Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/e4536b58-c3e7-36a1-96cf-019ddc7bfba9.roa
File:                     e4536b58-c3e7-36a1-96cf-019ddc7bfba9.roa (raw, json)
Hash identifier:          G2bhWAt3o2CCNYhAK+j5rfil4nhVlSX2rtayy3Tp4JY=
Subject key identifier:   66:FC:BA:DB:BC:F9:83:7A:3C:8A:DE:58:F3:F3:90:87:62:D5:BC:31
Certificate issuer:       /CN=ac717083-6970-4d32-8573-0bfa89700c9e
Certificate serial:       010D0C9F4328584A03A552CFEC851078D6CB3020
Authority key identifier: 20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/e4536b58-c3e7-36a1-96cf-019ddc7bfba9.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     802
IP address blocks:        130.63.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:52:cf:ec:85:10:78:d6:cb:30:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac717083-6970-4d32-8573-0bfa89700c9e
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=c7034835-873b-4a84-a87d-59949d118595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:e2:ed:9c:05:c5:bf:73:c0:65:34:a7:eb:
                    04:cc:dd:33:6a:dd:bb:a8:6c:50:46:cc:d7:c8:5e:
                    92:75:fc:59:8f:8c:26:00:3e:d8:35:c0:88:57:db:
                    1e:9e:2d:81:5a:87:25:86:08:51:3b:65:3f:1a:01:
                    87:80:2e:0b:a1:c5:83:41:1f:3d:df:8f:85:2c:5b:
                    a1:e9:09:57:2c:f9:4c:2d:39:51:37:a7:97:03:59:
                    77:32:26:c3:c5:c7:4d:6e:45:75:a1:1e:75:19:67:
                    f8:ac:f9:16:5f:13:54:c5:8a:0a:a6:bd:3e:61:a0:
                    a3:e7:e5:5d:98:c3:0b:38:62:c5:65:72:58:eb:2c:
                    f7:18:71:a1:d2:58:b6:2c:ed:25:a1:bb:68:15:ec:
                    e8:0b:78:2d:af:64:9f:ab:40:d0:65:e6:59:a4:50:
                    52:3a:6c:d2:db:8d:94:3b:bc:d1:b5:4c:8c:e7:3d:
                    17:b1:bc:10:fb:9a:98:af:d0:e7:ae:ea:a0:b8:f0:
                    a9:ed:1f:09:6c:db:0a:61:de:78:bb:ae:1d:af:4f:
                    c5:fd:75:0d:18:fe:ff:16:82:43:53:b8:f8:06:8e:
                    40:68:c6:95:95:19:b1:3b:2f:8d:32:b7:33:d3:2e:
                    cd:4c:2c:b8:0b:71:a4:71:b5:84:d7:15:65:4e:92:
                    bd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FC:BA:DB:BC:F9:83:7A:3C:8A:DE:58:F3:F3:90:87:62:D5:BC:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/e4536b58-c3e7-36a1-96cf-019ddc7bfba9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl

            X509v3 Authority Key Identifier:
                keyid:20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.63.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:11:d8:1a:2d:4e:86:41:87:e2:4e:2b:bc:fc:8d:d4:81:12:
         53:57:7e:bb:08:ad:a7:fd:06:52:5a:a2:ef:2a:e6:b0:74:22:
         57:31:ad:9c:85:e1:f5:a9:db:7e:27:72:cd:c0:bc:c2:41:e4:
         69:b6:8f:29:46:45:1a:33:55:97:b7:69:cf:1c:9e:71:e9:c5:
         b4:21:58:c8:9b:99:8e:ba:91:72:88:84:9a:58:1b:b5:42:42:
         74:8f:0d:4e:5d:80:42:38:2d:66:d2:26:6a:f9:0c:76:9c:c1:
         aa:c7:7d:75:c8:ec:30:1f:52:09:e3:9f:e2:9e:66:0a:a8:ff:
         72:8a:a0:b1:1a:23:9d:52:5b:87:e7:03:0b:ab:69:ef:ff:ab:
         fe:fd:90:c8:14:64:d3:66:54:1b:c7:37:f1:7c:5c:c0:43:e5:
         dc:d6:1e:73:a1:fb:94:f0:9b:26:0d:ca:30:9f:ce:aa:bc:74:
         31:20:4f:b2:10:aa:97:a5:34:9e:b6:32:a2:14:13:20:08:1c:
         c2:e5:b8:88:9c:d7:33:b1:32:82:25:2d:c4:3b:c1:63:00:6a:
         ac:13:d9:50:e2:f5:70:1c:15:55:69:74:35:4c:4d:75:64:60:
         9e:34:66:27:40:9c:d0:81:40:c3:b3:81:fd:08:b3:de:ea:e3:
         57:27:c7:d3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoDpVLP7IUQeNbLMCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM3MTcwODMtNjk3MC00ZDMyLTg1NzMtMGJmYTg5NzAw
YzllMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
YzcwMzQ4MzUtODczYi00YTg0LWE4N2QtNTk5NDlkMTE4NTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Li7ZwFxb9zwGU0p+sEzN0zat27qGxQRszX
yF6SdfxZj4wmAD7YNcCIV9seni2BWoclhghRO2U/GgGHgC4LocWDQR8934+FLFuh
6QlXLPlMLTlRN6eXA1l3MibDxcdNbkV1oR51GWf4rPkWXxNUxYoKpr0+YaCj5+Vd
mMMLOGLFZXJY6yz3GHGh0li2LO0lobtoFezoC3gtr2Sfq0DQZeZZpFBSOmzS242U
O7zRtUyM5z0XsbwQ+5qYr9DnruqguPCp7R8JbNsKYd54u64dr0/F/XUNGP7/FoJD
U7j4Bo5AaMaVlRmxOy+NMrcz0y7NTCy4C3GkcbWE1xVlTpK9EQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGb8utu8+YN6PIreWPPzkIdi1bwxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzcx
NzA4My02OTcwLTRkMzItODU3My0wYmZhODk3MDBjOWUvZTQ1MzZiNTgtYzNlNy0z
NmExLTk2Y2YtMDE5ZGRjN2JmYmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM3MTcwODMtNjk3MC00ZDMyLTg1
NzMtMGJmYTg5NzAwYzllL2FjNzE3MDgzLTY5NzAtNGQzMi04NTczLTBiZmE4OTcw
MGM5ZS5jcmwwHwYDVR0jBBgwFoAUIF+z6njl6UcKxVau6vVt4D2e/a0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzcxNzA4My02OTcwLTRkMzItODU3My0wYmZh
ODk3MDBjOWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgj8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIRHYGi1OhkGH4k4rvPyN1IESU1d+uwitp/0GUlqi7yrmsHQiVzGtnIXh
9anbfidyzcC8wkHkabaPKUZFGjNVl7dpzxyecenFtCFYyJuZjrqRcoiEmlgbtUJC
dI8NTl2AQjgtZtImavkMdpzBqsd9dcjsMB9SCeOf4p5mCqj/coqgsRojnVJbh+cD
C6tp7/+r/v2QyBRk02ZUG8c38XxcwEPl3NYec6H7lPCbJg3KMJ/Oqrx0MSBPshCq
l6U0nrYyohQTIAgcwuW4iJzXM7EygiUtxDvBYwBqrBPZUOL1cBwVVWl0NUxNdWRg
njRmJ0Cc0IFAw7OB/Qiz3urjVyfH0w==
-----END CERTIFICATE-----
Generated at Wed Jul 9 22:38:34 2025 by rpki-client