Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/2dc63e12-5a72-30ea-9d4c-76b19dc0bed3.roa
File:                     2dc63e12-5a72-30ea-9d4c-76b19dc0bed3.roa (raw, json)
Hash identifier:          JebedSGJhT98DhPD68Wg7pHJDqE+95MKzh+9DqqpETE=
Subject key identifier:   DF:E5:80:98:D6:3A:61:AE:CD:64:24:8D:54:0B:59:11:5E:2E:C6:E9
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F4328584A3E45A1299E5266DD42F54340
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/2dc63e12-5a72-30ea-9d4c-76b19dc0bed3.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     55091
IP address blocks:        192.64.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a1:29:9e:52:66:dd:42:f5:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=bd743b3e-8efc-4999-aeac-0826c4ae095b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:09:80:43:3b:04:10:11:4d:39:8a:4a:9f:e1:
                    01:45:aa:77:10:9a:0e:ce:2a:17:e0:c3:cd:85:88:
                    5d:57:6e:88:6e:50:20:dc:e8:f2:62:98:16:cb:ab:
                    96:b0:a6:6e:ce:0f:55:bd:4c:ec:bd:16:0f:b6:73:
                    83:f9:b7:3f:ce:51:25:28:d7:ac:22:b0:d1:a7:1d:
                    b2:5e:78:00:95:f5:ae:f5:17:52:ab:2c:60:56:64:
                    8c:b7:80:82:39:5a:60:26:31:cd:15:77:5f:2c:68:
                    03:4e:f9:a0:d3:98:e9:58:7a:ec:ef:a5:ac:2c:5a:
                    7a:5c:de:79:88:02:52:2a:4b:5c:5c:ee:23:3c:44:
                    c3:1e:be:87:b4:c9:45:b2:66:56:1e:84:9e:04:4f:
                    8c:26:08:60:4d:38:1d:55:50:b9:06:32:4f:c2:c9:
                    86:79:78:3e:ae:02:ee:94:5b:86:9a:fa:b1:64:1b:
                    78:90:dc:a9:18:aa:bb:60:da:79:48:cd:bb:24:af:
                    8b:66:24:3e:99:f5:77:98:66:59:df:c7:8e:6e:ab:
                    73:50:bb:bc:70:8e:01:18:d0:3e:11:88:f2:1f:7b:
                    ce:57:f7:9b:32:d4:85:e7:45:8d:4a:ce:d0:8d:6c:
                    8d:10:d5:a2:d0:ab:9a:1b:1c:07:57:74:a5:cb:14:
                    fd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E5:80:98:D6:3A:61:AE:CD:64:24:8D:54:0B:59:11:5E:2E:C6:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/2dc63e12-5a72-30ea-9d4c-76b19dc0bed3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:3b:e3:e8:17:7d:09:cc:13:6e:53:e7:1c:3c:3e:8e:64:28:
         8f:f0:94:30:bd:03:bd:61:9d:82:4f:d0:91:4e:d2:fb:9d:bb:
         3d:70:24:ed:30:23:60:38:48:44:f0:6d:cb:a6:5e:22:f7:59:
         b2:b1:9e:47:03:4a:67:da:78:90:9f:f9:ab:83:22:86:da:e6:
         12:d7:ec:62:f2:44:14:2a:9d:0d:88:10:7e:35:1b:5d:e1:c5:
         6b:ce:36:0b:9f:5a:73:f5:ea:63:8a:48:7b:2e:a6:55:2d:09:
         8f:4b:97:df:5b:c5:05:2f:10:bf:d1:7c:f2:02:0c:41:d1:c4:
         3c:b9:65:6d:f2:cf:46:ec:e5:eb:7e:72:cf:7b:d8:25:55:40:
         9e:54:cb:ac:da:ad:e5:0d:64:65:c2:71:ef:f4:ba:9a:aa:c7:
         22:63:2a:b8:56:ef:f1:f0:ce:53:65:40:0f:66:cf:1c:72:26:
         b0:be:73:2f:18:ff:d8:0f:88:13:67:db:70:f8:51:d8:26:32:
         b0:3e:23:4e:42:f9:f8:4f:07:bd:eb:65:72:a9:1b:c8:31:c3:
         c0:ad:7e:e3:e1:b8:7e:97:a9:38:bb:69:ff:7a:69:d5:8a:37:
         44:ac:aa:1c:e0:ac:5b:b0:8d:b0:3e:6d:35:ea:33:0e:d8:9e:
         6e:56:37:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RaEpnlJm3UL1Q0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZhNzUyNjEtNGUyNy00NzhhLThmOWUtNzFhOTkxNWNl
OWI0MB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk
YmQ3NDNiM2UtOGVmYy00OTk5LWFlYWMtMDgyNmM0YWUwOTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAmAQzsEEBFNOYpKn+EBRap3EJoOzioX4MPN
hYhdV26IblAg3OjyYpgWy6uWsKZuzg9VvUzsvRYPtnOD+bc/zlElKNesIrDRpx2y
XngAlfWu9RdSqyxgVmSMt4CCOVpgJjHNFXdfLGgDTvmg05jpWHrs76WsLFp6XN55
iAJSKktcXO4jPETDHr6HtMlFsmZWHoSeBE+MJghgTTgdVVC5BjJPwsmGeXg+rgLu
lFuGmvqxZBt4kNypGKq7YNp5SM27JK+LZiQ+mfV3mGZZ38eObqtzULu8cI4BGNA+
EYjyH3vOV/ebMtSF50WNSs7QjWyNENWi0KuaGxwHV3SlyxT91wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN/lgJjWOmGuzWQkjVQLWRFeLsbpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NmE3
NTI2MS00ZTI3LTQ3OGEtOGY5ZS03MWE5OTE1Y2U5YjQvMmRjNjNlMTItNWE3Mi0z
MGVhLTlkNGMtNzZiMTlkYzBiZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTZhNzUyNjEtNGUyNy00NzhhLThm
OWUtNzFhOTkxNWNlOWI0LzU2YTc1MjYxLTRlMjctNDc4YS04ZjllLTcxYTk5MTVj
ZTliNC5jcmwwHwYDVR0jBBgwFoAUpD4W+eX7d/UJhUBw50W6Yj2uG0wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81NmE3NTI2MS00ZTI3LTQ3OGEtOGY5ZS03MWE5
OTE1Y2U5YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEAdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGE74+gXfQnME25T5xw8Po5kKI/wlDC9A71hnYJP0JFO0vuduz1wJO0w
I2A4SETwbcumXiL3WbKxnkcDSmfaeJCf+auDIoba5hLX7GLyRBQqnQ2IEH41G13h
xWvONgufWnP16mOKSHsuplUtCY9Ll99bxQUvEL/RfPICDEHRxDy5ZW3yz0bs5et+
cs972CVVQJ5Uy6zareUNZGXCce/0upqqxyJjKrhW7/HwzlNlQA9mzxxyJrC+cy8Y
/9gPiBNn23D4UdgmMrA+I05C+fhPB73rZXKpG8gxw8CtfuPhuH6XqTi7af96adWK
N0SsqhzgrFuwjbA+bTXqMw7Ynm5WN6k=
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:43:25 2025 by rpki-client