Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6358ef20-dd34-30bc-84bf-9045e5b9b116.roa
File:                     6358ef20-dd34-30bc-84bf-9045e5b9b116.roa (raw, json)
Hash identifier:          5t03Qcio3TkTUYgVXghZtEKiFLXO0gqe3rogMhLn3fg=
Subject key identifier:   B9:84:7D:4C:9C:81:94:1B:0B:98:B5:0A:BA:90:EC:8F:BC:20:76:92
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B047BFD0A5C74F7A2656DCC80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6358ef20-dd34-30bc-84bf-9045e5b9b116.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     62907
IP address blocks:        199.168.149.0/24 maxlen: 24
                          199.168.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7b:fd:0a:5c:74:f7:a2:65:6d:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=4b815b7a-5b3a-4b7e-b75d-44cd526a090b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:24:8e:b2:57:cf:37:9e:da:53:eb:a0:d9:
                    a6:f8:89:bb:c9:f1:8f:1d:46:18:cb:7a:f1:3e:93:
                    0f:7c:4d:85:b4:58:a7:40:7d:77:bd:0d:8b:94:80:
                    72:73:56:ff:17:1d:64:fb:b4:07:e2:42:6c:94:35:
                    dd:97:d2:ef:3a:86:26:fb:36:c8:c2:4b:c8:4e:b9:
                    65:d5:1f:d6:b8:45:10:7b:0b:57:81:72:42:12:73:
                    b0:f0:14:5f:fb:ca:7d:bb:e4:2e:cb:f4:29:6e:75:
                    8f:fc:6d:02:09:1b:69:70:e0:32:76:78:3d:0c:9c:
                    2a:0e:83:4b:9c:01:f1:05:cb:60:45:4f:6c:d2:d3:
                    ec:b4:68:48:aa:f1:6c:71:c4:8d:ac:a8:1e:88:2e:
                    8d:f1:ea:9f:33:9c:21:96:0e:e9:aa:5e:73:5a:b6:
                    50:82:d2:38:a7:54:9c:fd:e4:08:07:1d:2e:99:dc:
                    85:47:51:29:a7:87:27:d8:07:38:c4:38:a9:45:87:
                    04:15:29:cb:2c:0a:43:e9:13:be:5a:07:3b:a3:c9:
                    ca:52:a0:d5:05:6a:ff:ab:c3:6b:85:7f:b5:26:63:
                    87:5d:15:fe:c5:da:03:f4:83:11:b9:eb:14:11:b6:
                    48:7d:1a:f9:0e:e8:b8:6a:7d:0a:8f:25:23:c8:26:
                    70:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:84:7D:4C:9C:81:94:1B:0B:98:B5:0A:BA:90:EC:8F:BC:20:76:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6358ef20-dd34-30bc-84bf-9045e5b9b116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.168.149.0-199.168.150.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:d8:1c:06:b2:3a:14:dd:d2:56:d8:01:33:69:59:76:a1:
         6c:1d:56:da:11:94:33:85:d7:3c:0f:eb:86:33:c3:f1:08:12:
         04:03:d9:86:9a:98:c4:cf:28:e6:48:78:e3:89:54:82:81:a7:
         8e:f9:68:46:7f:9e:a8:2c:da:1a:f2:75:f5:d0:0e:c5:37:fa:
         77:2c:03:ee:90:f9:33:fe:f9:a1:a2:31:09:f5:03:09:10:54:
         17:d2:cf:ae:45:0f:c9:af:57:30:80:b5:ee:81:04:69:90:57:
         ef:42:89:ca:d0:e7:fc:7c:2c:d9:67:b4:99:cc:e6:60:c5:19:
         8c:d7:ff:f9:7e:dd:eb:f4:6e:c2:e2:73:b2:cb:9f:eb:0c:d8:
         89:f8:5f:c7:2d:13:0a:61:dc:6f:c0:ef:dd:80:29:a8:a1:9b:
         62:4e:56:29:02:af:ca:0b:44:28:d0:8b:fb:b2:9d:b8:da:ff:
         1f:bd:dd:c7:db:4a:0a:74:5d:92:00:36:53:42:3f:cd:76:a0:
         3b:c5:19:3a:e0:a1:23:ec:23:03:88:6f:ac:3b:12:3d:a0:aa:
         31:1c:14:07:3e:2f:d9:7e:be:37:b8:48:ca:35:86:54:8b:17:
         8a:40:b8:1b:89:2e:f9:8b:07:11:27:a9:da:88:82:5c:ce:d7:
         ca:82:bb:f4
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsEe/0KXHT3omVtzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk
NGI4MTViN2EtNWIzYS00YjdlLWI3NWQtNDRjZDUyNmEwOTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRckjrJXzzee2lProNmm+Im7yfGPHUYYy3rx
PpMPfE2FtFinQH13vQ2LlIByc1b/Fx1k+7QH4kJslDXdl9LvOoYm+zbIwkvITrll
1R/WuEUQewtXgXJCEnOw8BRf+8p9u+Quy/QpbnWP/G0CCRtpcOAydng9DJwqDoNL
nAHxBctgRU9s0tPstGhIqvFsccSNrKgeiC6N8eqfM5whlg7pql5zWrZQgtI4p1Sc
/eQIBx0umdyFR1Epp4cn2Ac4xDipRYcEFSnLLApD6RO+Wgc7o8nKUqDVBWr/q8Nr
hX+1JmOHXRX+xdoD9IMRuesUEbZIfRr5Dui4an0KjyUjyCZw6QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFLmEfUycgZQbC5i1CrqQ7I+8IHaSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjM1OGVmMjAtZGQzNC0z
MGJjLTg0YmYtOTA0NWU1YjliMTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADHqJUD
BADHqJYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAQevYHAayOhTd0lbYATNpWXahbB1W2hGUM4XXPA/rhjPD
8QgSBAPZhpqYxM8o5kh444lUgoGnjvloRn+eqCzaGvJ19dAOxTf6dywD7pD5M/75
oaIxCfUDCRBUF9LPrkUPya9XMIC17oEEaZBX70KJytDn/Hws2We0mczmYMUZjNf/
+X7d6/RuwuJzssuf6wzYifhfxy0TCmHcb8Dv3YApqKGbYk5WKQKvygtEKNCL+7Kd
uNr/H73dx9tKCnRdkgA2U0I/zXagO8UZOuChI+wjA4hvrDsSPaCqMRwUBz4v2X6+
N7hIyjWGVIsXikC4G4ku+YsHESep2oiCXM7XyoK79A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 16:19:09 2025 by rpki-client