Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/dbdd592a-e857-3eb7-8381-53a1a20bad18.roa
File:                     dbdd592a-e857-3eb7-8381-53a1a20bad18.roa (raw, json)
Hash identifier:          DINsa/dMgyuWC7JucReJmdmqEkGduxrtVxUCWO8wPYU=
Subject key identifier:   49:9E:6C:8B:F2:FC:49:DA:E8:C7:9B:14:A9:B4:9E:75:36:BD:EB:9C
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584A7FE09633B6C627C2BA114300
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/dbdd592a-e857-3eb7-8381-53a1a20bad18.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     931
IP address blocks:        167.94.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:96:33:b6:c6:27:c2:ba:11:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=9ab46205-bec7-4c06-b540-bdd1c3d5163b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:fc:40:7f:82:a7:4d:01:97:9d:3d:a5:34:
                    f4:90:3d:2a:0b:6c:c7:24:5e:a6:76:bd:26:ea:54:
                    bf:27:5f:29:75:c7:e5:bf:a3:b7:39:73:40:86:ce:
                    11:02:38:57:85:4e:f2:d2:f4:f6:69:f7:97:78:56:
                    5b:5a:ab:57:da:51:fa:07:7f:c8:e4:a7:74:a1:e0:
                    a4:40:15:dd:5e:41:bc:f6:3a:ff:ad:13:95:0a:06:
                    29:c0:44:e5:79:55:b6:c1:c0:41:18:06:0b:35:88:
                    04:67:43:3e:ca:1a:64:3b:75:ef:6b:c0:b3:7a:15:
                    78:54:ee:31:56:3b:88:62:ad:87:ae:d1:e6:bf:94:
                    08:80:63:a2:9c:fa:8f:c8:8e:ec:41:ae:71:e1:35:
                    78:3e:d8:69:bd:72:c4:e7:8c:fd:43:59:56:7b:ac:
                    4e:7c:52:04:b6:0f:dd:cb:0c:15:a2:d1:eb:37:21:
                    9e:72:77:ef:12:85:36:96:21:cf:d6:02:eb:09:2d:
                    61:a5:47:bc:b9:f4:d7:dd:88:e9:9c:80:db:83:df:
                    f3:c3:6a:86:49:a2:fc:b4:7a:55:3b:3d:8d:91:49:
                    b5:19:a6:7e:9d:a3:d5:85:ea:68:3f:82:cf:28:1d:
                    e0:01:43:f9:37:70:a3:45:c9:93:95:f3:64:38:f0:
                    c6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9E:6C:8B:F2:FC:49:DA:E8:C7:9B:14:A9:B4:9E:75:36:BD:EB:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/dbdd592a-e857-3eb7-8381-53a1a20bad18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:93:7f:72:63:bd:f5:65:82:e9:f5:c2:05:e4:d8:ab:c6:55:
         3d:12:47:eb:b4:ff:33:2f:d1:13:4d:61:a8:0f:df:41:aa:80:
         ab:aa:de:6d:7b:d8:23:15:e5:10:b5:a8:b6:5c:e2:fa:7b:6d:
         1a:fd:56:a9:4a:be:ef:36:e4:74:90:0e:64:09:02:82:b8:ea:
         9b:1d:6f:41:be:ce:86:54:82:c8:6a:e1:af:e3:78:ba:26:cf:
         ba:31:3f:23:b9:fd:9e:86:e0:e1:9f:43:cc:ef:14:6f:63:a8:
         80:a2:eb:92:0c:54:6d:e3:79:03:80:75:3c:72:c5:e6:71:db:
         9b:92:d0:84:9b:a1:eb:49:7f:7e:13:20:94:34:5e:3e:52:15:
         f8:fb:b5:57:e9:c0:d7:0c:12:82:a1:90:72:d2:5d:9c:cd:b9:
         f6:dd:24:1e:9b:4f:0c:26:c7:9e:70:ef:5a:56:0e:9a:0f:5c:
         81:ae:42:7e:f5:2b:48:3a:38:49:d4:cd:c8:40:82:da:9a:49:
         2c:a6:ff:77:72:c4:cd:1f:5b:54:04:ce:ab:91:6e:8a:01:69:
         90:70:4e:5c:6e:53:5d:80:dd:60:88:20:d2:4d:5a:48:7f:b0:
         b6:cf:61:dc:d5:51:1c:83:8b:07:25:38:7c:9e:40:31:4e:cd:
         6b:fc:e7:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JYztsYnwroRQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0
YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk
OWFiNDYyMDUtYmVjNy00YzA2LWI1NDAtYmRkMWMzZDUxNjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkP8QH+Cp00Bl509pTT0kD0qC2zHJF6mdr0m
6lS/J18pdcflv6O3OXNAhs4RAjhXhU7y0vT2afeXeFZbWqtX2lH6B3/I5Kd0oeCk
QBXdXkG89jr/rROVCgYpwETleVW2wcBBGAYLNYgEZ0M+yhpkO3Xva8CzehV4VO4x
VjuIYq2HrtHmv5QIgGOinPqPyI7sQa5x4TV4PthpvXLE54z9Q1lWe6xOfFIEtg/d
ywwVotHrNyGecnfvEoU2liHP1gLrCS1hpUe8ufTX3YjpnIDbg9/zw2qGSaL8tHpV
Oz2NkUm1GaZ+naPVhepoP4LPKB3gAUP5N3CjRcmTlfNkOPDGNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmebIvy/Ena6MebFKm0nnU2veucMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0
NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZGJkZDU5MmEtZTg1Ny0z
ZWI3LTgzODEtNTNhMWEyMGJhZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0
NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4
NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3
YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp15RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOTf3JjvfVlgun1wgXk2KvGVT0SR+u0/zMv0RNNYagP30GqgKuq3m17
2CMV5RC1qLZc4vp7bRr9VqlKvu825HSQDmQJAoK46psdb0G+zoZUgshq4a/jeLom
z7oxPyO5/Z6G4OGfQ8zvFG9jqICi65IMVG3jeQOAdTxyxeZx25uS0ISboetJf34T
IJQ0Xj5SFfj7tVfpwNcMEoKhkHLSXZzNufbdJB6bTwwmx55w71pWDpoPXIGuQn71
K0g6OEnUzchAgtqaSSym/3dyxM0fW1QEzquRbooBaZBwTlxuU12A3WCIINJNWkh/
sLbPYdzVURyDiwclOHyeQDFOzWv85w0=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:33:47 2025 by rpki-client