Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/e59c87cb-9a71-3036-83a8-60e2d84bcd06.roa
File:                     e59c87cb-9a71-3036-83a8-60e2d84bcd06.roa (raw, json)
Hash identifier:          pq3wlayf2QFh5yjun8WFRw8FzYbAaqMtsT5TOgadSWs=
Subject key identifier:   DE:86:D7:42:F0:59:29:8E:96:BD:40:6A:34:9E:52:22:F6:DB:58:DC
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F4328584B13D6B0EC2D9D3D7900F2F040
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/e59c87cb-9a71-3036-83a8-60e2d84bcd06.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     30698
IP address blocks:        209.221.254.0/24 maxlen: 24
                          209.221.255.0/24 maxlen: 24
                          216.213.52.0/24 maxlen: 24
                          216.213.53.0/24 maxlen: 24
                          216.213.54.0/24 maxlen: 24
                          216.213.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b0:ec:2d:9d:3d:79:00:f2:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=36771eed-3f17-4de6-acaa-bf13228a768e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2c:ad:bc:6e:d1:67:14:40:6b:8c:95:c7:f3:
                    5e:36:1a:12:77:90:5a:3b:77:65:9c:51:28:a1:96:
                    c0:11:f0:ab:bd:99:cb:9c:51:74:54:91:3c:e8:a2:
                    b3:93:9a:0f:88:a6:cd:51:04:df:78:73:a3:8d:31:
                    02:8a:e5:30:0a:8d:7d:f1:ac:22:13:2a:e2:9b:73:
                    62:d0:9c:c2:0b:44:bd:57:63:26:6f:40:5b:5c:8b:
                    6b:a7:e0:d0:18:ec:93:65:26:c1:29:05:95:05:1e:
                    36:0a:f9:9b:f2:1e:93:4d:55:eb:88:17:24:18:cf:
                    55:e7:5c:39:67:53:c3:34:33:c0:76:d0:68:b4:b4:
                    7c:83:10:9f:34:8c:b7:71:e0:f0:ad:61:91:54:a9:
                    26:12:83:81:18:8f:cc:c7:31:05:0d:56:5b:92:db:
                    4a:ba:27:fd:00:f4:89:36:be:b1:24:c2:06:64:62:
                    c0:f5:37:a1:66:39:aa:bf:62:bd:3e:52:dd:08:46:
                    7e:47:e5:8b:56:23:70:d9:b0:7f:8d:23:01:75:f6:
                    39:5b:5d:94:ff:90:dd:5e:d9:f5:0b:f0:13:fa:6f:
                    06:64:ee:19:36:5c:6b:a5:75:70:99:87:37:b1:c2:
                    12:e8:21:7f:a3:c0:19:9c:e2:b9:3c:21:1f:26:a5:
                    86:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:86:D7:42:F0:59:29:8E:96:BD:40:6A:34:9E:52:22:F6:DB:58:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/e59c87cb-9a71-3036-83a8-60e2d84bcd06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.254.0/23
                  216.213.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:b2:26:b2:03:67:f9:05:30:65:e9:44:b7:d0:d7:2b:53:a7:
         03:02:c8:54:53:6b:5f:9f:2d:ae:1e:e5:79:c4:4b:ce:73:ad:
         e2:2b:2e:c7:f8:25:77:74:30:17:4e:1c:7d:2f:85:0d:af:51:
         86:07:8a:1d:18:35:8b:34:5b:12:99:f1:bf:73:4d:2e:84:f5:
         b9:c2:14:59:c9:7c:47:d9:7f:1d:eb:9a:2c:fa:fb:52:9c:7a:
         ad:9c:48:7b:08:8e:c5:37:b9:99:18:3d:bb:cf:eb:6d:7a:fb:
         7f:01:1c:a3:9e:e6:fa:5e:6f:7e:1b:fb:a0:ce:b0:e4:b1:25:
         f4:ee:32:a0:a1:4f:80:69:01:c0:69:14:c0:e8:dd:23:e9:6b:
         30:54:2f:76:bd:25:e2:04:aa:fc:3f:0f:ff:33:6f:18:44:e2:
         66:73:19:16:ab:ac:64:11:15:26:df:eb:3c:5e:7d:8d:88:8f:
         77:e2:f0:36:9d:cf:5f:a7:14:31:19:96:ea:ef:36:41:ee:e5:
         ba:ab:74:02:cc:29:8f:7e:7d:d2:01:6d:97:ff:34:1a:c5:7c:
         c3:11:be:a9:a1:0e:d7:22:49:97:30:7a:df:e2:d8:f3:a0:ee:
         e6:71:be:0c:67:c8:13:32:ee:84:25:43:77:dc:aa:73:4e:b1:
         14:a9:52:34
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsT1rDsLZ09eQDy8EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl
YjQ5MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
MzY3NzFlZWQtM2YxNy00ZGU2LWFjYWEtYmYxMzIyOGE3NjhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSytvG7RZxRAa4yVx/NeNhoSd5BaO3dlnFEo
oZbAEfCrvZnLnFF0VJE86KKzk5oPiKbNUQTfeHOjjTECiuUwCo198awiEyrim3Ni
0JzCC0S9V2Mmb0BbXItrp+DQGOyTZSbBKQWVBR42Cvmb8h6TTVXriBckGM9V51w5
Z1PDNDPAdtBotLR8gxCfNIy3ceDwrWGRVKkmEoOBGI/MxzEFDVZbkttKuif9APSJ
Nr6xJMIGZGLA9TehZjmqv2K9PlLdCEZ+R+WLViNw2bB/jSMBdfY5W12U/5DdXtn1
C/AT+m8GZO4ZNlxrpXVwmYc3scIS6CF/o8AZnOK5PCEfJqWGVwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFN6G10LwWSmOlr1AajSeUiL221jcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0
OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvZTU5Yzg3Y2ItOWE3MS0z
MDM2LTgzYTgtNjBlMmQ4NGJjZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl
YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl
ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw
M2E2ZWViNDkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0d3+AwQC
2NU0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEayJrIDZ/kFMGXpRLfQ1ytTpwMCyFRTa1+fLa4e5XnES85z
reIrLsf4JXd0MBdOHH0vhQ2vUYYHih0YNYs0WxKZ8b9zTS6E9bnCFFnJfEfZfx3r
miz6+1Kceq2cSHsIjsU3uZkYPbvP6216+38BHKOe5vpeb34b+6DOsOSxJfTuMqCh
T4BpAcBpFMDo3SPpazBUL3a9JeIEqvw/D/8zbxhE4mZzGRarrGQRFSbf6zxefY2I
j3fi8Dadz1+nFDEZlurvNkHu5bqrdALMKY9+fdIBbZf/NBrFfMMRvqmhDtciSZcw
et/i2POg7uZxvgxnyBMy7oQlQ3fcqnNOsRSpUjQ=
-----END CERTIFICATE-----
Generated at Fri Sep 19 16:28:36 2025 by rpki-client