Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/77383938-33cf-301d-a6a4-348581ec9a6f.roa
File:                     77383938-33cf-301d-a6a4-348581ec9a6f.roa (raw, json)
Hash identifier:          GB+MLCTiMVLEEac0Fw9cHIubGijdkSs5yQrWhdvgNDA=
Subject key identifier:   52:9C:23:A3:07:48:82:8D:39:2A:6B:F7:18:62:4D:C9:E3:10:C8:23
Certificate issuer:       /CN=0dca6695-752f-4d90-822c-1351355a562e
Certificate serial:       010D0C9F4328584AE1966F048C0EE933A7708D80
Authority key identifier: 4A:DB:D3:45:21:9E:7E:95:81:10:A0:AC:82:EB:5E:D1:9A:46:0C:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/77383938-33cf-301d-a6a4-348581ec9a6f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396982
IP address blocks:        208.92.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:6f:04:8c:0e:e9:33:a7:70:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dca6695-752f-4d90-822c-1351355a562e
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=98b2b152-8359-4929-859a-9d637b0a38b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:1b:1f:47:7a:f8:29:17:2f:88:41:17:99:
                    9c:62:20:5f:e9:61:f9:40:23:44:45:97:b3:1d:86:
                    4d:26:df:dc:02:fd:af:e1:19:6c:a9:4b:94:c7:5c:
                    10:ce:a7:4d:31:eb:a7:64:90:b8:0c:e9:d9:8f:e9:
                    f7:de:b9:8e:d0:db:93:8d:fe:20:ef:25:bc:46:51:
                    07:22:ca:f2:ef:8e:c3:99:84:33:1b:fc:22:5a:42:
                    7b:5a:35:df:26:19:68:5a:7a:1f:3c:08:36:a2:0b:
                    5f:1f:e2:76:67:1b:23:d8:42:43:46:8f:88:c1:91:
                    f8:ba:38:54:de:cb:34:0b:16:93:26:11:18:e6:1e:
                    9a:e9:35:14:a1:0f:fd:13:0b:9a:0f:5e:e0:06:72:
                    c3:51:3b:7f:09:6e:39:bf:53:f9:0e:37:52:cd:0e:
                    c0:d8:30:f4:a5:0a:a8:09:10:96:69:50:c9:cc:63:
                    e9:03:f2:b8:26:a5:5b:b2:04:b8:c4:61:04:15:ca:
                    17:ba:1f:44:24:d9:08:d5:0d:80:1e:a0:46:13:27:
                    f5:68:ae:bb:91:41:16:80:5c:1d:8d:c4:cc:27:11:
                    bd:75:d6:53:3f:e7:38:be:5b:5f:e5:01:b9:20:10:
                    03:c9:74:57:76:65:95:3a:97:5f:b6:75:bb:4e:ad:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9C:23:A3:07:48:82:8D:39:2A:6B:F7:18:62:4D:C9:E3:10:C8:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/77383938-33cf-301d-a6a4-348581ec9a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.crl

            X509v3 Authority Key Identifier:
                keyid:4A:DB:D3:45:21:9E:7E:95:81:10:A0:AC:82:EB:5E:D1:9A:46:0C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a4:ee:8d:43:09:cb:22:ee:0d:91:39:25:c4:1d:c6:83:cb:
         a6:d5:36:19:00:22:fb:8a:0c:ac:1f:e4:4f:d2:a7:36:9c:99:
         ed:6d:50:e0:d3:54:c7:f0:0b:46:93:5a:c1:7f:83:0f:e7:24:
         5b:16:19:b8:8a:68:14:b1:b0:1e:b9:60:f9:04:82:1d:b2:99:
         b3:68:3f:78:f4:c5:de:00:79:2e:33:97:57:d1:da:97:72:94:
         8e:56:bb:37:cd:e3:1f:98:10:8e:92:de:d6:f2:93:96:7e:11:
         ca:9f:95:53:ce:5b:a0:6c:88:a4:29:8a:4b:4a:04:b5:ab:10:
         1a:54:b8:e7:1c:09:e0:81:1c:d6:2d:c6:bb:b6:d5:57:79:bf:
         98:85:95:32:84:2b:5f:7d:84:0d:1d:c1:c2:0b:f5:92:e7:f5:
         64:10:7f:c5:ee:dd:c7:82:b0:2e:ea:da:4f:c7:8d:b6:8a:80:
         cf:8b:34:ba:f3:82:c3:82:b8:85:19:d5:dc:c8:a8:a2:6b:54:
         b3:a2:47:ab:46:04:68:52:55:f7:72:58:15:d8:ad:1a:d7:5b:
         1a:8f:fe:0c:95:0e:a7:e8:2d:de:d9:db:e9:00:8f:2b:67:56:
         93:4f:a0:7c:f2:f8:be:6b:70:29:40:5c:d0:c0:55:7a:a4:56:
         44:9d:0b:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlm8EjA7pM6dwjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGRjYTY2OTUtNzUyZi00ZDkwLTgyMmMtMTM1MTM1NWE1
NjJlMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
OThiMmIxNTItODM1OS00OTI5LTg1OWEtOWQ2MzdiMGEzOGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVkbH0d6+CkXL4hBF5mcYiBf6WH5QCNERZez
HYZNJt/cAv2v4RlsqUuUx1wQzqdNMeunZJC4DOnZj+n33rmO0NuTjf4g7yW8RlEH
Isry747DmYQzG/wiWkJ7WjXfJhloWnofPAg2ogtfH+J2Zxsj2EJDRo+IwZH4ujhU
3ss0CxaTJhEY5h6a6TUUoQ/9EwuaD17gBnLDUTt/CW45v1P5DjdSzQ7A2DD0pQqo
CRCWaVDJzGPpA/K4JqVbsgS4xGEEFcoXuh9EJNkI1Q2AHqBGEyf1aK67kUEWgFwd
jcTMJxG9ddZTP+c4vltf5QG5IBADyXRXdmWVOpdftnW7Tq3pkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKcI6MHSIKNOSpr9xhiTcnjEMgjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZGNh
NjY5NS03NTJmLTRkOTAtODIyYy0xMzUxMzU1YTU2MmUvNzczODM5MzgtMzNjZi0z
MDFkLWE2YTQtMzQ4NTgxZWM5YTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGRjYTY2OTUtNzUyZi00ZDkwLTgy
MmMtMTM1MTM1NWE1NjJlLzBkY2E2Njk1LTc1MmYtNGQ5MC04MjJjLTEzNTEzNTVh
NTYyZS5jcmwwHwYDVR0jBBgwFoAUStvTRSGefpWBEKCsgute0ZpGDHEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wZGNhNjY5NS03NTJmLTRkOTAtODIyYy0xMzUx
MzU1YTU2MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FzIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmk7o1DCcsi7g2ROSXEHcaDy6bVNhkAIvuKDKwf5E/Spzacme1tUODT
VMfwC0aTWsF/gw/nJFsWGbiKaBSxsB65YPkEgh2ymbNoP3j0xd4AeS4zl1fR2pdy
lI5WuzfN4x+YEI6S3tbyk5Z+EcqflVPOW6BsiKQpiktKBLWrEBpUuOccCeCBHNYt
xru21Vd5v5iFlTKEK199hA0dwcIL9ZLn9WQQf8Xu3ceCsC7q2k/HjbaKgM+LNLrz
gsOCuIUZ1dzIqKJrVLOiR6tGBGhSVfdyWBXYrRrXWxqP/gyVDqfoLd7Z2+kAjytn
VpNPoHzy+L5rcClAXNDAVXqkVkSdC+w=
-----END CERTIFICATE-----
Generated at Wed Aug 20 08:46:03 2025 by rpki-client