Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa
File:                     8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa (raw, json)
Hash identifier:          hHJbQt2iTKphkk/C6ifJudwWVytNY7bVOKMlII4eI64=
Subject key identifier:   C0:3F:F1:A4:30:87:34:81:D2:6F:6D:C6:1A:EE:F6:B1:B2:0A:3F:6D
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F4328584A6DBB3D7E1F63C61885689300
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        216.185.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:3d:7e:1f:63:c6:18:85:68:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=560467e3-5c55-4b18-9828-ac05767bbfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:fe:41:78:31:3e:76:57:cb:70:7b:b0:6b:
                    3f:4e:e7:65:86:fc:bc:2e:e6:d4:ee:a1:f2:0c:2e:
                    74:6b:da:9d:b6:e9:9c:6e:96:91:28:d1:f0:53:04:
                    d6:f8:23:52:c4:d8:65:ff:ae:e7:1a:67:a7:f4:ea:
                    84:18:4b:14:8d:2d:45:ef:e8:b0:07:f3:cb:a4:17:
                    21:dd:02:24:82:6c:6a:c9:75:8d:02:04:4f:11:85:
                    12:93:c0:7b:f3:c5:0f:67:05:17:f6:56:a6:75:cb:
                    5e:13:d3:52:7b:94:fc:71:89:43:de:72:1a:01:cd:
                    3b:50:8c:60:80:09:a7:1d:cf:fd:bc:3d:f2:44:0f:
                    2b:1f:84:09:37:fc:db:89:f3:3f:bc:49:f7:2a:5a:
                    a8:6f:da:c9:32:98:09:87:79:0e:db:ea:dd:89:00:
                    d8:e5:f7:c1:0f:05:aa:17:25:59:e9:78:92:ad:6b:
                    da:91:1b:be:91:20:5f:f3:78:98:dd:63:ce:08:a7:
                    9f:d5:bf:76:5c:95:78:6e:30:71:a8:4a:d8:25:44:
                    05:9a:54:60:3d:e5:49:aa:7e:80:44:55:29:97:66:
                    4c:97:b9:ff:d0:73:12:6f:e0:bf:e7:8e:be:fb:42:
                    96:81:08:11:9d:b9:37:01:9a:62:bd:53:ce:2d:04:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3F:F1:A4:30:87:34:81:D2:6F:6D:C6:1A:EE:F6:B1:B2:0A:3F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/8dcd33ad-82e8-3499-9d0a-fe0fe1a08668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:5f:6f:5d:f8:f8:38:0c:2c:31:36:31:50:89:63:3a:a6:d2:
         83:91:b6:7b:97:88:ba:11:49:6c:5e:c4:6d:25:75:4b:ed:36:
         a5:b9:8f:23:17:9a:7b:27:62:60:7e:e5:fc:b6:4c:d5:eb:ca:
         f5:e5:1b:de:f0:c3:e7:28:29:1c:89:ea:40:cd:82:62:1a:59:
         ea:a1:78:bc:ec:25:05:98:70:0a:41:9d:0a:7d:94:74:a1:f9:
         b4:48:dd:ba:94:6a:72:11:78:8f:ae:c3:b8:bc:24:ca:c8:f9:
         a2:08:fa:d9:27:be:ed:95:ed:b6:1e:1c:1a:ce:47:37:ed:4a:
         d1:96:ec:a4:4b:cc:01:83:27:b6:b7:06:03:c5:c0:aa:64:4a:
         94:53:08:ec:2e:b4:22:c2:0f:1f:57:f7:85:7c:20:41:7f:d7:
         c1:73:94:c4:23:d9:03:c7:b5:4e:3b:05:4c:d3:fd:11:b2:95:
         8a:4a:03:c5:a6:45:f7:52:72:4a:ec:bf:20:15:93:08:1a:49:
         81:cf:31:45:24:f0:ea:66:05:46:ca:d9:48:8c:6c:c9:44:cc:
         88:dc:83:7e:ab:42:f9:b8:1a:f3:8e:3b:fb:b5:5f:bc:56:2c:
         57:e1:fb:33:42:6e:54:9a:73:2d:fc:81:ff:c7:7d:ac:7c:90:
         20:23:48:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptuz1+H2PGGIVokwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw
NGRhMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
NTYwNDY3ZTMtNWM1NS00YjE4LTk4MjgtYWMwNTc2N2JiZmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzX+QXgxPnZXy3B7sGs/Tudlhvy8LubU7qHy
DC50a9qdtumcbpaRKNHwUwTW+CNSxNhl/67nGmen9OqEGEsUjS1F7+iwB/PLpBch
3QIkgmxqyXWNAgRPEYUSk8B788UPZwUX9lamdcteE9NSe5T8cYlD3nIaAc07UIxg
gAmnHc/9vD3yRA8rH4QJN/zbifM/vEn3Klqob9rJMpgJh3kO2+rdiQDY5ffBDwWq
FyVZ6XiSrWvakRu+kSBf83iY3WPOCKef1b92XJV4bjBxqErYJUQFmlRgPeVJqn6A
RFUpl2ZMl7n/0HMSb+C/546++0KWgQgRnbk3AZpivVPOLQQAvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMA/8aQwhzSB0m9txhru9rGyCj9tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4
YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvOGRjZDMzYWQtODJlOC0z
NDk5LTlkMGEtZmUwZmUxYTA4NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4
ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1
MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh
NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALxfb134+DgMLDE2MVCJYzqm0oORtnuXiLoRSWxexG0ldUvtNqW5jyMX
mnsnYmB+5fy2TNXryvXlG97ww+coKRyJ6kDNgmIaWeqheLzsJQWYcApBnQp9lHSh
+bRI3bqUanIReI+uw7i8JMrI+aII+tknvu2V7bYeHBrORzftStGW7KRLzAGDJ7a3
BgPFwKpkSpRTCOwutCLCDx9X94V8IEF/18FzlMQj2QPHtU47BUzT/RGylYpKA8Wm
RfdSckrsvyAVkwgaSYHPMUUk8OpmBUbK2UiMbMlEzIjcg36rQvm4GvOOO/u1X7xW
LFfh+zNCblSacy38gf/Hfax8kCAjSPU=
-----END CERTIFICATE-----
Generated at Fri Jul 11 06:10:24 2025 by rpki-client