Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/560d9895-d1b4-35ae-84a0-8ffa14938611.roa
File:                     560d9895-d1b4-35ae-84a0-8ffa14938611.roa (raw, json)
Hash identifier:          AxS7sa7zIU64+WKplYDgDhfAWbkdQmwhM646a625DJw=
Subject key identifier:   D4:9E:1C:12:C8:AB:51:52:C1:4C:5C:CB:16:05:09:C0:6B:69:50:17
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584AF3BBDC2485A69F7947F7F7A0
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/560d9895-d1b4-35ae-84a0-8ffa14938611.roa
Signing time:             Sat 23 Aug 2025 13:00:41 +0000
ROA not before:           Sat 23 Aug 2025 13:00:41 +0000
ROA not after:            Fri 21 Nov 2025 14:00:41 +0000
asID:                     22351
IP address blocks:        216.250.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f3:bb:dc:24:85:a6:9f:79:47:f7:f7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Aug 23 13:00:41 2025 GMT
            Not After : Nov 21 14:00:41 2025 GMT
        Subject: CN=cc894deb-b6e6-4093-b8e8-7917c93a8328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:17:ec:42:54:48:c8:60:c0:3a:63:06:5a:
                    af:2f:14:2a:f3:0e:25:1e:30:1d:ae:89:f0:8c:b5:
                    51:1c:8a:53:ba:71:a4:9d:e0:8e:75:f7:37:96:8f:
                    ac:a2:9e:d9:df:13:b2:64:77:f5:21:f6:10:e5:a6:
                    3c:db:48:58:3f:53:63:a0:d0:0c:9c:86:10:f0:29:
                    86:b7:2b:65:65:cd:35:e7:17:3d:ba:89:9d:3c:de:
                    05:d0:3c:0f:48:81:d3:c8:d2:7d:24:b3:81:f9:55:
                    03:31:23:97:04:c2:6d:dd:c9:78:ee:cf:db:28:4f:
                    02:8a:d9:b9:b7:e5:36:4f:81:ee:c0:fe:d1:68:ca:
                    31:2a:cb:46:68:81:6f:05:cd:5a:fb:da:61:f0:83:
                    f9:c7:5c:f0:2d:13:a6:b0:2a:03:f0:77:16:04:94:
                    00:84:0d:cb:6b:ad:2c:f7:57:ab:fa:7c:c9:11:cb:
                    6c:34:4e:2a:5c:b7:fa:4d:64:fa:04:c8:30:a6:d0:
                    9b:a2:6f:61:e0:f1:a1:26:0c:05:1d:5f:39:79:89:
                    4f:e3:0f:e2:98:ad:15:af:14:80:92:40:20:64:df:
                    11:99:07:83:74:91:79:59:f9:01:ef:23:eb:29:5a:
                    79:7f:8f:7c:0f:30:02:8f:be:81:22:69:ba:79:1a:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9E:1C:12:C8:AB:51:52:C1:4C:5C:CB:16:05:09:C0:6B:69:50:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/560d9895-d1b4-35ae-84a0-8ffa14938611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:76:80:ea:e9:33:bc:d8:88:96:86:f4:c7:73:8f:8d:5d:4a:
         f5:89:50:3c:bc:56:ed:1b:71:fe:1f:33:c7:b4:d7:df:e2:59:
         67:10:1d:08:85:b3:37:4c:11:a5:d6:d5:ba:ca:67:9f:7a:28:
         a1:41:69:20:d7:7d:32:3c:84:cb:fd:2e:b7:bf:bb:a7:84:5e:
         72:05:12:89:88:35:d1:96:6d:cc:32:50:67:9f:f3:34:f7:98:
         2f:03:8f:3b:d5:02:fd:c6:6f:5b:24:c2:9b:ae:71:c6:1f:20:
         44:a8:a5:f8:bb:83:ff:c1:0a:6a:8d:94:03:c1:f3:d8:5a:ec:
         95:c7:29:19:c3:cb:07:f4:ae:bf:f9:0e:93:ac:ee:73:6b:d4:
         a1:7f:4d:73:8f:28:5a:3c:c7:83:1b:31:0a:bd:82:7f:7b:98:
         3e:04:e0:0b:22:91:f9:d9:78:d4:b8:29:8c:b5:2c:74:be:f4:
         cb:38:39:53:ce:90:d3:67:3e:68:a3:28:6d:8c:a6:cf:ed:37:
         ec:59:63:ab:64:7f:0c:31:37:77:e6:db:a5:f9:59:f5:a3:91:
         0e:68:8f:2f:ad:88:bc:d0:55:a1:16:28:56:2b:0a:69:c6:c3:
         43:09:f3:6f:17:77:82:85:57:85:c3:31:1e:29:c5:6c:9c:75:
         1c:1b:7d:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErzu9wkhaafeUf396AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Q2YmVhMzItZGI0Yy00MzI2LTkzYTAtNzEzMzY0Yjhh
YTQ0MB4XDTI1MDgyMzEzMDA0MVoXDTI1MTEyMTE0MDA0MVowLzEtMCsGA1UEAxMk
Y2M4OTRkZWItYjZlNi00MDkzLWI4ZTgtNzkxN2M5M2E4MzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqAX7EJUSMhgwDpjBlqvLxQq8w4lHjAdronw
jLVRHIpTunGkneCOdfc3lo+sop7Z3xOyZHf1IfYQ5aY820hYP1NjoNAMnIYQ8CmG
tytlZc015xc9uomdPN4F0DwPSIHTyNJ9JLOB+VUDMSOXBMJt3cl47s/bKE8Citm5
t+U2T4HuwP7RaMoxKstGaIFvBc1a+9ph8IP5x1zwLROmsCoD8HcWBJQAhA3La60s
91er+nzJEctsNE4qXLf6TWT6BMgwptCbom9h4PGhJgwFHV85eYlP4w/imK0VrxSA
kkAgZN8RmQeDdJF5WfkB7yPrKVp5f498DzACj76BImm6eRpcZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNSeHBLIq1FSwUxcyxYFCcBraVAXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZi
ZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMzNjRiOGFhNDQvNTYwZDk4OTUtZDFiNC0z
NWFlLTg0YTAtOGZmYTE0OTM4NjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2Q2YmVhMzItZGI0Yy00MzI2LTkz
YTAtNzEzMzY0YjhhYTQ0LzdkNmJlYTMyLWRiNGMtNDMyNi05M2EwLTcxMzM2NGI4
YWE0NC5jcmwwHwYDVR0jBBgwFoAU13vCe9o3Nfdsvxl4cDowOSWIciMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZiZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMz
NjRiOGFhNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2PrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFN2gOrpM7zYiJaG9Mdzj41dSvWJUDy8Vu0bcf4fM8e019/iWWcQHQiF
szdMEaXW1brKZ596KKFBaSDXfTI8hMv9Lre/u6eEXnIFEomINdGWbcwyUGef8zT3
mC8DjzvVAv3Gb1skwpuuccYfIESopfi7g//BCmqNlAPB89ha7JXHKRnDywf0rr/5
DpOs7nNr1KF/TXOPKFo8x4MbMQq9gn97mD4E4AsikfnZeNS4KYy1LHS+9Ms4OVPO
kNNnPmijKG2Mps/tN+xZY6tkfwwxN3fm26X5WfWjkQ5ojy+tiLzQVaEWKFYrCmnG
w0MJ828Xd4KFV4XDMR4pxWycdRwbfXs=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:51:47 2025 by rpki-client