c:9b:76:a2:af:1a:1e:8f:93:0c:74:79:fa:
         04:e6:60:80:b2:e6:e1:45:1d:ed:79:34:4c:0c:fc:73:f0:8d:
         6d:ed:3a:9b:52:1b:b9:f1:b9:14:b3:37:7f:6b:37:d3:c5:56:
         9e:19:b2:2b:e7:63:79:8a:0d:04:44:21:a0:d8:b9:80:58:2d:
         43:eb:5f:b5:ad:e2:5a:fe:5d:22:67:4f:22:dc:f1:cd:4a:d5:
         9f:93:37:fd:40:a2:2d:91:66:57:f0:4d:ce:15:f5:ba:2f:88:
         94:a3:cc:85:bc:b4:e7:3b:de:5e:2a:4b:80:bb:27:19:07:9d:
         be:c5:97:60:cb:76:20:ba:54:63:48:cf:18:21:4e:81:4a:bd:
         df:64:6b:b6:3a:d4:5c:d1:c1:40:2d:e6:85:60:e4:1c:7c:18:
         4b:1e:78:b9
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEpikNNxRHZlIoCcEGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODExYmQyYWMtYzUzZC00MGE2LWJmYTQtMjc1YzIyNDFh
ZjYzMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
ZDQwNmQ3YzEtNTE3ZS00N2E1LWE5OWQtZTVkMzBlYmY1Y2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUfurTaan4aOxuQbgozvkPwdaAjfpL6QQQan
0tzQJjYxDpnGfc50dYQfAhF0/HG6LuHIzuYIt1mSY/S6XVqOXwro3rb4y3C2nSQa
7O5DiqVT0xkYo+AHhW2fbVAkxzA5cOnYkF4R9Y7BL1IQiPgNfHjZsXs0EOYIJbIO
Lq69GGh/uxhwfMu4ijoMRydMefwH+3b44j9GmvHDTfdCNuy1yiA6gEc7WhItrGXZ
CQPO5arl27sOFhzfreuxw+PrnOggGRPFmOLxhVH5QmGj2+Hsrm1YuwoAbVapHlN0
6iOdC80K1bQHWBgDE5vyQse/2AKY3cpz6941Zqqcbqc59VmegQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFMaGcJR+/0patGHm75IgD6h9mHRsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFi
ZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0MWFmNjMvMWY5NTkxYjAtNDA4My0z
OWY4LTg5NDItMzUxOWRmOTZlODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODExYmQyYWMtYzUzZC00MGE2LWJm
YTQtMjc1YzIyNDFhZjYzLzgxMWJkMmFjLWM1M2QtNDBhNi1iZmE0LTI3NWMyMjQx
YWY2My5jcmwwHwYDVR0jBBgwFoAUL6VyaMN3iHmP21Xe0bvHxqiGXYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVj
MjI0MWFmNjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQC2ZVgMA8E
AgACMAkDBwImAvsbAGAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATmaiJUWpROP3u0BXIai8vKDE4GCjqKuy
6THuShTqV493sF3nNotnSKYDCcrCzO0W3EGzQ+YEz8YPq2xnOMk43/BnYZij++2Z
EkDMfmRCiZpmulKW+SOo6r+Lygi24wI8m3airxoej5MMdHn6BOZggLLm4UUd7Xk0
TAz8c/CNbe06m1IbufG5FLM3f2s308VWnhmyK+djeYoNBEQhoNi5gFgtQ+tfta3i
Wv5dImdPItzxzUrVn5M3/UCiLZFmV/BNzhX1ui+IlKPMhby05zveXipLgLsnGQed
vsWXYMt2ILpUY0jPGCFOgUq932RrtjrUXNHBQC3mhWDkHHwYSx54uQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:24:38 2025 by rpki-client