Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/6501f4f1-eb9a-3abf-ad07-be7703f4a19c.roa
File:                     6501f4f1-eb9a-3abf-ad07-be7703f4a19c.roa (raw, json)
Hash identifier:          mNihFKFkSKGt12yq7FoOx02+7I1pcSvuF2w6fnnMW5Q=
Subject key identifier:   CE:B7:4D:46:7B:D5:47:AB:33:83:06:74:CA:F6:24:C9:00:E6:5A:2C
Certificate issuer:       /CN=39993af2-98b1-47da-a218-47109f41cb97
Certificate serial:       010D0C9F4328584A28AB13C8E8CA01BFC7E5EEA0
Authority key identifier: 12:D9:FD:69:DE:67:DD:AB:84:4D:8C:72:61:39:2F:F6:D2:4F:76:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/6501f4f1-eb9a-3abf-ad07-be7703f4a19c.roa
Signing time:             Wed 11 Jun 2025 19:17:48 +0000
ROA not before:           Wed 11 Jun 2025 19:17:48 +0000
ROA not after:            Tue 09 Sep 2025 19:17:48 +0000
asID:                     4150
IP address blocks:        162.250.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:28:ab:13:c8:e8:ca:01:bf:c7:e5:ee:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39993af2-98b1-47da-a218-47109f41cb97
        Validity
            Not Before: Jun 11 19:17:48 2025 GMT
            Not After : Sep  9 19:17:48 2025 GMT
        Subject: CN=f1d5c2bd-6e3f-401c-81f1-a080e5a0fb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:f5:f4:6b:9b:85:e5:32:a8:ad:1b:ec:99:
                    2b:6c:ed:60:8c:07:e7:43:8d:22:29:92:dc:c0:b7:
                    6a:46:2c:72:7f:9b:ed:1f:db:09:52:a8:23:22:b1:
                    9f:58:60:1f:80:61:83:a9:81:bb:7e:41:c8:5f:86:
                    3c:68:24:e0:dd:4d:25:e9:7a:f3:7a:8b:ee:09:76:
                    a0:b9:53:e4:c1:c8:c4:87:92:48:2b:37:85:5b:d6:
                    66:31:f5:b5:12:5d:d4:dd:93:99:1f:cd:f4:52:b2:
                    e3:da:53:04:b7:58:df:4e:76:c7:a2:49:a6:67:14:
                    c4:4e:3f:cd:37:6f:d1:7d:ea:3d:02:78:30:6b:0e:
                    95:d6:1d:c4:28:5f:73:a1:21:37:90:e6:bc:90:1b:
                    29:70:1f:f9:a4:b5:14:46:85:01:4d:97:42:80:03:
                    20:ed:87:10:30:4b:26:d6:f4:1d:35:ab:d8:d2:29:
                    df:59:15:c2:39:1b:b2:09:61:e8:56:05:cf:a8:02:
                    ba:c5:d1:1e:ed:a9:fe:f1:c4:5d:5c:22:e8:39:a1:
                    7d:04:90:67:38:14:ea:cc:01:c7:a0:93:34:a7:a9:
                    6d:94:38:0e:0a:8b:81:2c:65:42:70:b7:6a:7f:e3:
                    04:25:26:f8:03:96:99:79:a6:c9:04:c2:a6:b8:75:
                    08:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B7:4D:46:7B:D5:47:AB:33:83:06:74:CA:F6:24:C9:00:E6:5A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/6501f4f1-eb9a-3abf-ad07-be7703f4a19c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.crl

            X509v3 Authority Key Identifier:
                keyid:12:D9:FD:69:DE:67:DD:AB:84:4D:8C:72:61:39:2F:F6:D2:4F:76:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:32:25:72:b0:bd:28:69:08:aa:b7:b0:64:b7:5e:69:a6:6d:
         f2:7c:73:74:36:8d:ae:ca:25:1f:8c:be:65:87:bb:46:88:21:
         a0:9c:b1:fb:9e:b0:b6:7e:45:f5:13:dc:4d:82:92:d2:b8:9b:
         8f:4a:7b:2f:45:ba:c6:dd:c6:1f:a2:bc:03:fa:62:46:f9:07:
         41:25:3f:91:62:2f:2f:0a:b6:00:c7:28:aa:45:e9:eb:ec:4c:
         44:59:16:f8:8d:2e:a4:61:24:55:c1:dc:22:ae:41:fa:4a:08:
         d8:0d:1f:e8:6e:fc:71:e7:34:06:53:26:56:df:48:5b:67:13:
         18:4a:b8:dc:38:e4:91:c3:33:b2:61:2a:7a:1e:99:cf:5b:b0:
         45:1f:99:22:5c:24:68:60:bf:28:fe:04:4d:2a:71:cd:2a:30:
         d3:eb:9b:90:d0:2d:66:9f:0a:a6:ed:23:82:9c:85:26:dd:9f:
         30:b2:57:8a:92:15:c8:57:bd:a9:5b:66:a1:0b:c4:c6:c4:88:
         9e:c0:b9:26:9e:e7:66:a4:35:64:9b:16:c9:31:51:5f:e1:b6:
         c4:d3:c7:06:3d:87:a9:70:32:d6:cd:f7:7d:9d:af:a7:f7:81:
         5f:aa:1a:96:2b:f4:66:e9:0e:b7:9c:36:0d:98:ce:36:1c:af:
         30:91:8c:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEooqxPI6MoBv8fl7qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk5OTNhZjItOThiMS00N2RhLWEyMTgtNDcxMDlmNDFj
Yjk3MB4XDTI1MDYxMTE5MTc0OFoXDTI1MDkwOTE5MTc0OFowLzEtMCsGA1UEAxMk
ZjFkNWMyYmQtNmUzZi00MDFjLTgxZjEtYTA4MGU1YTBmYjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1f19GubheUyqK0b7JkrbO1gjAfnQ40iKZLc
wLdqRixyf5vtH9sJUqgjIrGfWGAfgGGDqYG7fkHIX4Y8aCTg3U0l6XrzeovuCXag
uVPkwcjEh5JIKzeFW9ZmMfW1El3U3ZOZH830UrLj2lMEt1jfTnbHokmmZxTETj/N
N2/Rfeo9Angwaw6V1h3EKF9zoSE3kOa8kBspcB/5pLUURoUBTZdCgAMg7YcQMEsm
1vQdNavY0infWRXCORuyCWHoVgXPqAK6xdEe7an+8cRdXCLoOaF9BJBnOBTqzAHH
oJM0p6ltlDgOCouBLGVCcLdqf+MEJSb4A5aZeabJBMKmuHUIvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM63TUZ71UerM4MGdMr2JMkA5losMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTk5
M2FmMi05OGIxLTQ3ZGEtYTIxOC00NzEwOWY0MWNiOTcvNjUwMWY0ZjEtZWI5YS0z
YWJmLWFkMDctYmU3NzAzZjRhMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk5OTNhZjItOThiMS00N2RhLWEy
MTgtNDcxMDlmNDFjYjk3LzM5OTkzYWYyLTk4YjEtNDdkYS1hMjE4LTQ3MTA5ZjQx
Y2I5Ny5jcmwwHwYDVR0jBBgwFoAUEtn9ad5n3auETYxyYTkv9tJPdtYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTk5M2FmMi05OGIxLTQ3ZGEtYTIxOC00NzEw
OWY0MWNiOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovooMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALAyJXKwvShpCKq3sGS3XmmmbfJ8c3Q2ja7KJR+MvmWHu0aIIaCcsfue
sLZ+RfUT3E2CktK4m49Key9Fusbdxh+ivAP6Ykb5B0ElP5FiLy8KtgDHKKpF6evs
TERZFviNLqRhJFXB3CKuQfpKCNgNH+hu/HHnNAZTJlbfSFtnExhKuNw45JHDM7Jh
Knoemc9bsEUfmSJcJGhgvyj+BE0qcc0qMNPrm5DQLWafCqbtI4KchSbdnzCyV4qS
FchXvalbZqELxMbEiJ7AuSae52akNWSbFskxUV/htsTTxwY9h6lwMtbN932dr6f3
gV+qGpYr9GbpDrecNg2YzjYcrzCRjJU=
-----END CERTIFICATE-----
Generated at Sun Jul 6 23:16:40 2025 by rpki-client