Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/7112a2d1-bb6b-3d78-b06e-d6ec546c1183.roa
File:                     7112a2d1-bb6b-3d78-b06e-d6ec546c1183.roa (raw, json)
Hash identifier:          8Yb+IDdBqz6T6R7trH/tk75B7+JZwwTtSOR9YDIb41o=
Subject key identifier:   8E:41:85:64:4D:26:4F:B3:DC:AC:64:9F:6E:4D:7B:2E:F4:1F:1A:B5
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584AA85BB89073058065A0F2EF80
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/7112a2d1-bb6b-3d78-b06e-d6ec546c1183.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     20040
IP address blocks:        216.68.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b8:90:73:05:80:65:a0:f2:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=b411a6e4-d891-4cde-81c7-e652c8f59340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:f8:b9:0b:b3:77:ac:86:18:6c:6f:b9:b2:
                    65:67:6d:e5:e5:23:8b:ce:cd:00:34:07:e9:5d:7a:
                    fe:a7:e6:2c:c3:ee:97:91:11:f3:78:2e:42:e7:4f:
                    7a:a2:a1:9f:66:4e:13:60:69:b3:8e:43:ca:f8:a5:
                    fe:27:26:7d:ef:2a:6f:5b:07:1a:65:10:4e:05:d0:
                    f9:92:4a:38:d5:75:c1:9f:64:d4:94:f2:0e:54:98:
                    31:6f:ec:f8:a9:73:5f:12:40:df:a9:37:0b:a4:23:
                    74:d0:7e:70:c7:73:1a:1e:f8:45:af:e6:75:2c:3d:
                    23:bd:fe:1a:44:6a:66:f9:79:dd:ef:6a:5c:66:c2:
                    ea:63:db:1a:4e:be:f1:8f:3c:60:a0:59:3b:73:da:
                    fc:0d:a1:87:52:37:09:89:b5:c6:7f:1a:a9:70:52:
                    07:b1:f0:ac:f6:4a:bf:c7:97:63:a8:c3:c1:e7:e9:
                    13:96:f8:3d:6f:52:3c:97:ca:ef:11:4c:50:45:a4:
                    60:56:7d:e0:37:58:ae:0d:ce:99:c3:ac:f7:70:dd:
                    85:74:3a:f2:ac:c6:e4:26:e0:97:40:7c:2c:9d:35:
                    12:da:8f:c2:89:61:b5:a3:e8:dd:8d:a0:fe:e8:63:
                    83:0d:30:d7:2c:8b:6e:c3:cc:0a:73:a0:90:47:2a:
                    ca:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:41:85:64:4D:26:4F:B3:DC:AC:64:9F:6E:4D:7B:2E:F4:1F:1A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/7112a2d1-bb6b-3d78-b06e-d6ec546c1183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:cd:3d:3c:31:22:38:ab:1c:4e:ef:d8:f2:7c:16:1a:a4:df:
         70:6f:3f:d4:d4:9d:32:90:c2:f5:6a:a9:75:7d:24:08:3f:8b:
         53:58:77:23:27:56:6e:3c:82:35:c6:70:45:55:9c:48:81:0c:
         61:77:a9:cd:b6:41:26:58:f3:ba:8e:bf:7c:29:77:19:ec:42:
         09:00:04:21:8b:e1:7a:1f:d6:54:e1:14:99:ce:82:02:14:ba:
         74:5f:e7:34:7e:dc:bd:89:96:9b:b4:b2:3d:23:93:de:b8:95:
         bd:21:64:d4:7e:4e:ed:15:56:e4:10:2d:b2:b4:ba:88:1a:8e:
         52:7c:ae:4b:83:57:5f:7e:ec:1d:60:c0:48:af:7e:b6:d3:45:
         3e:d5:bb:45:53:da:2b:38:3a:60:82:43:63:21:12:b5:ff:6c:
         60:2e:fb:dd:f0:15:f7:2b:89:c5:bb:13:f5:c7:8e:10:37:6c:
         fd:ac:eb:72:0c:db:fc:4e:29:da:a1:8d:7d:d3:b1:49:29:0f:
         48:07:28:35:73:0c:b0:d1:25:ce:6a:3f:4b:7f:89:ea:c7:bf:
         c0:dc:11:00:c5:2b:0d:fc:6b:2b:f1:c5:ad:dd:87:6d:a0:d8:
         55:26:aa:cf:b8:f4:ba:c0:5e:4c:70:0a:4d:b8:9e:80:84:c4:
         94:20:28:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7iQcwWAZaDy74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz
YTBjMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk
YjQxMWE2ZTQtZDg5MS00Y2RlLTgxYzctZTY1MmM4ZjU5MzQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZL4uQuzd6yGGGxvubJlZ23l5SOLzs0ANAfp
XXr+p+Ysw+6XkRHzeC5C5096oqGfZk4TYGmzjkPK+KX+JyZ97ypvWwcaZRBOBdD5
kko41XXBn2TUlPIOVJgxb+z4qXNfEkDfqTcLpCN00H5wx3MaHvhFr+Z1LD0jvf4a
RGpm+Xnd72pcZsLqY9saTr7xjzxgoFk7c9r8DaGHUjcJibXGfxqpcFIHsfCs9kq/
x5djqMPB5+kTlvg9b1I8l8rvEUxQRaRgVn3gN1iuDc6Zw6z3cN2FdDryrMbkJuCX
QHwsnTUS2o/CiWG1o+jdjaD+6GODDTDXLItuw8wKc6CQRyrKnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI5BhWRNJk+z3Kxkn25Ney70Hxq1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz
OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvNzExMmEyZDEtYmI2Yi0z
ZDc4LWIwNmUtZDZlYzU0NmMxMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4
YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0
M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw
NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ERNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjNPTwxIjirHE7v2PJ8Fhqk33BvP9TUnTKQwvVqqXV9JAg/i1NYdyMn
Vm48gjXGcEVVnEiBDGF3qc22QSZY87qOv3wpdxnsQgkABCGL4Xof1lThFJnOggIU
unRf5zR+3L2Jlpu0sj0jk964lb0hZNR+Tu0VVuQQLbK0uogajlJ8rkuDV19+7B1g
wEivfrbTRT7Vu0VT2is4OmCCQ2MhErX/bGAu+93wFfcricW7E/XHjhA3bP2s63IM
2/xOKdqhjX3TsUkpD0gHKDVzDLDRJc5qP0t/ierHv8DcEQDFKw38ayvxxa3dh22g
2FUmqs+49LrAXkxwCk24noCExJQgKJQ=
-----END CERTIFICATE-----
Generated at Wed Jul 30 13:18:02 2025 by rpki-client