Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd6f146-bf69-3d16-ae33-1ea811429db0.roa
File:                     6cd6f146-bf69-3d16-ae33-1ea811429db0.roa (raw, json)
Hash identifier:          faRsfSXxGQ1Qisi8MAPFw0cqlXM/cv5RN3mM+sk4zb0=
Subject key identifier:   0F:E8:F1:9A:A6:72:4F:BB:42:CD:91:7F:7C:64:93:33:24:E0:04:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF089CA057BDC272D8E8470
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd6f146-bf69-3d16-ae33-1ea811429db0.roa
Signing time:             Thu 24 Jul 2025 12:38:57 +0000
ROA not before:           Thu 24 Jul 2025 12:38:57 +0000
ROA not after:            Wed 22 Oct 2025 12:38:57 +0000
asID:                     396677
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:89:ca:05:7b:dc:27:2d:8e:84:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:57 2025 GMT
            Not After : Oct 22 12:38:57 2025 GMT
        Subject: CN=90183b47-dccb-4514-9b17-2751c9ecd8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:cc:0b:7a:21:24:89:7b:d5:06:04:2e:7e:
                    a6:47:40:fe:ea:81:34:a6:bf:3f:55:f2:93:de:83:
                    d5:ea:2c:1b:c0:38:82:3e:ab:37:00:3f:7e:d7:f6:
                    8b:93:f1:fc:44:49:ec:c0:63:15:be:03:5e:c1:1f:
                    33:60:36:6a:45:7e:44:db:52:94:4a:0f:2b:c9:70:
                    54:81:96:4c:d9:d8:5b:a5:b4:e8:13:e2:3f:35:15:
                    aa:06:cd:d5:4d:d5:25:35:85:63:be:80:46:5c:cc:
                    a8:47:b9:e4:22:9c:8b:98:09:15:94:fe:8a:99:0c:
                    fb:08:f8:fb:e9:43:8c:e8:4a:8e:06:f7:fe:dd:45:
                    32:a4:4a:a0:53:b0:90:9d:3d:aa:15:37:76:f1:56:
                    77:0b:c1:32:24:d6:0d:63:9f:28:4d:04:04:9d:f5:
                    82:94:39:41:bd:c4:21:0b:fa:dc:6b:18:7c:7d:8b:
                    f7:c3:5e:2f:07:c2:fe:a9:3d:ed:32:8f:68:fe:b7:
                    61:cc:4e:4d:f3:3d:9c:6c:4c:1e:46:6e:41:7c:d7:
                    24:1f:a5:7a:27:20:9e:99:6a:4f:c4:a4:1e:7e:53:
                    ca:7a:19:04:08:bf:cf:be:69:3a:03:02:ca:86:2c:
                    fa:df:bb:3c:d0:1f:f6:75:b7:05:ff:3d:46:8f:2b:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E8:F1:9A:A6:72:4F:BB:42:CD:91:7F:7C:64:93:33:24:E0:04:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd6f146-bf69-3d16-ae33-1ea811429db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:30:ac:39:05:4e:f7:aa:38:68:ca:8c:62:ae:a9:34:cb:3e:
         fd:ad:da:9d:65:11:66:9e:97:3f:d8:c0:4d:61:39:a0:9b:d3:
         c4:0e:7a:b0:8f:77:d1:7e:20:a5:d9:82:45:6a:eb:a4:2f:e5:
         b5:3b:a5:19:86:dc:30:05:4a:68:ed:0c:99:eb:a7:a9:7f:bf:
         e1:87:5d:39:1b:7a:cc:85:ce:3b:ba:fb:fa:a7:91:d6:18:76:
         8e:39:0e:99:bb:cf:e9:46:35:d9:68:88:10:2d:29:2c:bf:96:
         18:b7:89:b6:f6:ef:02:24:23:68:b3:22:71:78:f5:48:b8:a5:
         14:0e:24:66:7f:b9:59:22:1d:ec:13:8c:b7:f9:f4:d9:4f:6c:
         3b:b8:61:b4:82:49:25:a2:11:e5:ac:24:40:f7:57:a4:22:15:
         d5:01:8f:6b:09:f8:32:e7:b1:62:21:b2:74:f3:fc:91:33:8e:
         cc:34:c2:eb:08:d7:fa:ab:8a:5f:89:23:f7:25:da:37:e2:88:
         95:fd:f4:b3:4f:86:11:12:6b:76:47:89:ea:af:f5:e2:66:71:
         4b:f5:6b:29:bc:3f:10:3e:f9:74:d5:54:cc:ca:5e:9f:02:be:
         71:0c:a0:76:3c:68:55:a0:21:75:5f:60:b3:c7:12:07:88:3a:
         17:30:5d:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8InKBXvcJy2OhHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyNDEyMzg1N1oXDTI1MTAyMjEyMzg1N1owLzEtMCsGA1UEAxMk
OTAxODNiNDctZGNjYi00NTE0LTliMTctMjc1MWM5ZWNkOGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JXMC3ohJIl71QYELn6mR0D+6oE0pr8/VfKT
3oPV6iwbwDiCPqs3AD9+1/aLk/H8REnswGMVvgNewR8zYDZqRX5E21KUSg8ryXBU
gZZM2dhbpbToE+I/NRWqBs3VTdUlNYVjvoBGXMyoR7nkIpyLmAkVlP6KmQz7CPj7
6UOM6EqOBvf+3UUypEqgU7CQnT2qFTd28VZ3C8EyJNYNY58oTQQEnfWClDlBvcQh
C/rcaxh8fYv3w14vB8L+qT3tMo9o/rdhzE5N8z2cbEweRm5BfNckH6V6JyCemWpP
xKQeflPKehkECL/Pvmk6AwLKhiz637s80B/2dbcF/z1GjytylQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/o8Zqmck+7Qs2Rf3xkkzMk4ASzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmNkNmYxNDYtYmY2OS0z
ZDE2LWFlMzMtMWVhODExNDI5ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMwrDkFTveqOGjKjGKuqTTLPv2t2p1lEWaelz/YwE1hOaCb08QOerCP
d9F+IKXZgkVq66Qv5bU7pRmG3DAFSmjtDJnrp6l/v+GHXTkbesyFzju6+/qnkdYY
do45Dpm7z+lGNdloiBAtKSy/lhi3ibb27wIkI2izInF49Ui4pRQOJGZ/uVkiHewT
jLf59NlPbDu4YbSCSSWiEeWsJED3V6QiFdUBj2sJ+DLnsWIhsnTz/JEzjsw0wusI
1/qril+JI/cl2jfiiJX99LNPhhESa3ZHieqv9eJmcUv1aym8PxA++XTVVMzKXp8C
vnEMoHY8aFWgIXVfYLPHEgeIOhcwXUc=
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:34 2025 by rpki-client