Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/864760ea-664f-3545-b87d-96e88c28d43c.roa
File:                     864760ea-664f-3545-b87d-96e88c28d43c.roa (raw, json)
Hash identifier:          gGldlM42dflca56Ry4TvEeALOnFAPdC69WjdriUH8VU=
Subject key identifier:   6A:1E:47:D6:BD:D2:F0:95:2E:24:AE:F0:77:14:C0:4B:EB:4E:38:E2
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE6B6123B0431B85D386BD440
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/864760ea-664f-3545-b87d-96e88c28d43c.roa
Signing time:             Mon 18 Aug 2025 21:03:32 +0000
ROA not before:           Mon 18 Aug 2025 21:03:32 +0000
ROA not after:            Sun 16 Nov 2025 22:03:32 +0000
asID:                     31898
IP address blocks:        140.204.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:b6:12:3b:04:31:b8:5d:38:6b:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 21:03:32 2025 GMT
            Not After : Nov 16 22:03:32 2025 GMT
        Subject: CN=8a3d6a35-c842-441a-8aff-9a8e1bf08f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:03:23:38:23:af:d6:e7:b5:de:38:ee:99:
                    16:ce:8a:e1:d2:69:b6:a8:10:b8:ff:75:1b:a0:c0:
                    7d:43:67:11:8d:71:06:1d:40:6e:a4:54:fc:ab:88:
                    b2:7a:5a:26:44:37:6a:26:85:f0:ea:da:30:b0:8d:
                    90:00:d7:88:91:04:da:57:ca:ab:a5:81:3d:a6:fa:
                    e6:d0:41:fa:6d:8d:75:41:fd:9b:fa:f0:78:3c:49:
                    48:7d:98:63:25:88:23:2e:6c:59:3a:02:c6:be:09:
                    ab:80:84:27:20:a4:e7:c9:f6:b4:fa:51:8d:f9:5f:
                    e2:b8:47:15:99:0c:a2:cd:96:2f:c4:fb:77:97:6a:
                    b1:ca:02:d2:1a:ac:c9:93:01:17:21:2d:e2:8c:9c:
                    cd:37:bb:3f:52:52:44:80:f3:ec:ea:e8:b5:19:b1:
                    74:35:40:8f:fa:2f:ba:63:7f:70:2d:d3:0f:55:b2:
                    c7:6f:85:25:4f:b4:ad:93:ce:f4:c4:8d:39:f3:cf:
                    15:b9:36:8e:ee:80:26:87:74:9a:a7:91:d5:48:8b:
                    27:b6:bd:62:b4:7f:cf:0b:08:a3:94:e0:e9:c2:1b:
                    f3:76:76:cf:b8:c5:a1:2b:db:e5:db:f9:d7:29:f5:
                    bf:b9:5e:38:f3:90:90:84:c8:6d:9f:09:62:57:d0:
                    5c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1E:47:D6:BD:D2:F0:95:2E:24:AE:F0:77:14:C0:4B:EB:4E:38:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/864760ea-664f-3545-b87d-96e88c28d43c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.204.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:3c:d1:ef:2d:5d:ad:be:34:16:a5:03:c0:5e:da:ad:13:f9:
         b5:aa:8f:d1:b5:fd:c7:bc:a3:c2:27:07:53:fd:18:f5:46:31:
         f6:6b:9a:c4:15:e4:1e:53:eb:d9:de:c5:7b:a2:50:b3:58:57:
         8e:48:37:4a:e1:4a:36:15:04:d7:95:4c:5a:02:7b:90:f3:a2:
         eb:89:0a:1d:d7:68:82:ea:8e:fe:35:ae:21:d9:45:0f:c1:41:
         73:17:fd:03:4c:ab:ad:c7:6a:65:db:1a:92:03:b5:80:16:75:
         47:1f:3b:30:f2:98:9d:7a:5b:62:1c:40:16:d2:00:d6:4e:6d:
         56:42:0c:f1:71:85:3b:3c:d6:14:a7:ff:82:34:e4:81:32:f3:
         ed:49:37:63:38:73:94:38:ad:b8:db:13:93:ad:67:92:a7:d9:
         7a:13:9b:1a:af:8b:e8:93:b8:fb:cc:fb:a9:23:7b:ac:98:3b:
         d8:98:9a:1a:da:22:66:27:6f:c3:5c:42:64:df:91:a0:ef:1a:
         2d:df:cf:9d:8a:01:a4:19:86:87:c4:6a:7f:d9:8c:04:00:c3:
         0b:a2:33:e2:21:79:1f:06:a0:90:54:8c:11:99:85:9e:08:34:
         a9:4c:f4:c1:79:06:76:1a:7c:79:fc:54:27:df:df:08:8a:58:
         73:bf:d8:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmthI7BDG4XThr1EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDgxODIxMDMzMloXDTI1MTExNjIyMDMzMlowLzEtMCsGA1UEAxMk
OGEzZDZhMzUtYzg0Mi00NDFhLThhZmYtOWE4ZTFiZjA4ZjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5YDIzgjr9bntd447pkWzorh0mm2qBC4/3Ub
oMB9Q2cRjXEGHUBupFT8q4iyelomRDdqJoXw6towsI2QANeIkQTaV8qrpYE9pvrm
0EH6bY11Qf2b+vB4PElIfZhjJYgjLmxZOgLGvgmrgIQnIKTnyfa0+lGN+V/iuEcV
mQyizZYvxPt3l2qxygLSGqzJkwEXIS3ijJzNN7s/UlJEgPPs6ui1GbF0NUCP+i+6
Y39wLdMPVbLHb4UlT7Stk870xI05888VuTaO7oAmh3Sap5HVSIsntr1itH/PCwij
lODpwhvzdnbPuMWhK9vl2/nXKfW/uV4485CQhMhtnwliV9BctQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGoeR9a90vCVLiSu8HcUwEvrTjjiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODY0NzYwZWEtNjY0Zi0z
NTQ1LWI4N2QtOTZlODhjMjhkNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMx2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABo80e8tXa2+NBalA8Be2q0T+bWqj9G1/ce8o8InB1P9GPVGMfZrmsQV
5B5T69nexXuiULNYV45IN0rhSjYVBNeVTFoCe5DzouuJCh3XaILqjv41riHZRQ/B
QXMX/QNMq63HamXbGpIDtYAWdUcfOzDymJ16W2IcQBbSANZObVZCDPFxhTs81hSn
/4I05IEy8+1JN2M4c5Q4rbjbE5OtZ5Kn2XoTmxqvi+iTuPvM+6kje6yYO9iYmhra
ImYnb8NcQmTfkaDvGi3fz52KAaQZhofEan/ZjAQAwwuiM+IheR8GoJBUjBGZhZ4I
NKlM9MF5BnYafHn8VCff3wiKWHO/2Gs=
-----END CERTIFICATE-----
Generated at Wed Aug 20 03:23:22 2025 by rpki-client