Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ec4675b-c032-3663-8ba7-b236e2fb82cf.roa
File:                     3ec4675b-c032-3663-8ba7-b236e2fb82cf.roa (raw, json)
Hash identifier:          IHMlh/MXqOzJzbFOmH0XBZuprhQ8JsqgvRxlkBx8ejU=
Subject key identifier:   30:F5:EE:7E:50:A1:78:25:AC:18:C5:3A:CD:04:AA:71:1A:75:65:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2ABAEAF50D38D2CD7C644818
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ec4675b-c032-3663-8ba7-b236e2fb82cf.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     0
IP address blocks:        199.7.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:ea:f5:0d:38:d2:cd:7c:64:48:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=2a1b1dde-5a91-4c94-9c89-57c18c7fdc77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2d:1b:b7:75:e5:7b:de:ef:f1:79:4d:4e:c4:
                    31:82:83:ff:91:44:d7:25:ab:67:7a:fd:21:e1:59:
                    bc:67:16:99:e8:4d:bc:97:da:5b:a0:c6:6c:79:ce:
                    f1:68:45:4e:4b:ef:66:9d:97:59:9e:1d:4a:f1:fb:
                    9a:f4:65:fb:1d:7a:97:b6:2e:98:42:6a:0f:55:14:
                    1d:49:bd:f2:6b:de:36:30:38:2a:b7:57:e7:da:82:
                    14:9b:90:c5:6b:ea:3f:fd:1b:8d:56:3b:eb:f8:6e:
                    2d:4c:45:7d:5a:90:be:fe:17:6e:cc:8d:f3:1a:5f:
                    74:44:1b:e8:b1:b6:00:0b:17:59:4e:06:eb:fe:36:
                    ee:f9:8b:f5:05:2e:71:77:35:09:65:42:42:50:70:
                    bd:67:15:b6:8a:f1:a8:10:45:14:66:90:59:a6:7f:
                    79:bc:eb:10:04:1b:83:39:f5:a9:30:d9:09:26:7a:
                    a8:1a:71:22:12:3d:51:a0:85:46:03:3a:cd:7e:7f:
                    ce:88:53:21:5f:fa:ef:e2:38:1a:cf:26:f7:ff:f2:
                    0c:d3:8d:56:d5:9b:25:bc:1f:fe:02:c6:7f:cc:fd:
                    ae:6f:a1:0a:74:dc:4b:38:e6:b1:7f:f7:48:a7:ca:
                    a8:bd:55:6d:ae:53:78:67:56:b1:03:0d:b7:df:d2:
                    b7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F5:EE:7E:50:A1:78:25:AC:18:C5:3A:CD:04:AA:71:1A:75:65:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ec4675b-c032-3663-8ba7-b236e2fb82cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f2:94:49:82:60:55:41:b6:5e:49:c7:f6:f1:92:30:07:20:
         12:09:24:71:e3:b4:d8:0c:7b:dd:16:c6:65:74:c9:ed:28:46:
         cb:d3:b7:fd:0e:16:f0:55:bb:e7:8c:98:68:86:11:8f:ca:c7:
         51:34:b7:86:92:d7:b2:c9:ce:d5:34:be:98:98:e1:d3:83:86:
         b4:ab:7d:11:23:9d:65:c6:61:e2:30:17:ef:c1:de:f6:8d:70:
         5c:8d:31:a5:f1:6a:d7:53:46:2c:df:bd:d6:24:de:fa:87:2a:
         ef:df:4e:12:42:8e:ab:63:66:46:19:39:57:5b:c9:19:d3:47:
         80:13:5d:c9:9f:31:d5:33:04:d1:85:ea:8d:af:4f:d0:62:19:
         73:f1:6d:cc:00:f7:7f:30:b3:a8:a5:c1:15:d8:73:cc:c8:a0:
         ee:a3:0f:28:76:fc:4e:34:14:e1:09:a5:bf:f5:45:e8:09:4f:
         fb:d8:02:23:a6:63:28:84:43:ac:4c:a0:8b:66:32:fa:9d:76:
         8b:59:84:5a:9b:ae:90:3a:34:be:64:76:0c:c7:7a:99:85:d4:
         ec:2c:47:2e:54:0f:7c:f2:83:42:f9:6d:a1:b3:52:62:9d:99:
         71:6b:b4:8a:1f:cb:78:ba:2e:1f:28:7e:c0:e1:d4:3b:44:6f:
         45:e7:20:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquur1DTjSzXxkSBgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
MmExYjFkZGUtNWE5MS00Yzk0LTljODktNTdjMThjN2ZkYzc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy0bt3Xle97v8XlNTsQxgoP/kUTXJatnev0h
4Vm8ZxaZ6E28l9pboMZsec7xaEVOS+9mnZdZnh1K8fua9GX7HXqXti6YQmoPVRQd
Sb3ya942MDgqt1fn2oIUm5DFa+o//RuNVjvr+G4tTEV9WpC+/hduzI3zGl90RBvo
sbYACxdZTgbr/jbu+Yv1BS5xdzUJZUJCUHC9ZxW2ivGoEEUUZpBZpn95vOsQBBuD
OfWpMNkJJnqoGnEiEj1RoIVGAzrNfn/OiFMhX/rv4jgazyb3//IM041W1ZslvB/+
AsZ/zP2ub6EKdNxLOOaxf/dIp8qovVVtrlN4Z1axAw2339K3XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDD17n5QoXglrBjFOs0EqnEadWVZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2VjNDY3NWItYzAzMi0z
NjYzLThiYTctYjIzNmUyZmI4MmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxwc4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJbylEmCYFVBtl5Jx/bxkjAHIBIJJHHjtNgMe90WxmV0ye0oRsvTt/0O
FvBVu+eMmGiGEY/Kx1E0t4aS17LJztU0vpiY4dODhrSrfREjnWXGYeIwF+/B3vaN
cFyNMaXxatdTRizfvdYk3vqHKu/fThJCjqtjZkYZOVdbyRnTR4ATXcmfMdUzBNGF
6o2vT9BiGXPxbcwA938ws6ilwRXYc8zIoO6jDyh2/E40FOEJpb/1RegJT/vYAiOm
YyiEQ6xMoItmMvqddotZhFqbrpA6NL5kdgzHepmF1OwsRy5UD3zyg0L5baGzUmKd
mXFrtIofy3i6Lh8ofsDh1DtEb0XnIHA=
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:39:04 2025 by rpki-client