Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/ef9b2c71-8b80-3c64-b9cd-fdd4455be995.roa
File:                     ef9b2c71-8b80-3c64-b9cd-fdd4455be995.roa (raw, json)
Hash identifier:          lVFu0IGE9gzdjisKinQfTCOjd+gHGHt/dQbUk2RyMAk=
Subject key identifier:   52:7B:53:51:A9:75:F8:10:05:66:56:1B:E9:24:1D:A6:47:23:98:A1
Certificate issuer:       /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Certificate serial:       010D0C9F4328584A90A0C112DBEAF36EFEAB7000
Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/ef9b2c71-8b80-3c64-b9cd-fdd4455be995.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     18615
IP address blocks:        163.182.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c1:12:db:ea:f3:6e:fe:ab:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=2dffcb2f-8b4e-4465-b313-a02e6253e169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:da:f2:fa:19:35:51:27:5a:c0:f2:ed:af:
                    1e:a9:cb:ba:c4:e8:f7:14:3f:4c:c3:44:d1:3a:0b:
                    99:76:f8:18:e9:2a:4e:a3:ba:ed:a1:f1:2f:80:dd:
                    6b:80:b0:86:76:ba:fe:11:6b:46:e4:2e:8c:95:ec:
                    15:55:8b:e2:16:ee:89:a1:74:62:ba:4a:75:aa:48:
                    c9:12:9f:d0:88:5e:9f:d5:cd:cf:b2:68:2e:8c:16:
                    71:e2:76:b7:12:ac:48:71:b0:ba:28:1f:24:2c:e0:
                    cb:f4:8d:8c:f7:82:66:60:a0:94:e7:e0:5c:0a:d6:
                    b9:ae:00:45:c7:e8:f1:1c:43:db:f9:8d:3b:d2:7b:
                    cc:97:8f:56:21:04:56:d1:e8:b0:e4:e2:38:6a:dd:
                    00:39:56:a8:f0:3c:fd:6b:9d:d7:f2:c7:9e:91:5a:
                    1a:42:91:74:4b:9b:c5:84:03:2a:53:f3:20:36:a6:
                    83:dc:4b:11:a3:6a:c0:09:56:12:1e:8d:ec:76:a4:
                    ec:51:60:af:27:96:dd:d3:04:68:37:bf:bb:a6:b2:
                    1e:9d:d0:02:04:6a:8f:7c:99:6c:c4:3f:7d:c3:19:
                    37:22:d4:fc:9e:04:b2:b0:3c:0b:d3:b7:55:5d:f4:
                    12:86:24:a2:dc:90:b6:46:58:45:f1:d9:9f:af:f0:
                    2d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7B:53:51:A9:75:F8:10:05:66:56:1B:E9:24:1D:A6:47:23:98:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/ef9b2c71-8b80-3c64-b9cd-fdd4455be995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl

            X509v3 Authority Key Identifier:
                keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.182.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:cf:ff:48:13:e4:c9:a9:2d:b3:ae:b0:14:50:ee:5e:3e:0d:
         e5:75:a7:d8:92:4a:06:ed:5d:a3:c0:8d:5f:ea:6b:20:33:e1:
         cb:96:c6:3e:8d:8e:94:3c:71:3a:66:68:a1:2c:c0:4e:30:d2:
         a9:6f:cd:8b:6f:68:42:c4:54:b6:9d:af:5f:f4:2f:2c:86:13:
         07:9f:1a:81:d1:67:81:ae:f4:fb:26:63:0f:d4:72:31:0e:42:
         bf:46:e7:fe:95:cc:ed:1c:f4:21:42:8a:81:64:4a:ff:03:37:
         dd:54:fc:c6:0b:7f:5d:15:d9:82:43:59:86:8c:e2:6c:fb:6b:
         04:0a:8f:6a:9a:15:3e:69:a5:f1:50:13:4a:0d:be:b0:df:d2:
         c8:b5:76:23:5f:23:d2:05:7f:50:61:6e:96:74:48:8b:8b:73:
         a6:90:50:d9:b0:32:8e:a6:ea:65:e6:84:25:86:e6:4e:1c:b6:
         e9:04:7b:6d:51:01:a1:ff:37:62:1c:35:79:e5:d2:25:1a:26:
         da:92:d6:57:ff:2c:ed:01:a3:2d:0b:a4:fe:16:cb:0b:e1:6d:
         a4:91:5f:fb:40:a0:59:84:9d:c9:50:8c:fc:57:f8:1a:a4:c4:
         c0:97:12:e7:1b:f5:95:2a:e8:f0:28:69:ce:c6:15:4a:44:a8:
         48:44:68:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMES2+rzbv6rcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZiYzJkYTctNWIzYi00ZmY2LThiYzItNTljNDJjOTAx
MDg2MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
MmRmZmNiMmYtOGI0ZS00NDY1LWIzMTMtYTAyZTYyNTNlMTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Iza8voZNVEnWsDy7a8eqcu6xOj3FD9Mw0TR
OguZdvgY6SpOo7rtofEvgN1rgLCGdrr+EWtG5C6MlewVVYviFu6JoXRiukp1qkjJ
Ep/QiF6f1c3PsmgujBZx4na3EqxIcbC6KB8kLODL9I2M94JmYKCU5+BcCta5rgBF
x+jxHEPb+Y070nvMl49WIQRW0eiw5OI4at0AOVao8Dz9a53X8seekVoaQpF0S5vF
hAMqU/MgNqaD3EsRo2rACVYSHo3sdqTsUWCvJ5bd0wRoN7+7prIendACBGqPfJls
xD99wxk3ItT8ngSysDwL07dVXfQShiSi3JC2RlhF8dmfr/AtAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJ7U1GpdfgQBWZWG+kkHaZHI5ihMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNmJj
MmRhNy01YjNiLTRmZjYtOGJjMi01OWM0MmM5MDEwODYvZWY5YjJjNzEtOGI4MC0z
YzY0LWI5Y2QtZmRkNDQ1NWJlOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzZiYzJkYTctNWIzYi00ZmY2LThi
YzItNTljNDJjOTAxMDg2L2M2YmMyZGE3LTViM2ItNGZmNi04YmMyLTU5YzQyYzkw
MTA4Ni5jcmwwHwYDVR0jBBgwFoAUnWYfnyPnx7Ih8ugzbHvOq2WXMfIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNmJjMmRhNy01YjNiLTRmZjYtOGJjMi01OWM0
MmM5MDEwODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEo7awMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/P/0gT5MmpLbOusBRQ7l4+DeV1p9iSSgbtXaPAjV/qayAz4cuWxj6N
jpQ8cTpmaKEswE4w0qlvzYtvaELEVLadr1/0LyyGEwefGoHRZ4Gu9PsmYw/UcjEO
Qr9G5/6VzO0c9CFCioFkSv8DN91U/MYLf10V2YJDWYaM4mz7awQKj2qaFT5ppfFQ
E0oNvrDf0si1diNfI9IFf1BhbpZ0SIuLc6aQUNmwMo6m6mXmhCWG5k4ctukEe21R
AaH/N2IcNXnl0iUaJtqS1lf/LO0Boy0LpP4WywvhbaSRX/tAoFmEnclQjPxX+Bqk
xMCXEucb9ZUq6PAoac7GFUpEqEhEaN0=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:05:09 2025 by rpki-client