Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049/31bb14d5-6af8-3eac-a6b1-08b30101a1ea.roa
File:                     31bb14d5-6af8-3eac-a6b1-08b30101a1ea.roa (raw, json)
Hash identifier:          LWXit2zHwnrGH5lAsCrAzQNr/sxPIp18wZygxSpxeRo=
Subject key identifier:   87:8E:6D:50:96:1D:33:97:11:B5:85:4C:7E:5A:9E:48:A2:9C:F3:C5
Certificate issuer:       /CN=e0f03377-8cfb-423d-8440-94047c3af049
Certificate serial:       010D0C9F4328584AAB2660879BFA013D17F50DE0
Authority key identifier: 73:C1:69:51:CA:4C:84:C3:C0:E3:1C:0B:90:E3:2E:24:52:2A:81:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049/31bb14d5-6af8-3eac-a6b1-08b30101a1ea.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     21818
IP address blocks:        74.120.56.0/21 maxlen: 24
                          199.255.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049/e0f03377-8cfb-423d-8440-94047c3af049.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049/e0f03377-8cfb-423d-8440-94047c3af049.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:60:87:9b:fa:01:3d:17:f5:0d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f03377-8cfb-423d-8440-94047c3af049
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=941bc209-8a07-46f8-a4ec-647399a1dcc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2d:94:35:a4:a3:d3:58:37:23:d7:90:01:5c:
                    d9:bf:e6:d3:11:aa:30:2c:ce:1c:72:26:38:fb:37:
                    5c:25:db:86:05:5c:ad:c3:a7:20:30:5b:dd:94:ac:
                    07:05:fb:a2:fd:4b:07:5c:e9:a2:54:3c:71:b3:d1:
                    e1:bf:9c:63:0e:b1:8a:6b:90:63:66:62:c7:b0:1f:
                    88:40:36:9b:7d:b3:f0:58:ad:d8:f5:73:17:ea:ef:
                    1b:f9:50:4a:4c:e8:00:62:24:a5:bb:d8:f8:b7:ba:
                    42:83:35:cf:de:14:b1:db:3b:75:ab:6e:12:af:61:
                    9e:9d:64:62:de:df:7f:7f:33:c7:c6:b4:5d:13:1b:
                    05:0d:c1:70:98:95:2a:07:63:61:39:b6:82:ea:f8:
                    7a:9c:3d:28:8f:35:e0:31:56:d9:7d:a0:e2:95:7f:
                    35:0e:b8:95:fb:33:03:b6:14:70:53:14:82:fa:2d:
                    4a:eb:05:bc:4c:f6:f3:f8:88:61:dd:3f:42:62:30:
                    05:51:d3:f7:08:6c:e1:c4:cf:fa:f1:13:be:24:27:
                    75:ba:2d:62:b0:4d:75:e1:9f:93:2e:3c:dd:ab:5f:
                    97:0e:5b:78:cc:39:5c:75:2f:75:a1:2e:b1:73:5c:
                    e8:c9:3f:6e:45:68:ff:38:93:57:fc:1c:72:61:26:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8E:6D:50:96:1D:33:97:11:B5:85:4C:7E:5A:9E:48:A2:9C:F3:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049/31bb14d5-6af8-3eac-a6b1-08b30101a1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049/e0f03377-8cfb-423d-8440-94047c3af049.crl

            X509v3 Authority Key Identifier:
                keyid:73:C1:69:51:CA:4C:84:C3:C0:E3:1C:0B:90:E3:2E:24:52:2A:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.56.0/21
                  199.255.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c7:37:9b:ed:ce:e7:82:87:1b:b2:77:ad:04:63:18:09:e9:
         68:82:fc:8d:ec:13:4d:43:cd:fa:96:3c:ab:17:27:70:6f:93:
         27:80:e9:2f:d6:2c:29:2c:e7:c9:18:f4:5f:dd:d9:70:21:ea:
         c4:f4:e4:0b:b9:fd:6e:88:a9:cb:6c:dd:3a:58:83:e8:48:30:
         8b:52:05:e6:35:14:d1:7b:8f:6f:12:8a:8b:ca:7a:5f:0a:46:
         3d:4d:91:e6:ad:a6:95:d0:1b:87:5c:22:f3:41:24:5f:d8:ac:
         05:b8:81:26:8a:f5:d9:76:f3:50:da:ea:20:76:41:17:d7:cd:
         4e:c9:07:b4:65:c7:ed:b2:8c:6e:b5:75:f7:bd:af:10:f2:1c:
         56:7f:0f:c5:dc:28:a2:ac:19:1f:bc:86:30:e9:46:b4:14:d5:
         bc:53:91:d8:9f:2c:c8:50:57:03:28:0b:c0:5c:24:64:54:8a:
         bf:6a:7c:9e:27:83:68:e8:bf:29:08:e7:2c:08:ab:db:71:21:
         37:90:77:45:82:db:aa:3c:64:05:15:80:45:f5:72:08:15:7b:
         62:c6:84:79:cd:74:25:79:93:a9:33:c8:29:5f:b1:4e:b0:fc:
         75:60:56:d5:73:b2:e7:cb:84:da:88:35:d9:55:59:4a:75:f6:
         63:1d:8c:29
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqrJmCHm/oBPRf1DeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBmMDMzNzctOGNmYi00MjNkLTg0NDAtOTQwNDdjM2Fm
MDQ5MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
OTQxYmMyMDktOGEwNy00NmY4LWE0ZWMtNjQ3Mzk5YTFkY2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji2UNaSj01g3I9eQAVzZv+bTEaowLM4cciY4
+zdcJduGBVytw6cgMFvdlKwHBfui/UsHXOmiVDxxs9Hhv5xjDrGKa5BjZmLHsB+I
QDabfbPwWK3Y9XMX6u8b+VBKTOgAYiSlu9j4t7pCgzXP3hSx2zt1q24Sr2GenWRi
3t9/fzPHxrRdExsFDcFwmJUqB2NhObaC6vh6nD0ojzXgMVbZfaDilX81DriV+zMD
thRwUxSC+i1K6wW8TPbz+Ihh3T9CYjAFUdP3CGzhxM/68RO+JCd1ui1isE114Z+T
Ljzdq1+XDlt4zDlcdS91oS6xc1zoyT9uRWj/OJNX/BxyYSbrxQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIeObVCWHTOXEbWFTH5ankiinPPFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lMGYw
MzM3Ny04Y2ZiLTQyM2QtODQ0MC05NDA0N2MzYWYwNDkvMzFiYjE0ZDUtNmFmOC0z
ZWFjLWE2YjEtMDhiMzAxMDFhMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTBmMDMzNzctOGNmYi00MjNkLTg0
NDAtOTQwNDdjM2FmMDQ5L2UwZjAzMzc3LThjZmItNDIzZC04NDQwLTk0MDQ3YzNh
ZjA0OS5jcmwwHwYDVR0jBBgwFoAUc8FpUcpMhMPA4xwLkOMuJFIqgeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lMGYwMzM3Ny04Y2ZiLTQyM2QtODQ0MC05NDA0
N2MzYWYwNDkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDSng4AwQC
x//IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFvHN5vtzueChxuyd60EYxgJ6WiC/I3sE01DzfqWPKsXJ3Bv
kyeA6S/WLCks58kY9F/d2XAh6sT05Au5/W6Iqcts3TpYg+hIMItSBeY1FNF7j28S
iovKel8KRj1NkeatppXQG4dcIvNBJF/YrAW4gSaK9dl281Da6iB2QRfXzU7JB7Rl
x+2yjG61dfe9rxDyHFZ/D8XcKKKsGR+8hjDpRrQU1bxTkdifLMhQVwMoC8BcJGRU
ir9qfJ4ng2jovykI5ywIq9txITeQd0WC26o8ZAUVgEX1cggVe2LGhHnNdCV5k6kz
yClfsU6w/HVgVtVzsufLhNqINdlVWUp19mMdjCk=
-----END CERTIFICATE-----
Generated at Sat Aug 2 13:58:27 2025 by rpki-client