Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa
File:                     7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa (raw, json)
Hash identifier:          zgMA7hB9J+TDhz9TLXFhsWtoalAbN0l1NiBlN+IbdGw=
Subject key identifier:   CE:C4:1B:18:B3:59:D3:EC:03:8A:66:B4:76:2A:98:08:2C:DE:37:AA
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584A612B1521F98F596ED5A73A80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     13768
IP address blocks:        65.39.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:15:21:f9:8f:59:6e:d5:a7:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=c0f1eaf3-6714-495e-9f24-6d03996bc0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d7:ff:26:74:6e:41:25:d5:4d:0d:2d:fa:fd:
                    06:5b:ef:67:3f:b9:97:6f:82:a0:82:d0:38:b7:b7:
                    23:af:5d:6c:cc:52:8d:44:c6:90:66:47:90:0e:07:
                    74:dc:d6:60:cc:d2:a9:02:c8:8f:d4:e2:2b:73:5c:
                    a2:fa:eb:1a:1e:cd:4c:84:6d:fc:1f:7c:1d:89:6b:
                    37:bc:cc:37:4a:dd:a0:32:a2:fd:cf:82:6e:1f:51:
                    61:0d:cd:c8:cb:d3:bc:70:e8:45:4b:36:ce:1f:73:
                    0d:cb:c7:9b:8c:55:36:7e:15:16:d4:ff:3f:73:45:
                    88:fe:6c:bc:f9:14:db:9a:cd:e6:d0:d1:4c:00:d1:
                    c4:5d:ea:2f:87:d9:64:82:7f:85:ed:18:88:08:a1:
                    13:64:9d:3f:d3:ce:c6:2c:86:2e:05:92:49:6f:58:
                    33:7d:6a:1a:39:45:50:77:72:d0:3f:32:18:2f:1c:
                    50:5a:ad:8a:e5:6c:90:39:79:9e:d7:38:81:70:3a:
                    ea:60:d4:f6:27:f3:d5:0d:19:58:41:ed:74:52:26:
                    70:6d:7e:cf:21:d5:da:52:ec:88:b7:a9:c7:8e:f8:
                    9e:e7:d7:17:23:11:62:43:b6:4b:ec:2a:8a:d0:a8:
                    60:b4:c2:44:99:25:86:a2:33:dd:a9:1f:fb:61:0a:
                    46:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C4:1B:18:B3:59:D3:EC:03:8A:66:B4:76:2A:98:08:2C:DE:37:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b2:17:ad:29:38:1d:28:6f:04:ed:8e:61:49:3a:12:aa:cf:
         f5:68:cf:43:2b:72:53:4d:9b:ac:8f:c2:fb:be:1a:75:31:83:
         01:43:a5:db:ee:25:93:0c:05:6f:e6:b5:20:8e:00:c2:5b:ea:
         2d:0f:35:4f:fa:f8:26:9d:9d:47:8f:57:b1:37:fc:a1:d8:8d:
         8e:4f:87:0d:77:e8:0e:34:9f:b2:55:4e:32:f0:dd:d7:e2:cc:
         90:4c:a7:fc:3f:00:52:8d:ac:d1:50:1b:89:ce:14:8a:ae:a5:
         70:89:b6:f6:6c:cd:ff:fc:dc:8d:06:0a:20:fc:74:c1:80:31:
         fa:2c:7d:7c:23:2c:2c:12:99:7c:03:b3:fe:1e:5c:59:35:6a:
         f9:d6:09:dc:ea:16:93:ca:3b:2d:24:61:f7:c9:84:35:36:5b:
         d5:f4:8c:f8:9e:ba:a0:0e:30:f5:dc:24:cd:56:60:e2:b3:fb:
         cb:e1:5e:81:ee:5d:a5:60:44:bf:de:57:35:28:55:98:df:3c:
         9e:f4:3d:20:49:62:a3:9b:cd:ce:1d:a2:65:d6:d5:0a:6d:ef:
         9e:37:15:b0:f2:f7:9c:69:46:78:cf:68:42:b0:b2:6b:16:7c:
         e9:9b:76:65:94:62:62:70:1d:12:98:88:74:45:3f:c6:54:be:
         2d:cf:b4:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxUh+Y9ZbtWnOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk
YzBmMWVhZjMtNjcxNC00OTVlLTlmMjQtNmQwMzk5NmJjMGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNf/JnRuQSXVTQ0t+v0GW+9nP7mXb4KggtA4
t7cjr11szFKNRMaQZkeQDgd03NZgzNKpAsiP1OIrc1yi+usaHs1MhG38H3wdiWs3
vMw3St2gMqL9z4JuH1FhDc3Iy9O8cOhFSzbOH3MNy8ebjFU2fhUW1P8/c0WI/my8
+RTbms3m0NFMANHEXeovh9lkgn+F7RiICKETZJ0/087GLIYuBZJJb1gzfWoaOUVQ
d3LQPzIYLxxQWq2K5WyQOXme1ziBcDrqYNT2J/PVDRlYQe10UiZwbX7PIdXaUuyI
t6nHjvie59cXIxFiQ7ZL7CqK0KhgtMJEmSWGojPdqR/7YQpGGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM7EGxizWdPsA4pmtHYqmAgs3jeqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvN2YyYjNmNDYtMmRkNS0z
ODFlLWIxMjItZDdjMmFkNjYwMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQSfIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGyF60pOB0obwTtjmFJOhKqz/Voz0MrclNNm6yPwvu+GnUxgwFDpdvu
JZMMBW/mtSCOAMJb6i0PNU/6+CadnUePV7E3/KHYjY5Phw136A40n7JVTjLw3dfi
zJBMp/w/AFKNrNFQG4nOFIqupXCJtvZszf/83I0GCiD8dMGAMfosfXwjLCwSmXwD
s/4eXFk1avnWCdzqFpPKOy0kYffJhDU2W9X0jPieuqAOMPXcJM1WYOKz+8vhXoHu
XaVgRL/eVzUoVZjfPJ70PSBJYqObzc4domXW1Qpt7543FbDy95xpRnjPaEKwsmsW
fOmbdmWUYmJwHRKYiHRFP8ZUvi3PtE8=
-----END CERTIFICATE-----
Generated at Thu Jul 10 10:37:54 2025 by rpki-client