Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/825eff31-0a00-3196-b498-3aaebe2da7fc.roa
File:                     825eff31-0a00-3196-b498-3aaebe2da7fc.roa (raw, json)
Hash identifier:          zRw606NraUH7frBNyQceYapBx98J8s4xCe+lbJd9vig=
Subject key identifier:   85:AA:15:13:6A:3A:AB:56:BB:CD:F6:73:7E:B4:3E:66:E2:90:13:DD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFDDAD091524B682755D060
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/825eff31-0a00-3196-b498-3aaebe2da7fc.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7922
IP address blocks:        69.240.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:da:d0:91:52:4b:68:27:55:d0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=e830ddad-b751-45b2-8a33-95e19259575f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:0a:db:07:c4:a8:d7:e0:e7:a3:ed:73:2e:
                    41:60:7c:70:90:1f:9a:24:ea:67:52:a6:ab:e9:74:
                    31:74:c9:5d:45:ec:f7:a8:80:53:53:11:dc:ae:39:
                    66:94:4d:7a:5b:f1:8a:8b:1c:be:a9:3d:6d:df:e6:
                    9a:2b:bd:87:06:68:24:92:15:24:14:a4:a0:39:46:
                    05:54:c2:18:28:66:41:5e:36:4f:d5:95:e8:42:e3:
                    70:4c:8d:a3:07:c5:08:61:38:ac:0f:95:6a:13:15:
                    6a:dc:73:41:5a:77:0a:1c:2f:ea:05:4e:a6:c9:25:
                    fb:c2:71:a7:3d:00:03:69:53:bc:56:ee:b7:fb:01:
                    2c:d2:e4:67:5d:7e:da:73:bf:2c:4e:ae:e7:6b:89:
                    e4:61:0b:45:ee:f4:88:09:43:93:56:ea:76:d4:9b:
                    d5:ba:0a:aa:32:82:06:63:f9:36:1d:46:91:dc:79:
                    87:0c:d1:03:d7:86:5c:9f:5d:c6:7b:51:03:2b:79:
                    f9:9d:6c:25:f7:3c:ca:46:e1:fc:f4:57:96:09:9f:
                    86:cf:2e:45:35:5b:19:a0:55:67:be:a8:02:ca:31:
                    68:61:57:15:9d:ba:fb:ba:f9:dc:24:7a:15:0f:a3:
                    3a:f6:5e:14:04:89:ba:d5:f9:07:56:dc:4d:ef:8a:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AA:15:13:6A:3A:AB:56:BB:CD:F6:73:7E:B4:3E:66:E2:90:13:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/825eff31-0a00-3196-b498-3aaebe2da7fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.240.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:eb:a8:8c:d0:06:56:2a:a5:17:4a:1e:ad:4c:19:df:95:b2:
         73:38:04:f7:29:3e:39:4e:db:a1:ed:e7:df:5a:bf:21:47:3a:
         8e:e0:60:41:a3:ef:e1:89:9a:c3:75:5f:e0:34:57:1b:86:ee:
         12:b0:40:eb:4c:b8:a4:ba:2e:47:c6:85:4a:7f:f6:9a:07:b4:
         26:f9:37:d6:cc:d4:d7:ad:87:8d:09:2c:5e:e3:61:91:38:e7:
         4d:e8:c7:4c:0b:84:da:35:c0:67:8f:05:72:30:92:73:5c:5e:
         7b:f9:0e:2c:37:05:03:eb:25:10:dd:b6:2f:ea:6e:ec:ec:e5:
         bf:c7:7c:04:b9:cd:02:28:37:bd:c6:88:9b:9c:a7:3d:d7:b4:
         7b:0b:6f:51:ee:05:1f:70:1b:ac:f0:3f:1e:35:cf:c3:22:a5:
         05:72:48:81:ee:0f:e4:4f:f1:74:ed:34:74:99:c4:23:d0:fb:
         64:30:a9:d1:53:20:1b:8e:43:f2:14:13:12:40:65:87:1e:46:
         73:3e:d1:ae:2c:e5:92:c9:19:38:f8:01:e1:ba:d4:96:69:28:
         03:90:f4:dd:b8:30:83:b8:5e:13:a9:b6:ec:ba:4e:10:96:59:
         c0:24:23:b5:56:5b:4c:58:5a:73:bf:28:bd:0f:93:a4:1c:47:
         97:61:6c:db
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEpc/drQkVJLaCdV0GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
ZTgzMGRkYWQtYjc1MS00NWIyLThhMzMtOTVlMTkyNTk1NzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5gK2wfEqNfg56Ptcy5BYHxwkB+aJOpnUqar
6XQxdMldRez3qIBTUxHcrjlmlE16W/GKixy+qT1t3+aaK72HBmgkkhUkFKSgOUYF
VMIYKGZBXjZP1ZXoQuNwTI2jB8UIYTisD5VqExVq3HNBWncKHC/qBU6mySX7wnGn
PQADaVO8Vu63+wEs0uRnXX7ac78sTq7na4nkYQtF7vSICUOTVup21JvVugqqMoIG
Y/k2HUaR3HmHDNED14Zcn13Ge1EDK3n5nWwl9zzKRuH89FeWCZ+Gzy5FNVsZoFVn
vqgCyjFoYVcVnbr7uvncJHoVD6M69l4UBIm61fkHVtxN74o6IwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIWqFRNqOqtWu832c360PmbikBPdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODI1ZWZmMzEtMGEwMC0z
MTk2LWI0OTgtM2FhZWJlMmRhN2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMERfAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEA2OuojNAGViqlF0oerUwZ35WyczgE9yk+OU7boe3n31q/IUc6juBgQaPv
4Ymaw3Vf4DRXG4buErBA60y4pLouR8aFSn/2mge0Jvk31szU162HjQksXuNhkTjn
TejHTAuE2jXAZ48FcjCSc1xee/kOLDcFA+slEN22L+pu7Ozlv8d8BLnNAig3vcaI
m5ynPde0ewtvUe4FH3AbrPA/HjXPwyKlBXJIge4P5E/xdO00dJnEI9D7ZDCp0VMg
G45D8hQTEkBlhx5Gcz7RrizlkskZOPgB4brUlmkoA5D03bgwg7heE6m27LpOEJZZ
wCQjtVZbTFhac78ovQ+TpBxHl2Fs2w==
-----END CERTIFICATE-----
Generated at Tue Jul 1 14:06:58 2025 by rpki-client