Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/95f0f53f-dfc5-331e-a852-7cfd5d8dfdef.roa
File:                     95f0f53f-dfc5-331e-a852-7cfd5d8dfdef.roa (raw, json)
Hash identifier:          9AhSL38+Y9czRn2OptF/cUTZZgaPhQGw+5tOlQbvFM4=
Subject key identifier:   FC:AB:05:E8:6F:82:22:AA:40:50:77:4E:1E:E5:32:27:C2:71:F3:50
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7D15F269056D2ED641619800
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/95f0f53f-dfc5-331e-a852-7cfd5d8dfdef.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     852
IP address blocks:        209.29.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f2:69:05:6d:2e:d6:41:61:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=3eb196e6-cd8c-4624-b142-8bf872850eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:05:3b:26:3a:49:d7:cd:d3:96:d0:d2:9b:
                    cf:0e:f3:c8:a7:16:65:8d:10:d3:59:eb:61:d6:c3:
                    58:71:37:52:d5:8c:2c:ae:a3:9c:31:e9:a3:36:0b:
                    2a:76:3a:10:c0:5c:5d:35:0c:5f:9e:dd:e7:5f:64:
                    5f:1f:6f:17:b2:c6:29:42:b5:5f:c9:59:79:87:3b:
                    53:53:99:6e:76:8f:8d:86:5d:af:1b:55:4d:44:81:
                    bf:0b:9d:0e:ca:7d:2b:eb:84:2e:4b:fe:04:b9:75:
                    cf:e8:d7:55:f2:d4:56:7e:0e:d8:b7:d5:2e:df:42:
                    42:89:7b:b9:3b:75:a8:b9:36:b9:08:b5:13:b7:54:
                    02:a8:a6:9f:30:34:ff:5d:2e:82:89:8e:6d:d0:43:
                    67:2d:97:b6:90:f7:34:d2:f9:7f:4a:a4:c6:b3:74:
                    23:53:66:5b:93:80:bd:5d:54:62:93:c3:fe:9d:af:
                    ae:5a:ab:00:a3:b2:ff:4b:db:77:86:a3:d5:b6:47:
                    08:12:5a:4b:93:37:49:ad:91:9a:8e:6e:04:c2:33:
                    d2:e1:2e:12:2e:6f:fd:4e:06:f4:bf:13:d6:86:b4:
                    d6:f4:40:e1:b6:af:b8:d1:d4:5d:73:ef:fc:b4:80:
                    fe:58:05:f9:44:0d:e8:6f:4a:55:3c:38:fe:73:fa:
                    d0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AB:05:E8:6F:82:22:AA:40:50:77:4E:1E:E5:32:27:C2:71:F3:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/95f0f53f-dfc5-331e-a852-7cfd5d8dfdef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.29.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e4:c7:73:c9:00:c7:9d:a9:6d:f6:8c:7c:e5:50:76:ba:97:
         0b:5b:28:e2:77:26:47:ab:fb:a4:3c:a9:b0:3f:a9:26:ef:04:
         f7:ae:fc:2b:79:b4:b2:43:e2:a3:cd:d0:47:59:93:76:24:0b:
         5f:1c:67:92:72:ab:72:18:3a:99:8b:78:e8:ea:67:1e:cd:06:
         3a:bc:62:77:0c:6b:d9:a7:32:68:65:2d:af:79:e8:c5:68:3f:
         a6:06:b9:d9:1c:c8:c1:e0:cb:6e:b2:2a:ee:06:a7:b0:c8:ab:
         43:2a:1e:f0:4f:66:04:fe:3b:c6:05:10:a3:0a:18:00:d2:48:
         61:b7:ad:6a:bc:77:90:8f:03:ec:bf:ee:b4:12:ee:56:ad:b2:
         07:c7:e1:80:2f:a3:70:ed:15:0f:96:f6:54:cc:92:e3:2c:d3:
         16:25:e1:a5:16:83:44:61:52:ab:a0:1a:f7:e5:22:cc:46:c4:
         77:00:f1:91:0c:6b:e2:ea:87:09:35:48:94:a1:51:c0:5a:25:
         2c:e1:a2:9e:42:87:f6:5e:1f:e6:15:21:09:d9:fa:94:94:40:
         63:19:7e:8a:d0:b2:e8:c5:ed:e2:60:4b:e8:51:ec:45:9a:9a:
         c4:fb:06:94:a3:76:59:02:bb:6a:6e:d9:e6:6c:6e:a3:77:c6:
         ee:4f:99:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FfJpBW0u1kFhmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk
M2ViMTk2ZTYtY2Q4Yy00NjI0LWIxNDItOGJmODcyODUwZWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7kFOyY6SdfN05bQ0pvPDvPIpxZljRDTWeth
1sNYcTdS1YwsrqOcMemjNgsqdjoQwFxdNQxfnt3nX2RfH28XssYpQrVfyVl5hztT
U5ludo+Nhl2vG1VNRIG/C50Oyn0r64QuS/4EuXXP6NdV8tRWfg7Yt9Uu30JCiXu5
O3WouTa5CLUTt1QCqKafMDT/XS6CiY5t0ENnLZe2kPc00vl/SqTGs3QjU2Zbk4C9
XVRik8P+na+uWqsAo7L/S9t3hqPVtkcIElpLkzdJrZGajm4EwjPS4S4SLm/9Tgb0
vxPWhrTW9EDhtq+40dRdc+/8tID+WAX5RA3ob0pVPDj+c/rQfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPyrBehvgiKqQFB3Th7lMifCcfNQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTVmMGY1M2YtZGZjNS0z
MzFlLWE4NTItN2NmZDVkOGRmZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R1pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/kx3PJAMedqW32jHzlUHa6lwtbKOJ3Jker+6Q8qbA/qSbvBPeu/Ct5
tLJD4qPN0EdZk3YkC18cZ5Jyq3IYOpmLeOjqZx7NBjq8YncMa9mnMmhlLa956MVo
P6YGudkcyMHgy26yKu4Gp7DIq0MqHvBPZgT+O8YFEKMKGADSSGG3rWq8d5CPA+y/
7rQS7latsgfH4YAvo3DtFQ+W9lTMkuMs0xYl4aUWg0RhUqugGvflIsxGxHcA8ZEM
a+Lqhwk1SJShUcBaJSzhop5Ch/ZeH+YVIQnZ+pSUQGMZforQsujF7eJgS+hR7EWa
msT7BpSjdlkCu2pu2eZsbqN3xu5PmdA=
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:19:21 2025 by rpki-client