Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c05743f-18f5-3347-bd3a-9eb569f03ff2.roa
File:                     2c05743f-18f5-3347-bd3a-9eb569f03ff2.roa (raw, json)
Hash identifier:          2KHbbs/VZlj/vUyrxOqS259/VCV+AcGQsMGkw1VBhOY=
Subject key identifier:   02:2F:E8:54:9A:55:D1:BA:CF:D0:15:5C:EF:73:7F:2E:1E:EC:2C:D9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7A4B3683910838C591680780
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c05743f-18f5-3347-bd3a-9eb569f03ff2.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        64.180.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:36:83:91:08:38:c5:91:68:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=1c435e34-979a-43fa-b32d-efd83fab6615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:a7:07:b9:d3:c9:9e:26:ff:f0:7d:88:1b:
                    da:dd:af:42:99:05:91:06:15:c8:e9:39:d3:f3:a2:
                    c1:84:22:d2:8c:3c:0b:08:47:43:46:a3:69:ae:05:
                    b8:0f:12:9f:6a:ab:9b:18:85:db:fd:5e:bd:fa:ba:
                    9f:44:eb:1c:a7:f3:61:ca:b3:2d:98:1f:1e:50:21:
                    8b:e9:11:b6:19:24:91:30:b1:6f:25:67:49:9d:46:
                    9b:b7:80:6e:56:6b:58:3c:75:57:fb:f9:8f:c2:a3:
                    16:28:91:00:28:5e:f2:cf:67:19:ba:24:a5:3e:c4:
                    b9:80:fc:2d:ac:f1:85:67:e8:b5:5c:eb:f9:ac:63:
                    81:df:ba:7e:be:1d:e1:18:ac:5f:e3:55:15:4b:9d:
                    2e:d2:0b:ec:a4:34:6d:e2:3e:da:9e:22:c8:f3:a9:
                    29:96:22:44:58:39:72:eb:37:24:32:c2:54:58:51:
                    97:c9:2d:00:fd:06:8d:63:06:d1:f4:f7:6e:98:9f:
                    62:da:17:14:64:70:de:e0:50:66:1e:5f:66:64:c1:
                    a5:b8:63:a8:c8:d6:b2:9d:d4:1b:dc:30:62:3f:4a:
                    af:68:73:a9:06:64:83:c8:a6:04:86:8b:6e:c9:71:
                    ec:42:33:6e:f2:35:e2:cb:86:e7:e5:13:d0:55:5e:
                    8b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2F:E8:54:9A:55:D1:BA:CF:D0:15:5C:EF:73:7F:2E:1E:EC:2C:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c05743f-18f5-3347-bd3a-9eb569f03ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:d3:e1:a8:45:d8:1a:8d:b3:34:29:2a:17:4c:79:fd:5c:2c:
         d8:3c:ea:90:c5:ff:91:08:6b:c7:ce:5f:29:45:20:cb:3c:d2:
         3f:0d:19:3a:47:9f:09:34:da:d1:00:c6:7c:e5:27:ae:01:3b:
         b0:06:90:b9:37:54:be:8e:8e:b2:02:c1:e1:a3:f4:00:ca:74:
         af:7d:ea:ca:e0:13:63:4e:88:e6:39:19:3b:76:c0:3f:8f:5a:
         67:8f:c3:28:92:f2:c3:7f:73:ab:17:74:5f:bb:e4:2f:99:62:
         0f:e0:4d:a1:fe:64:8d:42:1c:0e:da:75:20:84:3c:f1:bd:b8:
         46:06:6c:6e:2f:d5:47:22:a5:97:37:9a:29:f0:92:46:1e:f0:
         a9:14:d4:70:ce:e7:78:ce:95:61:6b:58:46:39:76:2a:7b:14:
         96:82:7d:8a:21:05:34:05:47:0c:87:9d:0f:91:8d:96:c0:21:
         d3:f2:9d:49:30:60:c7:1b:54:4f:f6:4e:ac:80:de:7a:06:90:
         78:fe:69:9d:7c:20:c8:74:1c:74:33:15:d8:ac:0e:f6:f0:67:
         d0:36:dc:59:63:69:b0:96:0b:3a:ef:56:56:dd:f5:70:3e:56:
         e0:02:7c:48:b6:b2:d6:a8:84:89:98:0b:3d:68:10:69:e0:e3:
         2c:1f:83:a3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEp6SzaDkQg4xZFoB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk
MWM0MzVlMzQtOTc5YS00M2ZhLWIzMmQtZWZkODNmYWI2NjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh2nB7nTyZ4m//B9iBva3a9CmQWRBhXI6TnT
86LBhCLSjDwLCEdDRqNprgW4DxKfaqubGIXb/V69+rqfROscp/NhyrMtmB8eUCGL
6RG2GSSRMLFvJWdJnUabt4BuVmtYPHVX+/mPwqMWKJEAKF7yz2cZuiSlPsS5gPwt
rPGFZ+i1XOv5rGOB37p+vh3hGKxf41UVS50u0gvspDRt4j7aniLI86kpliJEWDly
6zckMsJUWFGXyS0A/QaNYwbR9PdumJ9i2hcUZHDe4FBmHl9mZMGluGOoyNayndQb
3DBiP0qvaHOpBmSDyKYEhotuyXHsQjNu8jXiy4bn5RPQVV6LrQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAIv6FSaVdG6z9AVXO9zfy4e7CzZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmMwNTc0M2YtMThmNS0z
MzQ3LWJkM2EtOWViNTY5ZjAzZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQLQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAvtPhqEXYGo2zNCkqF0x5/Vws2DzqkMX/kQhrx85fKUUgyzzSPw0ZOkef
CTTa0QDGfOUnrgE7sAaQuTdUvo6OsgLB4aP0AMp0r33qyuATY06I5jkZO3bAP49a
Z4/DKJLyw39zqxd0X7vkL5liD+BNof5kjUIcDtp1IIQ88b24RgZsbi/VRyKllzea
KfCSRh7wqRTUcM7neM6VYWtYRjl2KnsUloJ9iiEFNAVHDIedD5GNlsAh0/KdSTBg
xxtUT/ZOrIDeegaQeP5pnXwgyHQcdDMV2KwO9vBn0DbcWWNpsJYLOu9WVt31cD5W
4AJ8SLay1qiEiZgLPWgQaeDjLB+Dow==
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:23:01 2025 by rpki-client