Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/7a87cccb-1861-3d70-83df-d545333d305b.roa
File:                     7a87cccb-1861-3d70-83df-d545333d305b.roa (raw, json)
Hash identifier:          UxGJLlGyihu12EOLiAYK+JqIGXNoSJ94S++cDgpkY7Q=
Subject key identifier:   4F:0C:D2:5C:75:82:8A:3B:3C:10:C1:63:05:85:C3:90:B9:56:84:56
Certificate issuer:       /CN=5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe
Certificate serial:       010D0C9F4328584AB4EB7E6413012D49EAEB5D00
Authority key identifier: DF:4B:B0:B5:6D:27:A0:AF:86:F0:AA:86:5A:D8:4C:AB:5F:60:C7:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/7a87cccb-1861-3d70-83df-d545333d305b.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     396982
IP address blocks:        158.228.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7e:64:13:01:2d:49:ea:eb:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=a3419a72-62b5-4c80-891d-6d246930cb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:06:70:68:22:62:dd:bd:3a:7b:fc:f5:9f:
                    fc:be:27:be:b5:e4:f4:9a:4a:fe:9d:a3:77:e5:07:
                    f6:c9:43:91:31:31:b4:bf:21:cc:26:67:1f:e2:1e:
                    e1:d9:5b:05:4f:96:24:6e:46:4a:0e:54:23:24:d5:
                    96:18:15:6e:3a:61:b6:21:cb:24:79:84:7d:df:6b:
                    fa:e1:26:3a:ac:34:05:4f:e5:1d:03:e5:aa:c7:19:
                    14:24:24:83:e0:9e:14:a6:4a:b8:28:40:c8:b8:4d:
                    a4:b9:d0:68:c3:a1:04:5f:b0:27:cd:c4:1d:f3:d6:
                    83:7d:f6:6d:40:19:4c:75:9e:65:9e:42:b5:08:7a:
                    e4:1e:b3:15:53:77:93:e8:08:9f:ee:19:52:8b:93:
                    a7:71:29:6c:d7:bf:3c:9a:ba:b3:17:04:89:0a:14:
                    03:2f:29:b4:00:16:79:24:02:32:87:15:55:87:6a:
                    13:8d:ba:2c:47:50:1e:55:5c:f6:d5:80:d1:0f:6a:
                    3d:12:34:64:90:64:bf:d0:55:5e:6b:d4:3d:22:c4:
                    6a:07:2e:de:ae:c1:bb:1a:65:cb:80:70:c8:09:0a:
                    b9:a6:a4:a5:ff:af:4d:82:a5:1d:80:23:a3:ae:64:
                    1d:c3:30:c2:d2:d0:8c:4b:6b:6e:12:b0:ff:66:22:
                    7e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0C:D2:5C:75:82:8A:3B:3C:10:C1:63:05:85:C3:90:B9:56:84:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/7a87cccb-1861-3d70-83df-d545333d305b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.crl

            X509v3 Authority Key Identifier:
                keyid:DF:4B:B0:B5:6D:27:A0:AF:86:F0:AA:86:5A:D8:4C:AB:5F:60:C7:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.228.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:38:27:59:99:44:ec:1d:0c:fc:dd:62:80:ee:3e:d9:2d:b3:
         21:41:fa:1a:f3:d0:ee:6a:fc:b9:31:15:a6:dd:6e:71:4a:60:
         8b:48:46:77:21:f1:cd:19:fc:c8:25:24:63:09:61:39:61:b6:
         f2:c9:e5:0e:99:f2:7a:3c:68:9d:62:ce:74:6d:c1:46:b7:6c:
         e8:2c:e8:40:3b:ae:2e:60:12:8a:e0:3f:09:94:8b:2a:be:e1:
         13:18:b4:75:99:f5:85:f2:7c:a2:1e:db:7c:51:8b:4a:e0:2a:
         7c:57:d6:7d:5e:93:ba:18:da:dc:94:e9:c2:c5:74:93:22:b9:
         32:92:4b:21:fc:a1:23:bb:d6:7e:a5:00:92:f0:e9:7f:6b:5f:
         3c:cd:6a:7b:14:55:f7:e0:fe:15:2f:83:0e:b4:fa:d3:d0:af:
         8c:50:98:58:7c:c0:79:27:61:28:49:1e:72:57:86:b1:68:bb:
         57:09:8e:67:4c:ef:24:92:18:85:b4:97:6d:54:6a:82:b0:db:
         ec:ad:b9:ce:df:f9:1f:a0:02:8f:e0:d1:0e:41:9f:6b:b1:64:
         fe:e0:35:59:d5:e5:2f:74:f5:84:97:b9:87:b8:25:bd:41:fb:
         d7:9e:c0:a7:75:0f:82:1f:a0:55:e5:88:73:f6:6a:54:32:a4:
         67:82:47:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0635kEwEtSerrXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTkwNWQyY2UtYmQwMi00OGVmLWJiZWUtOWNkM2IyNmZj
ZmJlMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
YTM0MTlhNzItNjJiNS00YzgwLTg5MWQtNmQyNDY5MzBjYjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTQGcGgiYt29Onv89Z/8vie+teT0mkr+naN3
5Qf2yUORMTG0vyHMJmcf4h7h2VsFT5YkbkZKDlQjJNWWGBVuOmG2IcskeYR932v6
4SY6rDQFT+UdA+WqxxkUJCSD4J4Upkq4KEDIuE2kudBow6EEX7AnzcQd89aDffZt
QBlMdZ5lnkK1CHrkHrMVU3eT6Aif7hlSi5OncSls1788mrqzFwSJChQDLym0ABZ5
JAIyhxVVh2oTjbosR1AeVVz21YDRD2o9EjRkkGS/0FVea9Q9IsRqBy7ersG7GmXL
gHDICQq5pqSl/69NgqUdgCOjrmQdwzDC0tCMS2tuErD/ZiJ+bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE8M0lx1goo7PBDBYwWFw5C5VoRWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81OTA1
ZDJjZS1iZDAyLTQ4ZWYtYmJlZS05Y2QzYjI2ZmNmYmUvN2E4N2NjY2ItMTg2MS0z
ZDcwLTgzZGYtZDU0NTMzM2QzMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTkwNWQyY2UtYmQwMi00OGVmLWJi
ZWUtOWNkM2IyNmZjZmJlLzU5MDVkMmNlLWJkMDItNDhlZi1iYmVlLTljZDNiMjZm
Y2ZiZS5jcmwwHwYDVR0jBBgwFoAU30uwtW0noK+G8KqGWthMq19gx1owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81OTA1ZDJjZS1iZDAyLTQ4ZWYtYmJlZS05Y2Qz
YjI2ZmNmYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnuTxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFM4J1mZROwdDPzdYoDuPtktsyFB+hrz0O5q/LkxFabdbnFKYItIRnch
8c0Z/MglJGMJYTlhtvLJ5Q6Z8no8aJ1iznRtwUa3bOgs6EA7ri5gEorgPwmUiyq+
4RMYtHWZ9YXyfKIe23xRi0rgKnxX1n1ek7oY2tyU6cLFdJMiuTKSSyH8oSO71n6l
AJLw6X9rXzzNansUVffg/hUvgw60+tPQr4xQmFh8wHknYShJHnJXhrFou1cJjmdM
7ySSGIW0l21UaoKw2+ytuc7f+R+gAo/g0Q5Bn2uxZP7gNVnV5S909YSXuYe4Jb1B
+9eewKd1D4IfoFXliHP2alQypGeCR2A=
-----END CERTIFICATE-----
Generated at Sat Aug 2 05:30:35 2025 by rpki-client