Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/24a49588-d1d6-3ad7-bcf5-deb044ad01d1.roa
File:                     24a49588-d1d6-3ad7-bcf5-deb044ad01d1.roa (raw, json)
Hash identifier:          13FPHpX8tWSMJzmod2Zmw1g2kOnpyN0+UCQwzzG1rI0=
Subject key identifier:   77:EA:36:E9:DF:38:C4:58:85:90:1C:EB:84:EA:3F:3A:3E:03:D1:D0
Certificate issuer:       /CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c
Certificate serial:       010D0C9F4328584AF0F13472C0E1138D9BA0C000
Authority key identifier: D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/24a49588-d1d6-3ad7-bcf5-deb044ad01d1.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        142.202.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:34:72:c0:e1:13:8d:9b:a0:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=c79c33bd-187e-43f3-b4f0-ea9c90a9be46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:97:e2:96:cb:66:1c:5a:22:89:7a:6d:03:
                    5a:31:6f:2e:f8:dc:4e:2c:91:12:82:ff:3f:3d:87:
                    ea:b0:75:f1:ca:3b:a4:60:5c:69:d2:84:37:f7:c2:
                    78:95:14:cf:e6:7f:41:5c:38:53:e0:6e:71:0e:d5:
                    fa:80:c5:ef:69:84:69:75:ab:1d:f6:0b:ad:8c:38:
                    0e:00:47:5c:7d:00:a6:0c:5b:fe:57:15:76:0e:43:
                    2d:5e:a6:bc:bb:01:53:1f:3d:bf:5b:14:98:ee:27:
                    1f:fc:83:c3:f6:c0:64:45:a6:a2:e4:10:fa:ea:07:
                    e2:c0:5c:e6:4e:24:cf:f0:3b:97:b9:27:d4:a7:a6:
                    76:6e:e0:49:8d:6d:6e:5a:85:37:a3:ca:81:dd:83:
                    fe:a6:66:4c:05:a6:8b:7c:73:73:67:8f:2f:ef:6f:
                    56:da:2b:5b:d8:01:10:7f:f9:84:ac:5c:e3:e6:0a:
                    74:d2:90:10:30:d7:c7:6d:f3:fa:cb:3c:62:a9:9b:
                    40:86:4a:a0:54:4e:90:cb:c3:6b:6d:87:dd:d4:2e:
                    5f:e4:73:62:85:a8:92:d1:2f:5b:7e:4f:82:bb:2f:
                    85:dc:f1:40:98:37:c1:d0:f5:98:0e:8b:54:f5:c2:
                    2f:65:9a:2c:79:8e:e8:fd:d1:46:7c:f4:2c:e0:61:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EA:36:E9:DF:38:C4:58:85:90:1C:EB:84:EA:3F:3A:3E:03:D1:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/24a49588-d1d6-3ad7-bcf5-deb044ad01d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl

            X509v3 Authority Key Identifier:
                keyid:D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a6:a8:03:82:83:69:a7:22:12:70:ca:f5:9a:84:77:62:23:
         7a:7c:21:46:30:46:8b:eb:7c:ab:bf:d9:0f:c4:c2:7e:17:9b:
         30:cd:f7:c2:22:9a:ab:3e:55:10:e6:f8:bb:01:2a:67:73:26:
         3b:f0:b1:42:3a:ba:50:7b:a7:36:cc:a7:0a:60:06:b0:3f:f5:
         38:dd:27:ca:69:7d:cc:13:fc:be:3d:f7:57:fb:22:a0:0e:0c:
         c5:02:f4:7e:13:75:2b:59:b8:87:2a:ff:6c:93:a0:df:46:09:
         af:b6:60:a2:4f:c7:b5:42:e0:ea:0c:fb:42:89:a8:89:8a:dd:
         e5:2d:7f:64:1c:66:18:6e:8f:7e:8a:bb:74:c0:b8:20:f8:e9:
         e2:f8:62:86:f9:46:3c:85:61:69:18:a1:44:dd:5c:dc:ed:fc:
         60:fa:61:6a:bc:2d:8c:fa:78:cd:29:ec:fb:09:de:5f:ce:ab:
         bc:18:63:ce:96:8a:a2:cc:27:94:e6:6f:a5:8f:7e:25:a5:c9:
         72:cb:d7:65:3a:ff:82:cb:49:d9:ff:d4:85:e0:39:d9:e8:c6:
         78:65:98:d1:a0:f6:2f:0c:67:4e:a6:57:39:02:c5:92:3e:17:
         34:8b:67:37:b8:ef:80:25:da:d1:1a:64:74:fc:df:57:3e:91:
         5a:a3:af:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TRywOETjZugwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWNjZmUyNjYtMDYwOS00OWNkLWIyYmEtNjcxYTY0ZWZk
YzdjMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk
Yzc5YzMzYmQtMTg3ZS00M2YzLWI0ZjAtZWE5YzkwYTliZTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0mX4pbLZhxaIol6bQNaMW8u+NxOLJESgv8/
PYfqsHXxyjukYFxp0oQ398J4lRTP5n9BXDhT4G5xDtX6gMXvaYRpdasd9gutjDgO
AEdcfQCmDFv+VxV2DkMtXqa8uwFTHz2/WxSY7icf/IPD9sBkRaai5BD66gfiwFzm
TiTP8DuXuSfUp6Z2buBJjW1uWoU3o8qB3YP+pmZMBaaLfHNzZ48v729W2itb2AEQ
f/mErFzj5gp00pAQMNfHbfP6yzxiqZtAhkqgVE6Qy8NrbYfd1C5f5HNihaiS0S9b
fk+Cuy+F3PFAmDfB0PWYDotU9cIvZZoseY7o/dFGfPQs4GFaAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHfqNunfOMRYhZAc64TqPzo+A9HQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xY2Nm
ZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFhNjRlZmRjN2MvMjRhNDk1ODgtZDFkNi0z
YWQ3LWJjZjUtZGViMDQ0YWQwMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWNjZmUyNjYtMDYwOS00OWNkLWIy
YmEtNjcxYTY0ZWZkYzdjLzFjY2ZlMjY2LTA2MDktNDljZC1iMmJhLTY3MWE2NGVm
ZGM3Yy5jcmwwHwYDVR0jBBgwFoAU0vlps9WA6dWmnzmbJ4no4nNpERkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xY2NmZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFh
NjRlZmRjN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsqBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWmqAOCg2mnIhJwyvWahHdiI3p8IUYwRovrfKu/2Q/Ewn4XmzDN98Ii
mqs+VRDm+LsBKmdzJjvwsUI6ulB7pzbMpwpgBrA/9TjdJ8ppfcwT/L4991f7IqAO
DMUC9H4TdStZuIcq/2yToN9GCa+2YKJPx7VC4OoM+0KJqImK3eUtf2QcZhhuj36K
u3TAuCD46eL4Yob5RjyFYWkYoUTdXNzt/GD6YWq8LYz6eM0p7PsJ3l/Oq7wYY86W
iqLMJ5Tmb6WPfiWlyXLL12U6/4LLSdn/1IXgOdnoxnhlmNGg9i8MZ06mVzkCxZI+
FzSLZze474Al2tEaZHT831c+kVqjrwE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:47 2025 by rpki-client