Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b004097e-cea3-32cc-a5e6-1459a1b252ec.roa
File:                     b004097e-cea3-32cc-a5e6-1459a1b252ec.roa (raw, json)
Hash identifier:          5eDrv8mXicz81vwG1VNEaln1hdZ/VA3mwB7it7ONDEc=
Subject key identifier:   19:CC:91:08:BF:96:0F:F9:8D:58:38:F8:5C:D0:54:3F:31:CA:9F:8F
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A63F5BB9D24B134C30B501EC0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b004097e-cea3-32cc-a5e6-1459a1b252ec.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     11233
IP address blocks:        192.95.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:bb:9d:24:b1:34:c3:0b:50:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=95093871-102e-4155-b75b-0e730d74a78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:fb:ee:59:42:64:bb:f0:84:f1:65:2f:9e:
                    95:fa:7a:ec:e2:bf:d6:d1:97:99:da:f6:4f:94:27:
                    f5:a7:9e:39:67:c7:0b:aa:52:36:45:14:36:5a:1a:
                    61:68:43:09:7b:0f:a7:72:7d:2f:d5:1a:67:e6:f5:
                    91:2a:e7:44:8d:51:3d:ff:58:9c:11:d6:71:95:48:
                    18:a4:72:a2:7d:cf:bb:6e:d9:a7:01:99:d6:23:e3:
                    1e:d6:83:c8:d7:04:a0:23:f7:39:60:fc:3e:45:a7:
                    a0:34:24:93:55:59:da:d1:65:20:23:56:8e:df:d3:
                    70:26:67:0a:08:2d:a4:5a:55:4e:b4:13:f6:08:3e:
                    51:9c:a4:73:f3:70:e7:60:8c:af:f5:34:b0:4e:a5:
                    36:d3:5e:d1:70:be:f0:72:06:b1:5c:7e:4c:91:ca:
                    26:64:bd:94:9c:31:b6:ef:76:f7:43:27:64:f0:01:
                    1f:a6:3d:fb:c2:b4:ac:70:13:a8:77:1b:6d:02:d9:
                    34:4b:b0:2b:54:91:dd:61:93:f0:c7:93:7b:a1:77:
                    33:c5:58:5d:98:86:c7:52:6a:46:94:3a:25:59:58:
                    7f:cd:c1:db:7d:f8:8c:97:98:2b:b4:1f:ad:41:ad:
                    db:48:76:d8:e7:3d:a9:7b:2f:20:92:cd:3f:27:83:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CC:91:08:BF:96:0F:F9:8D:58:38:F8:5C:D0:54:3F:31:CA:9F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b004097e-cea3-32cc-a5e6-1459a1b252ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.95.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9e:b4:7c:10:12:a3:c3:ca:69:68:66:7c:71:b4:56:b7:e5:
         b2:73:15:5f:d4:9f:85:ee:7b:e8:ba:44:7f:df:74:d9:59:8d:
         fb:f6:69:9c:61:5f:17:60:2f:dc:67:52:a3:78:04:52:dc:97:
         96:98:37:29:9a:2f:87:d1:d6:47:0a:25:1a:5a:b7:09:ec:12:
         df:2d:06:3b:f8:17:c7:89:b7:96:3e:e7:89:62:9f:5f:08:be:
         4f:69:50:d6:0c:60:41:a9:2c:23:88:98:6a:25:0f:ee:c7:d1:
         17:93:d4:30:16:0a:41:a2:49:ec:f3:1b:55:4f:7c:64:0f:7a:
         e4:79:52:5e:22:85:ed:36:9f:e2:44:20:4f:ff:73:9c:ca:e0:
         46:d8:42:be:58:b4:bd:93:a6:20:31:88:15:0e:9e:53:aa:5c:
         1b:c2:1f:b7:c8:bc:cd:3b:97:5c:a9:68:7b:db:d6:d0:12:2f:
         9f:2b:d9:3f:26:69:c4:0d:44:67:89:da:63:1f:51:d3:73:b4:
         f2:49:0b:73:4f:6e:52:6d:66:a4:73:58:8b:1e:f9:77:fa:63:
         fa:68:86:1d:a8:f0:c9:01:56:78:c8:b2:1c:54:28:ed:d5:22:
         e5:5f:47:de:ea:84:cb:12:bb:68:0f:b2:f7:9e:e6:a0:c4:69:
         29:b6:b2:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpj9budJLE0wwtQHsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk
OTUwOTM4NzEtMTAyZS00MTU1LWI3NWItMGU3MzBkNzRhNzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvub77llCZLvwhPFlL56V+nrs4r/W0ZeZ2vZP
lCf1p545Z8cLqlI2RRQ2WhphaEMJew+ncn0v1Rpn5vWRKudEjVE9/1icEdZxlUgY
pHKifc+7btmnAZnWI+Me1oPI1wSgI/c5YPw+RaegNCSTVVna0WUgI1aO39NwJmcK
CC2kWlVOtBP2CD5RnKRz83DnYIyv9TSwTqU2017RcL7wcgaxXH5MkcomZL2UnDG2
73b3Qydk8AEfpj37wrSscBOodxttAtk0S7ArVJHdYZPwx5N7oXczxVhdmIbHUmpG
lDolWVh/zcHbffiMl5grtB+tQa3bSHbY5z2pey8gks0/J4O6ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBnMkQi/lg/5jVg4+FzQVD8xyp+PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYjAwNDA5N2UtY2VhMy0z
MmNjLWE1ZTYtMTQ1OWExYjI1MmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwF9GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKetHwQEqPDymloZnxxtFa35bJzFV/Un4Xue+i6RH/fdNlZjfv2aZxh
XxdgL9xnUqN4BFLcl5aYNymaL4fR1kcKJRpatwnsEt8tBjv4F8eJt5Y+54lin18I
vk9pUNYMYEGpLCOImGolD+7H0ReT1DAWCkGiSezzG1VPfGQPeuR5Ul4ihe02n+JE
IE//c5zK4EbYQr5YtL2TpiAxiBUOnlOqXBvCH7fIvM07l1ypaHvb1tASL58r2T8m
acQNRGeJ2mMfUdNztPJJC3NPblJtZqRzWIse+Xf6Y/pohh2o8MkBVnjIshxUKO3V
IuVfR97qhMsSu2gPsvee5qDEaSm2suw=
-----END CERTIFICATE-----
Generated at Wed Jul 9 14:52:01 2025 by rpki-client