Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/a1a08b9b-16ba-3610-8b97-cc7b5d6f36a2.roa
File:                     a1a08b9b-16ba-3610-8b97-cc7b5d6f36a2.roa (raw, json)
Hash identifier:          mLETMQDJr+ZHqdIf8/9KIu3qPlzWRmFDmK8RrQTA5OA=
Subject key identifier:   AA:60:0E:FE:83:4C:15:74:45:17:82:56:7C:0F:DA:29:71:6A:60:3B
Certificate issuer:       /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial:       010D0C9F4328584A6825FF2782CD1407C6FF1493
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/a1a08b9b-16ba-3610-8b97-cc7b5d6f36a2.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     19331
IP address blocks:        149.106.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:ff:27:82:cd:14:07:c6:ff:14:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=1041ff92-d640-4725-94da-0e8cf6553c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:29:fb:bf:1f:77:46:75:18:63:8d:7e:f4:
                    8f:e5:e2:a1:83:48:14:50:71:5f:67:62:84:73:6a:
                    aa:e3:d7:d6:3a:83:99:a2:5b:12:6a:39:91:8c:3b:
                    7e:cd:f1:68:f4:58:22:bc:67:45:c6:c8:78:0c:13:
                    cf:41:eb:d4:d9:b5:ad:8c:89:9a:e5:82:3c:e6:b5:
                    f1:f3:0e:28:91:b6:ad:f5:67:7c:28:e0:fd:2b:ed:
                    94:3d:13:54:2e:51:91:9b:c2:13:61:fc:96:ef:6f:
                    16:4f:8b:f9:81:9f:54:ab:e6:5a:9a:4f:e0:44:1d:
                    35:23:e6:e4:95:29:8c:40:ad:62:70:ab:1c:53:73:
                    6e:0e:36:4a:f6:81:18:de:9d:90:78:ac:62:b9:4b:
                    44:fe:c6:fb:6e:13:68:ae:10:21:2a:79:05:ab:03:
                    6d:31:5c:e5:ad:b2:fa:9e:13:8d:a2:36:8b:63:d5:
                    1c:b4:dd:cd:01:66:00:ca:30:45:2c:b7:02:17:e8:
                    62:be:d2:2b:d5:39:97:50:69:5d:fb:8b:53:24:91:
                    61:46:f3:74:e6:74:60:dd:36:59:6f:69:dd:8a:42:
                    53:41:2f:36:0a:40:89:c1:42:4a:e5:de:f3:1f:53:
                    14:52:34:96:48:10:47:f5:fb:63:7f:f0:eb:b8:d5:
                    a5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:60:0E:FE:83:4C:15:74:45:17:82:56:7C:0F:DA:29:71:6A:60:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/a1a08b9b-16ba-3610-8b97-cc7b5d6f36a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl

            X509v3 Authority Key Identifier:
                keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.106.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:36:b5:a6:ab:79:81:3f:fc:15:3e:c4:da:5f:df:d7:3c:12:
         12:b8:e5:48:aa:0c:34:34:0a:a9:3f:a9:d8:46:91:90:19:e1:
         18:3c:30:8f:6a:e3:c2:52:cb:d8:8c:e1:8b:76:72:74:3c:af:
         83:a8:0d:cf:50:a2:a1:ce:8b:42:43:67:f4:89:81:94:7b:fd:
         f5:cd:32:2c:d3:ed:ef:48:2e:2f:92:89:27:3d:61:00:ac:61:
         b4:99:ed:68:63:f6:04:a3:00:f8:37:fb:64:0c:d0:72:9f:4f:
         f2:1c:d3:ea:d1:93:a3:64:88:86:93:e3:1c:75:34:50:50:36:
         78:23:d4:bd:a3:4a:9a:75:df:d6:ae:5a:9e:9c:18:5f:d0:8f:
         2e:66:de:fa:ea:1c:d6:b3:fd:a0:ea:90:9b:91:0f:5f:03:43:
         29:4c:1a:83:a8:28:1a:77:da:4b:da:15:60:df:99:19:66:58:
         5d:1a:ec:5a:d9:8a:13:ec:95:51:e6:7b:5e:b7:4e:48:70:29:
         8d:1c:8b:5c:75:a7:6b:ff:1d:bb:92:95:ae:1c:12:0b:8c:ca:
         4a:8c:84:9c:c1:1f:d9:8c:e2:55:00:84:75:84:dc:1a:ea:70:
         70:07:65:e9:dd:af:36:0e:ab:57:00:36:f0:d5:43:54:29:f7:
         8b:de:b4:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJf8ngs0UB8b/FJMwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhiMDJlZDItZjg5Ny00NWJlLWI5ZmItMzQ2Mjk0NDE4
ZWNiMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
MTA0MWZmOTItZDY0MC00NzI1LTk0ZGEtMGU4Y2Y2NTUzYzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDsp+78fd0Z1GGONfvSP5eKhg0gUUHFfZ2KE
c2qq49fWOoOZolsSajmRjDt+zfFo9FgivGdFxsh4DBPPQevU2bWtjIma5YI85rXx
8w4okbat9Wd8KOD9K+2UPRNULlGRm8ITYfyW728WT4v5gZ9Uq+Zamk/gRB01I+bk
lSmMQK1icKscU3NuDjZK9oEY3p2QeKxiuUtE/sb7bhNorhAhKnkFqwNtMVzlrbL6
nhONojaLY9UctN3NAWYAyjBFLLcCF+hivtIr1TmXUGld+4tTJJFhRvN05nRg3TZZ
b2ndikJTQS82CkCJwUJK5d7zH1MUUjSWSBBH9ftjf/DruNWliwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKpgDv6DTBV0RReCVnwP2ilxamA7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80OGIw
MmVkMi1mODk3LTQ1YmUtYjlmYi0zNDYyOTQ0MThlY2IvYTFhMDhiOWItMTZiYS0z
NjEwLThiOTctY2M3YjVkNmYzNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDhiMDJlZDItZjg5Ny00NWJlLWI5
ZmItMzQ2Mjk0NDE4ZWNiLzQ4YjAyZWQyLWY4OTctNDViZS1iOWZiLTM0NjI5NDQx
OGVjYi5jcmwwHwYDVR0jBBgwFoAU8ShDZzN0rvFkkge9rUVjecCogvAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80OGIwMmVkMi1mODk3LTQ1YmUtYjlmYi0zNDYy
OTQ0MThlY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlWogMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB42taareYE//BU+xNpf39c8EhK45UiqDDQ0Cqk/qdhGkZAZ4Rg8MI9q
48JSy9iM4Yt2cnQ8r4OoDc9QoqHOi0JDZ/SJgZR7/fXNMizT7e9ILi+SiSc9YQCs
YbSZ7Whj9gSjAPg3+2QM0HKfT/Ic0+rRk6NkiIaT4xx1NFBQNngj1L2jSpp139au
Wp6cGF/Qjy5m3vrqHNaz/aDqkJuRD18DQylMGoOoKBp32kvaFWDfmRlmWF0a7FrZ
ihPslVHme163TkhwKY0ci1x1p2v/HbuSla4cEguMykqMhJzBH9mM4lUAhHWE3Brq
cHAHZendrzYOq1cANvDVQ1Qp94vetHg=
-----END CERTIFICATE-----
Generated at Sun Aug 3 01:12:37 2025 by rpki-client