Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/42404971-4aca-30fb-a1e4-ab366b0ba71c.roa
File:                     42404971-4aca-30fb-a1e4-ab366b0ba71c.roa (raw, json)
Hash identifier:          feoMz2Ad9pu0K+LeNepaYiUvHUJ2ojIA9Kd96C8BrB8=
Subject key identifier:   AC:F6:72:AC:3F:D4:B4:D3:50:07:EC:CE:EF:4B:34:2A:FF:8E:DE:35
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328584ACE0B91385B4CA4E5B9C24880
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/42404971-4aca-30fb-a1e4-ab366b0ba71c.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     29890
IP address blocks:        148.76.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:91:38:5b:4c:a4:e5:b9:c2:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=550ec47a-c2bd-484b-aa3c-e5653dfab2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e4:67:77:11:4b:60:d2:c0:66:26:1a:b9:0a:
                    f8:e4:d5:5b:2d:c0:46:8d:19:a7:c1:9e:9b:02:38:
                    29:0c:6f:1a:26:b0:94:03:d9:81:59:39:61:18:f1:
                    ab:68:70:fb:36:56:55:81:dd:7a:47:6c:d1:8d:31:
                    79:18:67:42:53:63:bc:47:4a:e9:4e:36:07:ce:2f:
                    41:ae:c2:f6:28:33:ad:d9:ff:1f:37:c6:79:a3:3d:
                    44:97:2d:80:12:82:8e:a4:55:d4:d6:aa:49:d3:3b:
                    d4:e9:4a:68:dc:48:3d:fe:bb:fb:95:2a:80:65:30:
                    44:51:51:d7:bb:94:6e:5f:f0:38:cb:3c:61:e7:ab:
                    87:b4:01:34:a8:14:41:cf:17:60:0b:26:58:bb:80:
                    95:e7:60:6e:89:e6:2b:03:18:ea:10:07:e6:02:01:
                    a7:27:f7:2e:d9:69:76:26:67:53:ca:80:89:a1:ff:
                    d5:81:86:98:40:d9:8e:14:42:ad:93:62:65:ba:9e:
                    ef:3d:4c:c9:fa:7d:3a:79:d2:c0:fb:a6:13:47:07:
                    52:36:8b:9b:bb:dc:ce:b2:59:21:a3:9a:5f:87:45:
                    c9:7d:0f:67:be:86:2d:db:8b:04:c2:b8:4b:0e:43:
                    a4:1e:5d:41:c2:69:76:92:ac:91:2d:09:19:ac:d8:
                    05:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F6:72:AC:3F:D4:B4:D3:50:07:EC:CE:EF:4B:34:2A:FF:8E:DE:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/42404971-4aca-30fb-a1e4-ab366b0ba71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:40:20:41:fa:cb:92:f1:16:c4:80:96:d0:24:55:3f:7e:9d:
         d1:ce:e7:85:17:ee:df:73:ab:86:86:a4:73:50:42:f2:1a:4c:
         89:50:18:82:eb:8a:72:15:4f:44:fd:b8:a0:aa:83:14:4d:2b:
         ff:21:13:29:58:69:70:1a:f5:57:09:e1:2c:33:c6:88:9d:6e:
         2f:f3:9c:9c:29:e4:42:42:6d:58:4a:7d:a7:24:da:dc:07:d8:
         91:b9:e5:38:dd:65:39:62:21:98:1d:0d:da:89:af:56:84:23:
         55:4d:82:ee:43:93:47:5b:18:c5:34:de:97:10:1a:11:00:6d:
         63:85:5d:cf:0e:48:12:54:df:0f:b4:b8:49:62:1d:d6:74:9a:
         ec:24:fc:7c:e1:4a:a1:95:b1:64:b8:87:46:e8:31:16:df:a5:
         b6:7c:5d:38:05:e2:88:0e:26:4d:97:98:91:d7:9e:eb:b2:b3:
         a8:4a:28:a7:45:bd:89:8b:6a:31:af:93:ac:57:7c:47:82:6a:
         61:13:40:0e:01:95:a7:88:de:8d:89:d8:08:36:01:2e:20:64:
         f5:99:d4:57:06:89:62:c0:4f:24:c1:a5:da:c1:20:39:2b:df:
         56:9a:8b:9e:3b:6e:11:d4:16:e2:e1:ab:c1:cd:f1:10:3e:bd:
         7d:3f:34:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5E4W0yk5bnCSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU0NTliZTEtZjJjNy00NGEyLWFjNjktMDFkMjM4ZjFi
MGRlMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk
NTUwZWM0N2EtYzJiZC00ODRiLWFhM2MtZTU2NTNkZmFiMmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeRndxFLYNLAZiYauQr45NVbLcBGjRmnwZ6b
AjgpDG8aJrCUA9mBWTlhGPGraHD7NlZVgd16R2zRjTF5GGdCU2O8R0rpTjYHzi9B
rsL2KDOt2f8fN8Z5oz1Ely2AEoKOpFXU1qpJ0zvU6Upo3Eg9/rv7lSqAZTBEUVHX
u5RuX/A4yzxh56uHtAE0qBRBzxdgCyZYu4CV52BuieYrAxjqEAfmAgGnJ/cu2Wl2
JmdTyoCJof/VgYaYQNmOFEKtk2Jlup7vPUzJ+n06edLA+6YTRwdSNoubu9zOslkh
o5pfh0XJfQ9nvoYt24sEwrhLDkOkHl1Bwml2kqyRLQkZrNgFmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKz2cqw/1LTTUAfszu9LNCr/jt41MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1
OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQyMzhmMWIwZGUvNDI0MDQ5NzEtNGFjYS0z
MGZiLWExZTQtYWIzNjZiMGJhNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTU0NTliZTEtZjJjNy00NGEyLWFj
NjktMDFkMjM4ZjFiMGRlLzE1NDU5YmUxLWYyYzctNDRhMi1hYzY5LTAxZDIzOGYx
YjBkZS5jcmwwHwYDVR0jBBgwFoAUBXpuInCyuuyxWzzTdkAFIVAzxRUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQy
MzhmMWIwZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlEyyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1AIEH6y5LxFsSAltAkVT9+ndHO54UX7t9zq4aGpHNQQvIaTIlQGILr
inIVT0T9uKCqgxRNK/8hEylYaXAa9VcJ4Swzxoidbi/znJwp5EJCbVhKfack2twH
2JG55TjdZTliIZgdDdqJr1aEI1VNgu5Dk0dbGMU03pcQGhEAbWOFXc8OSBJU3w+0
uEliHdZ0muwk/HzhSqGVsWS4h0boMRbfpbZ8XTgF4ogOJk2XmJHXnuuys6hKKKdF
vYmLajGvk6xXfEeCamETQA4BlaeI3o2J2Ag2AS4gZPWZ1FcGiWLATyTBpdrBIDkr
31aai547bhHUFuLhq8HN8RA+vX0/NIc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:44:26 2025 by rpki-client