Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cfd8609-baba-3b33-bb17-5b6d935c24d4.roa
File:                     2cfd8609-baba-3b33-bb17-5b6d935c24d4.roa (raw, json)
Hash identifier:          4Y+Az5kY/rl2Nm8lhsy5siqGj3uqBTeZw1YwL1Vvq7s=
Subject key identifier:   61:28:E3:DA:59:24:24:ED:8B:67:F4:F4:F0:90:64:93:2D:DA:ED:B8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1971168A7A33AFA625CB500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cfd8609-baba-3b33-bb17-5b6d935c24d4.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        184.151.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:11:68:a7:a3:3a:fa:62:5c:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=970bd52d-1a31-43dd-aed5-69d81b5f88c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:6c:6f:5a:62:3d:62:f9:21:b7:25:00:89:
                    a1:82:6f:d8:ec:89:cf:ea:4a:d5:ac:36:7a:df:c2:
                    40:8c:63:65:20:3a:76:c2:9f:52:77:8e:16:b4:b7:
                    49:55:16:e5:25:80:a0:6f:0d:1d:c6:4e:54:46:a2:
                    53:3a:3c:ca:30:2a:2e:e6:f8:3a:9b:a3:7c:e5:f6:
                    03:1a:0c:6b:d7:69:90:5f:a1:25:2d:e4:3e:3a:6a:
                    99:8b:8b:3c:57:e6:ed:0e:43:df:01:d2:31:06:86:
                    b8:5d:12:67:08:8f:22:63:8d:34:86:67:e1:7d:b9:
                    f3:12:94:23:79:7e:26:8c:a0:c6:3f:2a:ac:91:7f:
                    3c:56:ca:4d:38:9c:5e:7a:71:18:20:44:36:a1:1e:
                    5e:6c:c3:a0:bb:df:6c:0c:36:f8:f4:9e:4d:54:e9:
                    5e:12:39:8c:17:2d:f2:9e:39:68:37:d0:39:cd:6b:
                    c7:6c:34:0a:c9:e1:24:23:51:6c:35:9f:b1:48:d4:
                    90:d2:3f:fa:aa:1d:00:c6:05:98:7c:90:f8:27:e1:
                    11:27:85:13:4a:8d:40:dd:54:31:d4:2c:43:f7:f7:
                    21:5c:c6:da:38:9a:e5:b8:44:5e:39:7b:e5:4e:bb:
                    c6:3e:23:08:b4:29:af:23:d1:16:ca:43:db:1c:96:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:28:E3:DA:59:24:24:ED:8B:67:F4:F4:F0:90:64:93:2D:DA:ED:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cfd8609-baba-3b33-bb17-5b6d935c24d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:54:4f:4a:1c:38:5f:57:28:56:1e:b6:6c:c1:10:00:e2:b7:
         6c:b9:24:52:33:aa:95:c8:02:87:b2:ec:4e:51:44:89:b0:81:
         b0:94:a3:e3:cf:4d:aa:4e:59:14:4b:a0:0e:74:5c:77:58:dc:
         2b:a6:b8:a7:3d:68:0b:a2:de:6b:25:ed:0b:01:fd:cf:6d:c6:
         05:76:e3:1f:96:cf:b2:af:ce:6d:d1:05:7b:35:90:1c:16:b6:
         b9:c3:3d:ea:ce:a2:b8:bb:03:f6:a1:8b:91:ba:a4:7c:fb:19:
         16:cd:11:fc:bb:4d:32:3d:81:6c:44:fe:21:f8:ac:8c:a1:7b:
         58:16:7b:c0:78:3d:bc:61:ed:b4:84:8f:6d:f8:4d:b2:21:92:
         79:90:ae:e9:52:e9:db:66:6a:c1:6b:b5:c3:dc:5e:bf:72:1c:
         a8:eb:80:2b:6a:c3:4b:2e:ee:5c:25:a6:74:55:d0:7f:ea:d3:
         7c:d5:f7:59:49:2a:1f:a3:32:c5:59:ca:a5:de:d0:da:ce:68:
         78:50:03:e1:4f:be:3f:eb:77:f1:a2:90:4e:84:b7:2c:c9:d2:
         51:c7:b8:e8:bf:71:4e:b1:8d:ce:77:dd:4b:3d:10:e2:98:29:
         54:80:36:6c:38:2c:25:e8:4d:54:3f:2e:c9:58:4e:4e:79:00:
         44:bd:d5:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlxFop6M6+mJctQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
OTcwYmQ1MmQtMWEzMS00M2RkLWFlZDUtNjlkODFiNWY4OGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo59sb1piPWL5IbclAImhgm/Y7InP6krVrDZ6
38JAjGNlIDp2wp9Sd44WtLdJVRblJYCgbw0dxk5URqJTOjzKMCou5vg6m6N85fYD
Ggxr12mQX6ElLeQ+OmqZi4s8V+btDkPfAdIxBoa4XRJnCI8iY400hmfhfbnzEpQj
eX4mjKDGPyqskX88VspNOJxeenEYIEQ2oR5ebMOgu99sDDb49J5NVOleEjmMFy3y
njloN9A5zWvHbDQKyeEkI1FsNZ+xSNSQ0j/6qh0AxgWYfJD4J+ERJ4UTSo1A3VQx
1CxD9/chXMbaOJrluEReOXvlTrvGPiMItCmvI9EWykPbHJZXBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEo49pZJCTti2f09PCQZJMt2u24MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMmNmZDg2MDktYmFiYS0z
YjMzLWJiMTctNWI2ZDkzNWMyNGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuJf8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJNUT0ocOF9XKFYetmzBEADit2y5JFIzqpXIAoey7E5RRImwgbCUo+PP
TapOWRRLoA50XHdY3CumuKc9aAui3msl7QsB/c9txgV24x+Wz7Kvzm3RBXs1kBwW
trnDPerOori7A/ahi5G6pHz7GRbNEfy7TTI9gWxE/iH4rIyhe1gWe8B4Pbxh7bSE
j234TbIhknmQrulS6dtmasFrtcPcXr9yHKjrgCtqw0su7lwlpnRV0H/q03zV91lJ
Kh+jMsVZyqXe0NrOaHhQA+FPvj/rd/GikE6EtyzJ0lHHuOi/cU6xjc533Us9EOKY
KVSANmw4LCXoTVQ/LslYTk55AES91fU=
-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:38 2025 by rpki-client