Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78b046ad-708c-347f-a46d-fd7dd43f4f00.roa
File:                     78b046ad-708c-347f-a46d-fd7dd43f4f00.roa (raw, json)
Hash identifier:          ry3dhhD3gmJhwq8rDJUYIkDyMnmgHh4ofsIaEcg3fkg=
Subject key identifier:   C3:83:5B:61:7F:EC:59:13:07:3B:AF:67:66:EC:95:4E:C9:D4:EC:71
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A68260AA2CFF972FFD6CB0F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78b046ad-708c-347f-a46d-fd7dd43f4f00.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     32787
IP address blocks:        209.200.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:0a:a2:cf:f9:72:ff:d6:cb:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=ed5f3aab-6029-464e-a7ca-35d901f8092a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:52:1f:8e:19:9b:73:2d:07:08:c0:1a:02:bd:
                    02:52:ab:5d:74:6d:f9:e6:bf:02:04:a3:96:23:7b:
                    03:42:7e:61:00:dd:27:61:53:e0:02:e7:90:31:f2:
                    7b:95:12:f7:73:81:c9:9b:87:a4:06:b0:78:7f:65:
                    e5:49:66:80:30:76:e9:00:c9:7c:8b:5d:5b:5d:ce:
                    e6:3c:8a:94:cf:35:24:7c:24:54:7f:ee:b7:6b:d8:
                    fe:af:45:3c:e8:b5:6a:a8:cb:89:72:68:25:b4:be:
                    da:cd:89:24:63:4c:c1:5c:3f:72:9b:d0:a4:81:c1:
                    af:06:04:a2:74:4e:b5:ab:77:68:bd:64:54:93:15:
                    38:cc:b1:9f:12:9f:b1:82:7b:99:e4:6a:d1:ad:41:
                    bb:99:a2:23:7a:4a:e3:b5:41:c9:65:c3:0d:42:c7:
                    d6:00:b4:4f:03:94:f0:4e:8d:b9:38:f8:f2:8b:77:
                    bb:96:d1:bf:4f:fb:aa:05:2d:da:e2:3c:58:9d:b4:
                    f5:85:8b:0f:2b:fc:d8:61:2b:98:55:c8:eb:bf:e8:
                    aa:76:a1:6c:d9:05:ce:7b:4a:67:f2:86:6e:e5:68:
                    d6:71:ef:49:70:15:b6:e5:0a:27:1e:52:4e:e0:cf:
                    61:e4:0b:19:03:21:d9:bc:39:10:4f:56:43:79:00:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:83:5B:61:7F:EC:59:13:07:3B:AF:67:66:EC:95:4E:C9:D4:EC:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78b046ad-708c-347f-a46d-fd7dd43f4f00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:8c:22:05:93:f5:53:b2:c6:a0:cb:51:b0:22:3d:84:67:14:
         50:45:1a:77:73:9d:5e:49:30:16:68:6e:5a:2c:42:88:b4:5f:
         58:32:5a:68:49:86:44:04:d5:23:38:b6:30:81:6a:89:5d:0f:
         6e:36:c3:95:5d:6b:59:76:6d:8c:5f:a0:65:90:e7:06:58:db:
         d0:78:94:e8:81:ae:70:74:f2:45:2a:0f:c6:aa:68:06:26:c0:
         f8:35:91:22:7c:ab:18:c7:a8:32:56:f3:1e:1a:43:bf:75:7a:
         cf:1e:3e:29:9e:6d:c1:b4:e2:84:c9:e6:e0:2f:08:3f:d8:55:
         ec:72:d2:26:dd:e4:d0:d6:9e:f9:68:58:4f:7a:44:6f:4e:39:
         f3:42:97:30:07:56:37:3f:f9:d3:76:6c:4e:ad:ca:02:3d:cc:
         d6:48:48:2a:cd:b4:d7:bd:28:b3:15:3e:6e:f1:aa:ab:2b:ae:
         1d:86:6e:cc:f6:94:d4:a2:a4:a9:b8:6c:fc:eb:64:f7:ba:dd:
         0a:e3:ab:90:50:b9:de:9b:fc:47:f6:f3:b7:89:1f:c1:56:29:
         6c:ec:c4:77:48:99:62:b8:31:0f:26:c3:f6:94:c6:26:8f:de:
         5f:16:15:f9:54:fd:21:b1:1b:a5:ee:79:a5:ba:5d:36:ef:2f:
         df:ac:25:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgqiz/ly/9bLD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
ZWQ1ZjNhYWItNjAyOS00NjRlLWE3Y2EtMzVkOTAxZjgwOTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFIfjhmbcy0HCMAaAr0CUqtddG355r8CBKOW
I3sDQn5hAN0nYVPgAueQMfJ7lRL3c4HJm4ekBrB4f2XlSWaAMHbpAMl8i11bXc7m
PIqUzzUkfCRUf+63a9j+r0U86LVqqMuJcmgltL7azYkkY0zBXD9ym9CkgcGvBgSi
dE61q3dovWRUkxU4zLGfEp+xgnuZ5GrRrUG7maIjekrjtUHJZcMNQsfWALRPA5Tw
To25OPjyi3e7ltG/T/uqBS3a4jxYnbT1hYsPK/zYYSuYVcjrv+iqdqFs2QXOe0pn
8oZu5WjWce9JcBW25QonHlJO4M9h5AsZAyHZvDkQT1ZDeQDw4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMODW2F/7FkTBzuvZ2bslU7J1OxxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzhiMDQ2YWQtNzA4Yy0z
NDdmLWE0NmQtZmQ3ZGQ0M2Y0ZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACiMIgWT9VOyxqDLUbAiPYRnFFBFGndznV5JMBZoblosQoi0X1gyWmhJ
hkQE1SM4tjCBaoldD242w5Vda1l2bYxfoGWQ5wZY29B4lOiBrnB08kUqD8aqaAYm
wPg1kSJ8qxjHqDJW8x4aQ791es8ePimebcG04oTJ5uAvCD/YVexy0ibd5NDWnvlo
WE96RG9OOfNClzAHVjc/+dN2bE6tygI9zNZISCrNtNe9KLMVPm7xqqsrrh2Gbsz2
lNSipKm4bPzrZPe63Qrjq5BQud6b/Ef287eJH8FWKWzsxHdImWK4MQ8mw/aUxiaP
3l8WFflU/SGxG6XueaW6XTbvL9+sJXo=
-----END CERTIFICATE-----
Generated at Tue Jul 22 19:32:52 2025 by rpki-client