Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/58132a11-8e2a-354a-b569-5f5fc420c67f.roa
File:                     58132a11-8e2a-354a-b569-5f5fc420c67f.roa (raw, json)
Hash identifier:          pI9Cl9r9U6h8otGRgCX2UBfGlAFpxSRKaf6CRQRqW6w=
Subject key identifier:   EF:6C:AE:94:9C:BC:BD:10:35:9E:1A:A3:4F:76:E3:D7:F5:8F:1A:46
Certificate issuer:       /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Certificate serial:       010D0C9F4328584B110C0A355D130DCD68754E18
Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/58132a11-8e2a-354a-b569-5f5fc420c67f.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     399628
IP address blocks:        64.7.197.0/24 maxlen: 24
                          64.94.153.0/24 maxlen: 24
                          64.94.156.0/24 maxlen: 24
                          64.94.159.0/24 maxlen: 24
                          64.95.9.0/24 maxlen: 24
                          64.95.14.0/24 maxlen: 24
                          2620:96:a002::/48 maxlen: 48
                          2620:96:a003::/48 maxlen: 48
                          2620:96:a004::/48 maxlen: 48
                          2620:96:a005::/48 maxlen: 48
                          2620:96:a006::/48 maxlen: 48
                          2620:96:a007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:0a:35:5d:13:0d:cd:68:75:4e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=5bafe712-da9b-412a-b235-e4ed9379646d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:ee:93:1e:38:83:ce:fa:a3:74:77:12:d3:
                    75:12:eb:d3:93:a2:a4:c6:fb:6b:c3:01:d4:0b:ba:
                    54:20:22:52:67:27:f6:f4:00:27:73:b8:58:6c:49:
                    f1:27:83:08:e3:dd:69:33:9a:ae:be:81:8f:e9:fd:
                    d4:f5:a6:5b:69:a1:5a:cc:e8:92:d7:78:23:15:70:
                    5d:35:90:1f:53:08:84:a8:01:8d:ba:20:10:ff:5a:
                    ae:a5:af:3d:30:64:ae:06:05:a4:ff:6c:d0:0f:c2:
                    d5:e8:0e:64:a5:83:02:a8:af:6b:f8:07:bc:24:c7:
                    01:70:f6:c8:d8:c2:31:2b:93:97:bc:f0:2e:9b:19:
                    d1:48:8a:49:f1:89:35:eb:35:72:9e:2a:5e:1a:5d:
                    8c:da:ae:07:e4:12:e8:4a:24:ed:f3:b9:9d:12:92:
                    29:10:b1:81:59:dd:eb:d1:eb:75:75:c2:db:42:1e:
                    d9:1e:3e:4b:92:34:6e:a9:51:a9:15:a6:40:0c:46:
                    39:49:f8:25:4f:57:d3:30:8a:a4:3f:2e:24:3b:81:
                    96:17:eb:8d:be:6e:4f:53:cd:1e:75:ff:c4:28:c6:
                    bb:6b:2e:ba:c0:be:f1:90:e4:fa:38:a8:ea:5b:71:
                    15:4d:41:fa:08:6b:3c:eb:cc:88:7e:92:2b:1c:ec:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6C:AE:94:9C:BC:BD:10:35:9E:1A:A3:4F:76:E3:D7:F5:8F:1A:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/58132a11-8e2a-354a-b569-5f5fc420c67f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl

            X509v3 Authority Key Identifier:
                keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.197.0/24
                  64.94.153.0/24
                  64.94.156.0/24
                  64.94.159.0/24
                  64.95.9.0/24
                  64.95.14.0/24
                IPv6:
                  2620:96:a002::-2620:96:a007:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d0:fc:eb:94:a5:f9:6f:18:ec:02:61:fc:65:1a:54:64:43:
         27:2b:72:87:9d:58:e8:ca:a6:4d:1c:2c:e4:5a:25:4d:17:f2:
         ff:95:9f:b6:4f:82:7d:79:ac:38:c1:2d:57:40:d7:1b:6c:3e:
         ab:5b:25:97:c3:bb:f4:02:3c:ab:8f:ae:e5:9d:58:24:76:75:
         aa:f1:28:cf:36:b7:e7:49:91:a6:b5:f0:51:7c:04:43:6d:66:
         8e:c0:87:1c:8b:65:79:2b:ce:59:41:19:25:52:e3:59:bd:06:
         6d:b3:a0:77:4d:fe:83:30:73:f3:5e:cd:c6:ad:7d:ce:11:76:
         97:b3:b7:bb:25:32:22:a5:d2:b3:c9:29:98:6c:58:39:ce:d1:
         90:46:d4:24:40:59:79:7c:c8:ec:76:d6:bc:0a:a1:4a:b2:a9:
         5f:9c:9c:20:f8:e7:d2:6a:8e:9c:32:3c:5c:2c:8b:6d:f6:01:
         76:16:14:04:38:fe:c3:2b:fc:48:89:ee:81:9d:79:1d:3b:ad:
         12:99:fb:79:ef:71:91:02:48:a6:f8:d4:b6:67:86:87:0a:6c:
         06:7d:2f:24:34:cc:2b:d5:3a:20:bf:8c:53:18:4c:b1:0c:30:
         f3:3e:58:2b:d4:44:11:65:d0:d6:37:96:d0:e2:fb:2e:37:b2:
         a3:42:19:d2
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWEsRDAo1XRMNzWh1ThgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjMxM2E1ZWMtZWRiNS00OWEzLWIzYjMtOTgwZDgwZDhl
NzY2MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk
NWJhZmU3MTItZGE5Yi00MTJhLWIyMzUtZTRlZDkzNzk2NDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSjukx44g876o3R3EtN1EuvTk6KkxvtrwwHU
C7pUICJSZyf29AAnc7hYbEnxJ4MI491pM5quvoGP6f3U9aZbaaFazOiS13gjFXBd
NZAfUwiEqAGNuiAQ/1qupa89MGSuBgWk/2zQD8LV6A5kpYMCqK9r+Ae8JMcBcPbI
2MIxK5OXvPAumxnRSIpJ8Yk16zVynipeGl2M2q4H5BLoSiTt87mdEpIpELGBWd3r
0et1dcLbQh7ZHj5LkjRuqVGpFaZADEY5SfglT1fTMIqkPy4kO4GWF+uNvm5PU80e
df/EKMa7ay66wL7xkOT6OKjqW3EVTUH6CGs868yIfpIrHOz88wIDAQABo4IDjzCC
A4swHQYDVR0OBBYEFO9srpScvL0QNZ4ao09249f1jxpGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMzEz
YTVlYy1lZGI1LTQ5YTMtYjNiMy05ODBkODBkOGU3NjYvNTgxMzJhMTEtOGUyYS0z
NTRhLWI1NjktNWY1ZmM0MjBjNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjMxM2E1ZWMtZWRiNS00OWEzLWIz
YjMtOTgwZDgwZDhlNzY2LzIzMTNhNWVjLWVkYjUtNDlhMy1iM2IzLTk4MGQ4MGQ4
ZTc2Ni5jcmwwHwYDVR0jBBgwFoAUjxrzeGIjGzrpD8kDBhRRObCYM+4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMzEzYTVlYy1lZGI1LTQ5YTMtYjNiMy05ODBk
ODBkOGU3NjYuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDAqBAIAATAkAwQAQAfFAwQA
QF6ZAwQAQF6cAwQAQF6fAwQAQF8JAwQAQF8OMBoEAgACMBQwEgMHASYgAJagAgMH
AyYgAJagADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQBA0PzrlKX5bxjsAmH8ZRpUZEMnK3KHnVjoyqZNHCzk
WiVNF/L/lZ+2T4J9eaw4wS1XQNcbbD6rWyWXw7v0Ajyrj67lnVgkdnWq8SjPNrfn
SZGmtfBRfARDbWaOwIcci2V5K85ZQRklUuNZvQZts6B3Tf6DMHPzXs3GrX3OEXaX
s7e7JTIipdKzySmYbFg5ztGQRtQkQFl5fMjsdta8CqFKsqlfnJwg+OfSao6cMjxc
LItt9gF2FhQEOP7DK/xIie6BnXkdO60Smft573GRAkim+NS2Z4aHCmwGfS8kNMwr
1Togv4xTGEyxDDDzPlgr1EQRZdDWN5bQ4vsuN7KjQhnS
-----END CERTIFICATE-----
Generated at Sun Sep 14 00:41:12 2025 by rpki-client