Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/bcf949e1-1d1f-3b6a-95a5-0412ae5afbaf.roa
File:                     bcf949e1-1d1f-3b6a-95a5-0412ae5afbaf.roa (raw, json)
Hash identifier:          1ZOqe2ZiFe55PA/X93l7H8V4/dhYD7GVI8T1N3oGxQA=
Subject key identifier:   14:B7:47:1F:11:F1:3A:D5:53:2A:2E:11:3E:D4:B8:38:80:F2:3A:CE
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584A8146539C96E394209F16A360
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/bcf949e1-1d1f-3b6a-95a5-0412ae5afbaf.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     212238
IP address blocks:        216.185.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:53:9c:96:e3:94:20:9f:16:a3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=17bf1420-5a82-4c5d-8a99-231aa7ed82b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:bf:61:fe:97:ea:30:fc:3f:53:ed:a1:10:
                    fc:3a:aa:81:29:f2:d4:12:8f:f0:32:5b:a8:71:91:
                    b3:7d:49:54:d8:d9:be:eb:99:43:1b:ed:65:55:53:
                    9a:26:a8:e0:2e:f1:32:de:98:fa:7b:f8:e9:d6:33:
                    28:94:9f:e5:5a:f4:f6:eb:e6:1f:b5:6d:a9:03:ce:
                    cf:37:b9:ac:92:be:f4:67:bb:25:9f:1b:4d:cf:06:
                    75:80:24:36:ae:ab:43:6a:fa:b4:02:ff:e0:fe:5d:
                    c4:c2:f5:5f:59:34:f7:58:59:0a:13:c9:09:7d:95:
                    aa:5f:04:d9:18:f6:75:05:f3:6f:98:e5:16:c7:98:
                    50:8d:f3:e9:2e:09:c2:c1:d2:ae:b8:2b:c7:e1:78:
                    c3:46:2a:a2:73:dd:de:05:df:6d:ab:80:ab:b6:67:
                    0d:8a:03:45:00:2c:f8:91:be:6b:03:47:2c:1d:d5:
                    58:a6:c5:19:8f:95:51:77:01:e6:74:3a:43:ae:8d:
                    88:57:85:c1:ee:d9:c0:ec:67:81:06:1d:72:6a:3c:
                    f2:fd:6a:bb:28:45:e4:b4:b9:ed:02:34:ef:89:b7:
                    a2:03:2d:78:bb:37:33:ec:44:fb:9b:65:a5:4c:ee:
                    44:fe:dc:1a:de:88:e7:70:4d:ac:11:88:d3:34:fa:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B7:47:1F:11:F1:3A:D5:53:2A:2E:11:3E:D4:B8:38:80:F2:3A:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/bcf949e1-1d1f-3b6a-95a5-0412ae5afbaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:91:1f:be:f2:b9:7c:7f:49:ff:20:63:2f:61:6d:94:5a:
         95:07:25:fb:e4:d0:d6:ca:19:a5:a8:a2:68:ce:bf:3c:e2:c4:
         d7:9f:c1:74:74:b0:cd:e2:a7:95:8c:8a:01:b3:c6:11:33:93:
         41:f3:d5:4d:e6:03:6f:de:8b:45:06:8d:37:54:e3:ad:10:37:
         51:2e:62:9d:7a:7d:39:fd:c6:c2:16:5b:fd:df:3b:dd:b9:98:
         da:0c:86:c1:f0:1f:e2:9d:d9:a5:ca:96:1e:4c:75:23:1c:a6:
         16:16:a4:b9:f5:57:21:70:05:bc:1b:f1:d0:3a:11:c4:64:d2:
         85:bc:ca:1d:cd:62:34:2e:4e:05:4d:1c:53:00:b3:93:d6:a6:
         fd:f5:19:36:07:62:6e:e1:71:20:2f:a1:d1:cf:8b:4e:8a:84:
         24:6b:89:12:36:4d:f9:6c:e3:6a:85:5d:70:a5:c1:81:86:a8:
         33:00:f2:39:1a:40:ad:bf:da:d5:c5:3a:22:c7:8f:15:44:4c:
         82:9c:0c:f5:63:14:18:5a:2f:24:bc:9f:2c:19:82:f9:1d:36:
         c2:18:e9:6f:e1:93:71:bc:73:ac:fc:9a:7e:ca:b5:60:b5:07:
         66:02:df:1d:ea:8d:0a:a4:9e:3e:b4:23:95:17:d2:83:6b:ba:
         18:d3:ce:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRlOcluOUIJ8Wo2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
MTdiZjE0MjAtNWE4Mi00YzVkLThhOTktMjMxYWE3ZWQ4MmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCu/Yf6X6jD8P1PtoRD8OqqBKfLUEo/wMluo
cZGzfUlU2Nm+65lDG+1lVVOaJqjgLvEy3pj6e/jp1jMolJ/lWvT26+YftW2pA87P
N7mskr70Z7slnxtNzwZ1gCQ2rqtDavq0Av/g/l3EwvVfWTT3WFkKE8kJfZWqXwTZ
GPZ1BfNvmOUWx5hQjfPpLgnCwdKuuCvH4XjDRiqic93eBd9tq4CrtmcNigNFACz4
kb5rA0csHdVYpsUZj5VRdwHmdDpDro2IV4XB7tnA7GeBBh1yajzy/Wq7KEXktLnt
AjTvibeiAy14uzcz7ET7m2WlTO5E/twa3ojncE2sEYjTNPoBoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBS3Rx8R8TrVUyouET7UuDiA8jrOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvYmNmOTQ5ZTEtMWQxZi0z
YjZhLTk1YTUtMDQxMmFlNWFmYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LkvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8qkR++8rl8f0n/IGMvYW2UWpUHJfvk0NbKGaWoomjOvzzixNefwXR0
sM3ip5WMigGzxhEzk0Hz1U3mA2/ei0UGjTdU460QN1EuYp16fTn9xsIWW/3fO925
mNoMhsHwH+Kd2aXKlh5MdSMcphYWpLn1VyFwBbwb8dA6EcRk0oW8yh3NYjQuTgVN
HFMAs5PWpv31GTYHYm7hcSAvodHPi06KhCRriRI2Tfls42qFXXClwYGGqDMA8jka
QK2/2tXFOiLHjxVETIKcDPVjFBhaLyS8nywZgvkdNsIY6W/hk3G8c6z8mn7KtWC1
B2YC3x3qjQqknj60I5UX0oNruhjTzsg=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:43 2025 by rpki-client