Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b563e0a-43f7-39c7-9202-f9be0846f377.roa
File:                     3b563e0a-43f7-39c7-9202-f9be0846f377.roa (raw, json)
Hash identifier:          Xiqa420UDSnpqKGcn3gt0CZ97Thcjv7Ky6HDsYY0kLQ=
Subject key identifier:   AA:49:CD:70:B2:D2:7D:6E:92:3E:85:D6:2A:B5:B7:3B:C7:DB:30:E9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7A4B3B48EA0C19F857598DA0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b563e0a-43f7-39c7-9202-f9be0846f377.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        206.108.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:3b:48:ea:0c:19:f8:57:59:8d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=9559dd71-e8cd-46a8-bc88-3c3ed6fa3493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:37:56:fc:50:65:d5:58:3d:a3:a0:9f:4b:
                    69:ef:6b:4b:0c:a0:1a:5e:5c:47:75:cf:83:53:74:
                    1d:72:85:73:41:8d:b4:eb:aa:30:e9:dd:36:3d:0d:
                    31:6c:d0:08:ab:1e:05:d3:41:b0:32:2e:2f:e0:1a:
                    41:49:81:3d:09:ee:82:09:75:f0:c0:9b:62:e7:08:
                    87:58:09:17:22:e4:08:d8:f6:23:81:74:3f:d6:e1:
                    e0:4e:e2:b8:31:46:ce:d9:5f:14:a0:e4:42:79:e7:
                    86:bc:16:27:55:2b:c1:c4:b5:d5:99:ef:15:5b:46:
                    43:7c:5b:07:a3:a8:fa:24:fb:00:a6:e6:0b:48:bb:
                    3d:cf:e7:5b:c5:23:cb:fc:47:e1:75:a2:84:40:14:
                    dc:21:a4:3b:b4:03:2e:b0:3d:39:80:30:8b:8f:89:
                    7f:3c:af:c0:d0:a7:41:49:13:0c:aa:ab:66:52:d0:
                    76:05:4e:ca:4a:3f:d1:5e:ca:d0:58:1d:80:d8:f2:
                    7e:42:22:48:4e:86:7b:e3:cf:72:38:b3:07:61:41:
                    e9:1d:41:b8:25:e2:ad:f3:91:dc:65:e9:18:58:bb:
                    59:d8:bc:06:e0:3f:97:f5:d2:45:d6:e2:df:4e:ed:
                    2d:bd:3f:87:23:e6:fb:fa:8c:c7:8c:2b:a3:93:d2:
                    08:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:49:CD:70:B2:D2:7D:6E:92:3E:85:D6:2A:B5:B7:3B:C7:DB:30:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b563e0a-43f7-39c7-9202-f9be0846f377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f8:da:d4:0d:a9:41:b3:a9:9d:c5:07:f1:e8:1b:5e:ee:c2:ff:
         e5:f2:80:cb:c7:d3:b9:e3:32:1d:bf:23:be:8c:33:26:d9:5e:
         c8:27:a4:ac:1c:29:a4:e0:f5:cf:61:c5:1e:ba:03:f0:82:15:
         9b:6b:ab:10:12:1f:30:5e:1a:19:45:00:f2:46:e7:9c:6a:e5:
         88:c4:c9:ba:ff:10:45:e6:dd:0b:6b:9f:c7:da:14:bd:8b:8a:
         e7:b1:91:6d:77:ec:0a:6e:a3:07:fb:ae:f7:6e:87:18:04:f4:
         dc:d5:92:44:38:b9:62:5f:d6:11:07:d9:aa:6c:9f:a2:12:c5:
         74:51:25:63:ad:79:1d:e6:18:5c:a5:44:23:a9:d4:af:e1:bc:
         c9:bc:89:16:6f:35:3a:da:aa:de:43:e7:21:9a:51:11:0e:df:
         be:f9:96:0b:6d:90:75:90:b0:ca:16:2e:56:5d:f3:f2:c5:18:
         e0:8b:61:31:c7:cc:f7:47:39:63:61:a0:a3:fb:98:68:2b:00:
         4a:60:66:98:2f:e0:eb:f7:6f:10:27:da:7d:72:10:1c:eb:ef:
         f9:0b:cc:f1:b3:0d:30:77:cf:0c:13:93:49:e9:a1:84:cb:79:
         97:36:c2:d8:be:5b:ce:0c:0b:34:38:36:35:73:dd:64:6c:8e:
         c7:ac:81:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SztI6gwZ+FdZjaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk
OTU1OWRkNzEtZThjZC00NmE4LWJjODgtM2MzZWQ2ZmEzNDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfw3VvxQZdVYPaOgn0tp72tLDKAaXlxHdc+D
U3QdcoVzQY2066ow6d02PQ0xbNAIqx4F00GwMi4v4BpBSYE9Ce6CCXXwwJti5wiH
WAkXIuQI2PYjgXQ/1uHgTuK4MUbO2V8UoORCeeeGvBYnVSvBxLXVme8VW0ZDfFsH
o6j6JPsApuYLSLs9z+dbxSPL/EfhdaKEQBTcIaQ7tAMusD05gDCLj4l/PK/A0KdB
SRMMqqtmUtB2BU7KSj/RXsrQWB2A2PJ+QiJIToZ7489yOLMHYUHpHUG4JeKt85Hc
ZekYWLtZ2LwG4D+X9dJF1uLfTu0tvT+HI+b7+ozHjCujk9IIFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKpJzXCy0n1ukj6F1iq1tzvH2zDpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2I1NjNlMGEtNDNmNy0z
OWM3LTkyMDItZjliZTA4NDZmMzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzmzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAPja1A2pQbOpncUH8egbXu7C/+XygMvH07njMh2/I76MMybZXsgnpKwc
KaTg9c9hxR66A/CCFZtrqxASHzBeGhlFAPJG55xq5YjEybr/EEXm3Qtrn8faFL2L
iuexkW137Apuowf7rvduhxgE9NzVkkQ4uWJf1hEH2apsn6ISxXRRJWOteR3mGFyl
RCOp1K/hvMm8iRZvNTraqt5D5yGaUREO3775lgttkHWQsMoWLlZd8/LFGOCLYTHH
zPdHOWNhoKP7mGgrAEpgZpgv4Ov3bxAn2n1yEBzr7/kLzPGzDTB3zwwTk0npoYTL
eZc2wti+W84MCzQ4NjVz3WRsjsesgfs=
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:41:41 2025 by rpki-client