Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa
File:                     b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa (raw, json)
Hash identifier:          x7c+7gON6KMs8MfZo4GdbOwcMpEVSHZ+5lcmdwtQD/0=
Subject key identifier:   1A:D4:68:DF:51:78:39:B9:7E:B1:BE:C3:42:3C:50:73:5B:54:76:09
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584AC0163F1AE97FD9FA9D140F40
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     394089
IP address blocks:        165.85.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:3f:1a:e9:7f:d9:fa:9d:14:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=0e954175-3a68-4e58-85ea-d005bcf5e7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:4c:92:d2:4c:89:af:92:06:af:25:83:a1:
                    0f:b9:3c:7c:1d:a2:34:c3:81:58:c3:df:3d:55:ee:
                    10:26:52:07:74:96:09:9c:3c:00:9f:7e:b2:d0:b7:
                    dc:ec:79:c8:39:6b:88:3f:e8:23:46:0d:a9:ee:c3:
                    1c:03:21:ac:45:f5:99:13:43:0f:84:cc:50:e7:40:
                    fb:21:4e:da:47:f6:ee:89:6d:88:72:a2:07:06:cd:
                    2a:7a:63:19:56:d7:f7:43:8d:0e:85:f7:f4:97:f7:
                    6a:0b:56:30:bd:c9:0e:77:63:c4:bc:84:cc:23:9a:
                    04:5f:ae:81:bb:7e:a2:b2:de:a8:81:5f:25:67:c4:
                    ba:be:8c:72:06:cc:39:50:46:84:c8:bf:0b:47:fc:
                    84:2c:42:ed:97:cc:6d:66:16:e2:12:a5:2c:55:70:
                    25:dc:ad:4b:80:dc:49:e7:c5:10:da:07:34:c0:de:
                    33:49:ca:e4:ef:87:21:83:79:71:d5:e7:57:db:a8:
                    4f:dd:4a:ad:f5:3c:f5:44:55:fe:80:ec:11:4a:cc:
                    40:c1:3a:80:e1:c6:fd:8f:c0:ad:f4:5d:a9:83:a2:
                    bc:2b:ed:35:c2:8d:e2:23:d2:68:32:cd:15:4f:4c:
                    02:c8:54:e1:96:26:df:d1:cb:69:fe:8c:f8:9f:7b:
                    e1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D4:68:DF:51:78:39:B9:7E:B1:BE:C3:42:3C:50:73:5B:54:76:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b645d47c-d9ef-3428-83ca-0c1a50bccc04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:42:a1:9c:eb:72:f3:d5:da:2e:ff:09:cf:5a:6c:5c:42:58:
         41:d9:ee:73:be:d8:a1:5c:6b:05:ab:c7:dc:f8:75:eb:0c:d5:
         ac:9d:00:b7:12:22:61:60:d8:b8:93:86:84:3a:d5:31:0a:8f:
         20:e4:d7:3b:b9:26:23:8d:84:6a:aa:99:5c:bc:89:6f:6d:03:
         e9:57:69:d8:4a:5c:3e:eb:64:a7:8c:44:8c:b2:94:b3:34:19:
         da:90:0f:99:fc:4b:5a:03:c2:e9:e8:ef:f1:38:62:6a:ce:19:
         05:e5:6a:7f:b6:04:04:0f:e8:5d:3c:a8:a4:31:85:bc:1f:ea:
         81:9f:ff:1f:6f:42:12:c4:b9:4e:7c:3d:fc:44:8d:13:68:b2:
         3c:ea:1e:1a:a4:b2:1d:d7:88:ad:ad:a7:c8:7e:ac:f3:d9:15:
         a2:aa:6b:22:6f:02:b4:db:da:7c:d4:ba:a3:a1:1b:23:1f:ce:
         b4:3e:3c:11:ba:a5:46:e8:bc:b7:b5:4f:f6:17:a7:74:c4:0d:
         f3:04:d0:67:a2:2e:c8:82:4b:ea:58:37:fc:af:43:f9:fe:34:
         dc:88:b7:34:0a:87:0f:0b:af:28:c6:75:5a:82:91:65:7c:3d:
         a5:70:97:d7:3c:2e:f4:38:bc:7a:91:29:90:07:6f:68:6c:a9:
         47:81:5c:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFj8a6X/Z+p0UD0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
MGU5NTQxNzUtM2E2OC00ZTU4LTg1ZWEtZDAwNWJjZjVlN2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCFMktJMia+SBq8lg6EPuTx8HaI0w4FYw989
Ve4QJlIHdJYJnDwAn36y0Lfc7HnIOWuIP+gjRg2p7sMcAyGsRfWZE0MPhMxQ50D7
IU7aR/buiW2IcqIHBs0qemMZVtf3Q40Ohff0l/dqC1YwvckOd2PEvITMI5oEX66B
u36ist6ogV8lZ8S6voxyBsw5UEaEyL8LR/yELELtl8xtZhbiEqUsVXAl3K1LgNxJ
58UQ2gc0wN4zScrk74chg3lx1edX26hP3Uqt9Tz1RFX+gOwRSsxAwTqA4cb9j8Ct
9F2pg6K8K+01wo3iI9JoMs0VT0wCyFThlibf0ctp/oz4n3vhEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBrUaN9ReDm5frG+w0I8UHNbVHYJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYjY0NWQ0N2MtZDllZi0z
NDI4LTgzY2EtMGMxYTUwYmNjYzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApVX5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFFCoZzrcvPV2i7/Cc9abFxCWEHZ7nO+2KFcawWrx9z4desM1aydALcS
ImFg2LiThoQ61TEKjyDk1zu5JiONhGqqmVy8iW9tA+lXadhKXD7rZKeMRIyylLM0
GdqQD5n8S1oDwuno7/E4YmrOGQXlan+2BAQP6F08qKQxhbwf6oGf/x9vQhLEuU58
PfxEjRNosjzqHhqksh3XiK2tp8h+rPPZFaKqayJvArTb2nzUuqOhGyMfzrQ+PBG6
pUbovLe1T/YXp3TEDfME0GeiLsiCS+pYN/yvQ/n+NNyItzQKhw8LryjGdVqCkWV8
PaVwl9c8LvQ4vHqRKZAHb2hsqUeBXDc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:44:30 2025 by rpki-client