Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a6a2c7ab-37a8-3cd0-a0f0-5d50e375df65.roa
File:                     a6a2c7ab-37a8-3cd0-a0f0-5d50e375df65.roa (raw, json)
Hash identifier:          75PQ/m98hKn1amup90yk5+T+OdWdkM0erj5pBIzFZOU=
Subject key identifier:   1D:61:22:69:7E:A4:A7:7A:F4:26:18:4B:C4:D0:5E:50:A2:AE:F0:A3
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727CE40DA1C75B048314180
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a6a2c7ab-37a8-3cd0-a0f0-5d50e375df65.roa
Signing time:             Fri 30 May 2025 19:11:37 +0000
ROA not before:           Fri 30 May 2025 19:11:37 +0000
ROA not after:            Thu 28 Aug 2025 19:11:37 +0000
asID:                     81
IP address blocks:        128.109.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:ce:40:da:1c:75:b0:48:31:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:37 2025 GMT
            Not After : Aug 28 19:11:37 2025 GMT
        Subject: CN=33379459-9bed-45bf-86b8-482c2be8fc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:71:a0:cc:af:68:5a:f8:bd:9f:72:37:21:1f:
                    77:5e:75:4a:60:e3:ab:f4:fb:d5:77:50:16:f6:3c:
                    ef:bf:c2:ba:c0:de:59:8d:0b:8f:48:8e:7a:4b:73:
                    06:7e:40:c3:9c:58:b0:a3:09:4d:69:47:78:bc:0b:
                    ee:97:c1:06:d3:8c:48:7a:9b:78:7d:1c:e6:90:10:
                    8c:39:66:d8:d7:40:1f:07:0d:c5:b8:4b:42:3f:0f:
                    da:40:af:d8:fe:16:bb:18:d9:e8:3f:d6:20:f7:6a:
                    50:62:7c:da:8a:d8:b7:5c:10:d6:10:8f:ca:34:32:
                    a5:d6:da:f0:9f:00:2b:63:75:37:53:c1:2c:07:a5:
                    9b:6b:5c:d4:22:69:ed:41:35:6e:55:27:dd:e4:bc:
                    02:ac:8f:58:40:37:dd:6b:e2:31:7a:6e:aa:2c:de:
                    7f:37:88:37:a0:a3:66:16:a2:b6:97:88:56:9c:ac:
                    60:a3:1f:99:52:44:6f:84:16:89:b9:10:a6:70:65:
                    8d:f8:22:81:e9:6c:77:79:d6:37:d9:71:ed:b9:cb:
                    c7:76:37:93:dd:0c:1f:7f:eb:10:f0:2a:88:b7:59:
                    f9:e9:51:0c:1a:8c:fe:1d:54:b1:55:a0:c0:c2:15:
                    91:fe:4d:73:0d:88:89:45:ad:69:9c:f8:b4:cf:91:
                    fe:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:61:22:69:7E:A4:A7:7A:F4:26:18:4B:C4:D0:5E:50:A2:AE:F0:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a6a2c7ab-37a8-3cd0-a0f0-5d50e375df65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.109.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4f:b6:7b:d9:fc:5c:37:34:11:09:1f:7f:32:fb:57:10:a1:
         12:02:5f:32:b7:e3:87:0e:2d:4f:ff:a1:f5:bd:80:e7:58:cc:
         9c:28:c7:bd:5c:d6:4d:af:33:cd:a6:ac:33:da:79:fa:d0:f0:
         fc:39:c5:75:87:75:7e:f1:6c:07:c6:1b:ca:ac:bc:d3:bd:d3:
         31:90:8a:98:5d:27:d3:5f:8e:03:85:2a:78:72:be:d5:93:4a:
         6a:58:22:d9:11:d2:50:fb:40:5f:3c:11:00:90:d7:30:74:42:
         13:b7:2d:06:f0:5e:1f:19:31:7d:db:d3:94:51:a5:7a:8b:73:
         21:b6:03:8e:9a:6f:70:e6:df:9d:e2:89:e3:c3:12:30:7f:96:
         16:da:bc:ff:c3:d0:6e:51:fe:2a:12:ba:59:8e:24:a4:7f:62:
         a7:7a:0d:bc:6e:ed:d9:07:10:19:9f:90:da:37:54:35:b2:10:
         a1:98:db:80:85:1b:16:fb:4a:9f:dd:fc:dc:14:64:ae:c1:6c:
         57:a9:9c:36:76:85:52:68:f8:e4:a6:eb:48:c4:8b:cb:69:bf:
         ba:1e:e7:51:5a:f4:7b:7d:87:53:34:44:33:1b:e2:be:6a:1a:
         62:05:6c:c5:a4:da:8b:fe:f8:fb:10:b1:ea:18:45:36:bb:cb:
         80:27:91:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ85A2hx1sEgxQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDUzMDE5MTEzN1oXDTI1MDgyODE5MTEzN1owLzEtMCsGA1UEAxMk
MzMzNzk0NTktOWJlZC00NWJmLTg2YjgtNDgyYzJiZThmYzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XGgzK9oWvi9n3I3IR93XnVKYOOr9PvVd1AW
9jzvv8K6wN5ZjQuPSI56S3MGfkDDnFiwowlNaUd4vAvul8EG04xIept4fRzmkBCM
OWbY10AfBw3FuEtCPw/aQK/Y/ha7GNnoP9Yg92pQYnzaiti3XBDWEI/KNDKl1trw
nwArY3U3U8EsB6Wba1zUImntQTVuVSfd5LwCrI9YQDfda+Ixem6qLN5/N4g3oKNm
FqK2l4hWnKxgox+ZUkRvhBaJuRCmcGWN+CKB6Wx3edY32XHtucvHdjeT3Qwff+sQ
8CqIt1n56VEMGoz+HVSxVaDAwhWR/k1zDYiJRa1pnPi0z5H+iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB1hIml+pKd69CYYS8TQXlCirvCjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTZhMmM3YWItMzdhOC0z
Y2QwLWEwZjAtNWQ1MGUzNzVkZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG1WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5PtnvZ/Fw3NBEJH38y+1cQoRICXzK344cOLU//ofW9gOdYzJwox71c
1k2vM82mrDPaefrQ8Pw5xXWHdX7xbAfGG8qsvNO90zGQiphdJ9NfjgOFKnhyvtWT
SmpYItkR0lD7QF88EQCQ1zB0QhO3LQbwXh8ZMX3b05RRpXqLcyG2A46ab3Dm353i
iePDEjB/lhbavP/D0G5R/ioSulmOJKR/Yqd6Dbxu7dkHEBmfkNo3VDWyEKGY24CF
Gxb7Sp/d/NwUZK7BbFepnDZ2hVJo+OSm60jEi8tpv7oe51Fa9Ht9h1M0RDMb4r5q
GmIFbMWk2ov++PsQseoYRTa7y4Anke0=
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:18:06 2025 by rpki-client