Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2e8ea2b6-0611-36c1-bdaf-46f81b83aafe.roa
File:                     2e8ea2b6-0611-36c1-bdaf-46f81b83aafe.roa (raw, json)
Hash identifier:          4WTlwpmp3HDULJT+kUxO56vJ67mUfm4Eb+UKzu7WGtc=
Subject key identifier:   66:15:33:D5:E8:42:E3:F3:4D:BF:11:13:34:27:39:4E:C5:24:65:2B
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584AF7EBE595D465C4DD60DA12E0
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2e8ea2b6-0611-36c1-bdaf-46f81b83aafe.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     63293
IP address blocks:        129.134.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:e5:95:d4:65:c4:dd:60:da:12:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=04c70260-e02c-4dce-ada0-10b575d9281d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:36:40:7b:79:bc:56:d4:ce:3a:c1:c5:d8:68:
                    af:ca:2f:dc:87:fa:34:6e:f1:34:36:15:47:f0:2b:
                    52:96:9a:cf:49:79:72:40:9a:09:90:d9:53:bc:ad:
                    42:0c:f8:d9:af:d4:c9:3e:84:6c:73:9f:5d:71:b6:
                    70:32:3c:f2:44:c1:94:04:7d:6e:ed:ac:8d:31:39:
                    57:00:f3:ad:02:de:70:bc:cf:57:48:0b:d9:05:73:
                    4f:90:aa:34:7f:e7:64:c0:70:5c:65:2c:63:89:9a:
                    df:40:14:eb:9e:b2:b0:a9:26:b6:d6:76:23:7d:43:
                    64:9c:bb:3c:51:24:bd:4b:be:64:e2:f2:1c:cb:68:
                    9c:6c:fe:d9:97:e6:b5:e5:14:04:95:1c:74:57:b5:
                    9c:17:b8:07:8a:2c:17:e0:81:c5:89:1c:b1:56:b7:
                    42:7f:15:92:cd:8f:ac:ce:27:1f:d4:fb:7b:b4:4f:
                    49:12:68:63:29:70:75:e3:8e:93:36:24:ff:6a:54:
                    be:cc:9c:1f:13:24:8a:95:aa:9b:cc:a3:bc:d0:e6:
                    f1:65:6e:54:d9:c6:66:b9:f3:68:c6:1a:90:6c:cb:
                    97:9f:99:8d:79:d8:be:af:a5:aa:bb:25:a5:db:41:
                    87:fb:0b:c2:f5:42:1e:2d:ff:14:99:9e:14:0e:6c:
                    f7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:15:33:D5:E8:42:E3:F3:4D:BF:11:13:34:27:39:4E:C5:24:65:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2e8ea2b6-0611-36c1-bdaf-46f81b83aafe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.134.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:8c:75:1d:1b:89:32:f5:ce:b7:9b:4b:7b:47:cd:9f:55:d0:
         a7:72:d8:60:79:13:cd:18:b3:8e:56:24:b4:15:0d:1b:50:d9:
         4b:50:b4:35:0e:a2:d5:39:4d:91:b4:33:56:f8:e3:b4:12:dc:
         e1:e1:df:9f:28:0f:79:dc:92:d5:ac:47:78:2e:2d:ba:ec:4f:
         42:78:f9:4c:1d:ff:80:03:f4:bd:e4:08:b3:c4:31:8e:2e:36:
         35:c7:86:3f:6a:98:53:4a:9b:55:8a:7c:b4:29:2d:22:a2:8e:
         ba:ee:2e:95:6a:47:b8:38:a4:2d:f1:cf:50:9f:4f:a8:2c:0f:
         4f:31:4d:a3:b3:e0:62:a6:f4:d6:5a:89:8b:93:84:63:bb:80:
         b1:7c:2b:e2:2d:cf:d8:de:70:39:8b:49:63:7f:a4:2e:16:b9:
         77:38:4c:91:26:db:db:27:c4:f4:91:e8:c6:2d:af:2c:33:a8:
         f8:d5:73:e1:4d:01:d4:e6:68:2f:68:c4:46:e8:7d:c6:fb:e2:
         0a:fd:68:93:35:11:1e:a2:20:db:0a:9c:3b:b4:af:92:d1:99:
         d5:e9:aa:6a:a3:44:a6:d8:99:93:6c:ac:b9:32:8a:81:65:7d:
         5e:07:67:4c:ba:76:99:de:2c:00:a5:f7:fc:6c:fb:4c:5b:1d:
         43:1a:ba:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+WV1GXE3WDaEuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4
MjIyMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk
MDRjNzAyNjAtZTAyYy00ZGNlLWFkYTAtMTBiNTc1ZDkyODFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTZAe3m8VtTOOsHF2Givyi/ch/o0bvE0NhVH
8CtSlprPSXlyQJoJkNlTvK1CDPjZr9TJPoRsc59dcbZwMjzyRMGUBH1u7ayNMTlX
APOtAt5wvM9XSAvZBXNPkKo0f+dkwHBcZSxjiZrfQBTrnrKwqSa21nYjfUNknLs8
USS9S75k4vIcy2icbP7Zl+a15RQElRx0V7WcF7gHiiwX4IHFiRyxVrdCfxWSzY+s
zicf1Pt7tE9JEmhjKXB1446TNiT/alS+zJwfEySKlaqbzKO80ObxZW5U2cZmufNo
xhqQbMuXn5mNedi+r6WquyWl20GH+wvC9UIeLf8UmZ4UDmz3zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGYVM9XoQuPzTb8REzQnOU7FJGUrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0
MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMmU4ZWEyYjYtMDYxMS0z
NmMxLWJkYWYtNDZmODFiODNhYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0
NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh
ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0
MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgYbDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWMdR0biTL1zrebS3tHzZ9V0Kdy2GB5E80Ys45WJLQVDRtQ2UtQtDUO
otU5TZG0M1b447QS3OHh358oD3ncktWsR3guLbrsT0J4+Uwd/4AD9L3kCLPEMY4u
NjXHhj9qmFNKm1WKfLQpLSKijrruLpVqR7g4pC3xz1CfT6gsD08xTaOz4GKm9NZa
iYuThGO7gLF8K+Itz9jecDmLSWN/pC4WuXc4TJEm29snxPSR6MYtrywzqPjVc+FN
AdTmaC9oxEbofcb74gr9aJM1ER6iINsKnDu0r5LRmdXpqmqjRKbYmZNsrLkyioFl
fV4HZ0y6dpneLACl9/xs+0xbHUMaujE=
-----END CERTIFICATE-----
Generated at Thu Sep 11 01:46:55 2025 by rpki-client