Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/800deae8-5c64-37d8-a9ba-c56619c11eb6.roa
File:                     800deae8-5c64-37d8-a9ba-c56619c11eb6.roa (raw, json)
Hash identifier:          Bh+iCOcSi8fqqjpgrqn0VBERRxnn/aXQKo+zennGG5Y=
Subject key identifier:   4B:05:BF:0E:72:E1:3B:8D:12:18:02:CD:C3:21:AA:11:98:9E:62:7F
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F4328584A6F207E23861D713A55A9EF00
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/800deae8-5c64-37d8-a9ba-c56619c11eb6.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     8075
IP address blocks:        192.80.246.0/24 maxlen: 24
                          192.80.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:7e:23:86:1d:71:3a:55:a9:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=1fce044c-66be-4786-b979-dcc732be2623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:7f:7a:39:d3:60:75:58:8c:a6:12:6c:e7:
                    73:ca:f4:3c:4b:05:34:4f:8e:6b:68:09:2f:b1:3b:
                    dc:ce:86:ba:eb:cf:b3:0d:7b:d2:e6:33:4c:c6:93:
                    a3:df:84:7a:7f:81:3d:dd:dd:cd:bd:3d:8b:bf:c8:
                    a8:f6:c1:61:5e:e0:b0:b2:07:71:5c:ca:20:0c:49:
                    d7:22:cc:08:08:b8:98:ef:1e:8e:d6:54:09:f6:86:
                    d9:70:ae:c4:15:b5:da:a4:70:4e:ee:4e:59:be:34:
                    38:22:d6:54:51:b5:f6:3f:dc:ad:cf:f0:51:12:1c:
                    56:c8:44:64:fb:c9:9f:26:80:22:f9:05:ba:41:7b:
                    a8:19:b8:f5:ae:58:7d:dc:08:cf:53:bf:22:82:5b:
                    3c:3e:2c:f9:3e:5b:6e:82:ac:1b:30:a9:2c:fd:8d:
                    00:84:22:5d:ed:b4:44:44:dc:e2:e1:61:36:8c:bc:
                    ec:a4:97:1b:b7:1e:15:43:c9:86:34:3d:ca:62:64:
                    ab:40:26:7e:96:35:1b:01:63:ee:a0:23:5d:4e:c7:
                    f7:57:3d:19:b9:82:95:7a:4e:7b:ab:06:ec:fd:0e:
                    cc:00:c4:51:fa:6e:65:ca:c9:54:ad:c9:77:2a:21:
                    62:4d:19:6a:6c:89:ec:f5:56:5c:30:c7:ec:6e:e3:
                    a8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:05:BF:0E:72:E1:3B:8D:12:18:02:CD:C3:21:AA:11:98:9E:62:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/800deae8-5c64-37d8-a9ba-c56619c11eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c6:f5:54:72:dd:2c:39:26:c9:a1:a4:97:4c:87:18:8e:95:
         54:59:26:cb:e1:ce:0e:7b:10:56:ef:01:96:c5:74:af:50:e7:
         6d:6c:20:1d:28:66:64:fc:84:c4:4d:7f:d6:25:ac:62:18:db:
         20:01:00:a3:99:a8:51:24:c2:db:7e:c4:60:9f:96:73:ab:31:
         37:b0:a1:07:d4:49:2a:b1:db:e0:79:84:7d:56:48:7a:39:d5:
         03:62:78:86:29:a3:a0:3a:58:75:79:2d:6c:3e:13:1a:4b:54:
         e3:a3:98:76:cb:96:96:33:d7:d4:a7:ca:f1:11:dd:04:6d:d5:
         17:e4:92:81:15:3b:6e:98:2c:5a:9c:d0:a4:cc:1b:08:2a:cf:
         1d:85:98:5c:c3:4d:cb:9b:1a:ec:da:f3:a6:6b:12:b4:13:d2:
         88:dd:5d:f8:c8:5c:aa:96:cb:3c:7b:8c:b3:73:7b:fb:9d:56:
         2d:9e:d1:bb:94:38:36:1f:77:47:37:0e:55:aa:a3:52:b6:9d:
         7e:b5:2d:7f:1d:5f:42:14:84:de:73:90:85:8b:d8:83:05:47:
         1a:7d:87:2e:1c:19:8e:ad:1c:f5:c1:c8:e5:d9:bf:24:ec:d0:
         95:8b:43:16:dd:53:0e:08:43:f4:e2:96:51:79:6a:c2:b1:9c:
         fd:b8:72:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIH4jhh1xOlWp7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzQ3Y2UtOWE0ZC00NzBjLWIzYTEtZGZjMzZmOWM3
OGRkMB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk
MWZjZTA0NGMtNjZiZS00Nzg2LWI5NzktZGNjNzMyYmUyNjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscZ/ejnTYHVYjKYSbOdzyvQ8SwU0T45raAkv
sTvczoa668+zDXvS5jNMxpOj34R6f4E93d3NvT2Lv8io9sFhXuCwsgdxXMogDEnX
IswICLiY7x6O1lQJ9obZcK7EFbXapHBO7k5ZvjQ4ItZUUbX2P9ytz/BREhxWyERk
+8mfJoAi+QW6QXuoGbj1rlh93AjPU78igls8Piz5PltugqwbMKks/Y0AhCJd7bRE
RNzi4WE2jLzspJcbtx4VQ8mGND3KYmSrQCZ+ljUbAWPuoCNdTsf3Vz0ZuYKVek57
qwbs/Q7MAMRR+m5lyslUrcl3KiFiTRlqbIns9VZcMMfsbuOo2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEsFvw5y4TuNEhgCzcMhqhGYnmJ/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3
NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMzNmY5Yzc4ZGQvODAwZGVhZTgtNWM2NC0z
N2Q4LWE5YmEtYzU2NjE5YzExZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JhNzQ3Y2UtOWE0ZC00NzBjLWIz
YTEtZGZjMzZmOWM3OGRkLzdiYTc0N2NlLTlhNGQtNDcwYy1iM2ExLWRmYzM2Zjlj
NzhkZC5jcmwwHwYDVR0jBBgwFoAU2cENbez66cRVgdY1AR7AbdZwSqowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMz
NmY5Yzc4ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFD2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAALG9VRy3Sw5JsmhpJdMhxiOlVRZJsvhzg57EFbvAZbFdK9Q521sIB0o
ZmT8hMRNf9YlrGIY2yABAKOZqFEkwtt+xGCflnOrMTewoQfUSSqx2+B5hH1WSHo5
1QNieIYpo6A6WHV5LWw+ExpLVOOjmHbLlpYz19SnyvER3QRt1RfkkoEVO26YLFqc
0KTMGwgqzx2FmFzDTcubGuza86ZrErQT0ojdXfjIXKqWyzx7jLNze/udVi2e0buU
ODYfd0c3DlWqo1K2nX61LX8dX0IUhN5zkIWL2IMFRxp9hy4cGY6tHPXByOXZvyTs
0JWLQxbdUw4IQ/TillF5asKxnP24csU=
-----END CERTIFICATE-----
Generated at Sun Jul 20 09:21:09 2025 by rpki-client