Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b9c7a740-e020-36fb-baaf-1e4abe4e0093.roa
File:                     b9c7a740-e020-36fb-baaf-1e4abe4e0093.roa (raw, json)
Hash identifier:          9CFBEpb9O5JXOrOpWwfOaLNZwCyob84zW4xv/HpA5OM=
Subject key identifier:   01:A3:67:B8:05:61:D1:5D:B4:02:AD:D5:1F:F5:AC:3D:98:E5:D3:8C
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584ACE0BAE2C828D68123952AC00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b9c7a740-e020-36fb-baaf-1e4abe4e0093.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     3257
IP address blocks:        173.232.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:ae:2c:82:8d:68:12:39:52:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=13a72f7c-4fa1-444e-ac2a-969f2e8ba816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:31:15:ac:27:a8:25:56:72:b7:19:82:92:
                    92:b3:ed:90:75:10:8e:dc:06:79:1f:5e:05:97:43:
                    a9:3f:f4:c7:10:bd:a5:28:8f:94:a4:27:b5:a5:28:
                    1f:28:94:71:80:a8:86:2c:ee:d8:66:b7:6c:0e:3e:
                    65:0a:9d:a5:31:67:b7:3a:51:e7:b1:d1:e5:1c:5b:
                    f8:75:32:eb:70:c9:5b:44:e0:61:6b:4a:ae:3f:05:
                    29:53:22:00:49:ea:dc:f9:fa:22:0a:49:a2:d5:e5:
                    fc:88:4d:eb:6f:1b:8b:1b:4f:3e:b8:0b:05:0e:6d:
                    f3:e2:d8:7d:d4:30:52:04:98:ad:dc:e1:f0:67:7f:
                    47:ef:28:cc:25:fe:67:b1:5b:8b:0a:84:c5:45:54:
                    af:37:af:6e:19:0c:f0:87:f7:da:b7:98:63:e2:a5:
                    b6:65:8c:7e:5a:dd:ad:52:eb:47:9c:82:c8:a0:e9:
                    1a:d8:ee:45:13:31:11:a5:8e:f7:0d:f8:79:90:e4:
                    ff:c0:85:cc:27:cc:ba:63:12:c6:ee:a7:92:62:a8:
                    de:58:d7:3c:7a:1d:4b:0d:39:9b:ff:68:1b:f5:ca:
                    18:03:0d:8d:c0:39:06:fe:57:62:ef:0a:9d:a1:87:
                    24:6a:31:13:9f:ba:7e:42:3b:1a:45:12:b3:d7:5f:
                    36:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A3:67:B8:05:61:D1:5D:B4:02:AD:D5:1F:F5:AC:3D:98:E5:D3:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b9c7a740-e020-36fb-baaf-1e4abe4e0093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:14:be:c4:4b:ff:19:b3:0d:87:3e:33:18:0a:50:13:db:15:
         5a:99:97:56:d0:76:b1:0d:62:8e:5a:df:31:ad:8c:2c:d3:15:
         2e:01:b4:b6:c1:21:1b:c2:e5:93:99:9b:90:d1:9f:9e:21:d7:
         b9:1f:d3:00:f9:ad:e1:a7:9e:3f:06:52:9a:94:bb:a0:72:fd:
         16:fe:4b:d9:20:45:a8:d8:01:82:27:87:cb:d6:91:51:c4:81:
         d7:c2:d9:58:e3:46:60:b3:4d:2d:fc:88:1e:45:74:a0:c3:53:
         a2:58:d4:b2:51:0f:a7:6f:79:9f:86:2d:f6:9d:fc:d2:ac:28:
         01:31:42:47:25:b9:9a:55:c6:7e:41:3e:af:5d:69:bb:8d:46:
         65:4c:33:52:87:8f:cb:79:29:c3:ea:71:7f:0f:25:19:21:2e:
         1f:d7:5d:e8:f7:86:c4:63:58:e0:10:41:43:12:5f:fe:dc:58:
         58:cd:b1:9f:23:1a:34:c0:7b:d9:87:5c:97:41:02:d3:2e:79:
         52:6d:78:2e:7d:0f:84:0f:5d:e2:f1:e2:1a:b2:90:e6:bb:ac:
         67:c2:0a:b4:e3:f9:79:62:9d:7d:4e:c3:72:8a:d6:e5:ad:2d:
         92:22:82:a8:04:bc:f0:6f:21:ad:56:7b:0b:c5:3b:86:ac:a0:
         0a:80:80:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC64sgo1oEjlSrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk
MTNhNzJmN2MtNGZhMS00NDRlLWFjMmEtOTY5ZjJlOGJhODE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEwxFawnqCVWcrcZgpKSs+2QdRCO3AZ5H14F
l0OpP/THEL2lKI+UpCe1pSgfKJRxgKiGLO7YZrdsDj5lCp2lMWe3OlHnsdHlHFv4
dTLrcMlbROBha0quPwUpUyIASerc+foiCkmi1eX8iE3rbxuLG08+uAsFDm3z4th9
1DBSBJit3OHwZ39H7yjMJf5nsVuLCoTFRVSvN69uGQzwh/fat5hj4qW2ZYx+Wt2t
UutHnILIoOka2O5FEzERpY73Dfh5kOT/wIXMJ8y6YxLG7qeSYqjeWNc8eh1LDTmb
/2gb9coYAw2NwDkG/ldi7wqdoYckajETn7p+QjsaRRKz1182TwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAGjZ7gFYdFdtAKt1R/1rD2Y5dOMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjljN2E3NDAtZTAyMC0z
NmZiLWJhYWYtMWU0YWJlNGUwMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreg9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwUvsRL/xmzDYc+MxgKUBPbFVqZl1bQdrENYo5a3zGtjCzTFS4BtLbB
IRvC5ZOZm5DRn54h17kf0wD5reGnnj8GUpqUu6By/Rb+S9kgRajYAYInh8vWkVHE
gdfC2VjjRmCzTS38iB5FdKDDU6JY1LJRD6dveZ+GLfad/NKsKAExQkcluZpVxn5B
Pq9dabuNRmVMM1KHj8t5KcPqcX8PJRkhLh/XXej3hsRjWOAQQUMSX/7cWFjNsZ8j
GjTAe9mHXJdBAtMueVJteC59D4QPXeLx4hqykOa7rGfCCrTj+XlinX1Ow3KK1uWt
LZIigqgEvPBvIa1WewvFO4asoAqAgEY=
-----END CERTIFICATE-----
Generated at Wed Aug 20 13:18:36 2025 by rpki-client