Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9669a53d-339e-36d9-8700-8c5bc3330fdf.roa
File:                     9669a53d-339e-36d9-8700-8c5bc3330fdf.roa (raw, json)
Hash identifier:          SNyRbYUyJPRz7an4dOPTCgPQkmzI+6Oj7G8zQNOiJVw=
Subject key identifier:   37:B0:FE:CB:7E:89:FD:9C:ED:06:1A:AF:C6:DF:04:56:4D:28:A3:9A
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F4328584A374AC645665C19CCEDA28200
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9669a53d-339e-36d9-8700-8c5bc3330fdf.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     950
IP address blocks:        192.149.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c6:45:66:5c:19:cc:ed:a2:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=d066d4b9-4675-479f-85e2-bdf62d34f469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:04:c4:68:97:5c:0c:1b:f5:09:90:67:12:44:
                    ff:f1:f9:d9:87:53:03:3a:63:85:0a:31:08:6a:3d:
                    dd:54:c8:c5:64:e9:d8:7f:74:61:a3:12:33:18:9a:
                    53:7e:de:40:d7:ec:85:87:a4:24:7e:d2:cc:e0:d7:
                    1d:93:78:cd:ab:21:7a:4e:f8:1d:35:2d:45:e3:18:
                    c0:ee:dd:7b:52:2c:0a:e6:e0:66:30:7b:70:19:4f:
                    ce:6b:18:0c:a2:a6:2f:4a:81:a0:32:5c:37:72:8f:
                    04:5b:61:85:b9:c1:74:39:66:f5:4e:de:6c:9e:f1:
                    5a:35:49:c1:ce:84:86:9e:93:6c:e0:8f:d8:cd:74:
                    0d:97:d7:97:38:0b:50:44:db:a3:98:31:3f:c1:09:
                    1c:e6:80:1f:7c:a6:91:b0:cc:73:77:b3:4c:4c:09:
                    b4:80:21:d2:fb:0e:8d:a4:d5:ad:bb:14:73:e0:0d:
                    37:16:6b:9d:ee:84:81:5f:13:f4:3a:83:51:9f:51:
                    68:af:ad:86:36:30:cc:1a:5e:d5:54:5f:c8:96:17:
                    72:67:c6:3a:ef:8a:ec:9b:7c:0e:c5:bb:7b:43:87:
                    9d:fe:57:cf:0a:0f:66:45:c4:6e:7d:ae:07:da:92:
                    40:22:54:0e:89:c6:4e:6b:7c:0f:8f:42:59:d4:0b:
                    23:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B0:FE:CB:7E:89:FD:9C:ED:06:1A:AF:C6:DF:04:56:4D:28:A3:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9669a53d-339e-36d9-8700-8c5bc3330fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2d:9a:99:79:21:d9:0a:96:94:62:aa:59:8c:f5:ae:1e:39:
         e7:f0:f1:72:8e:92:86:92:9c:75:6b:d6:a8:8f:03:91:b2:da:
         36:d4:f9:86:5c:ff:18:38:20:69:5b:ac:85:17:17:82:b1:62:
         4b:81:db:b6:76:ca:25:2e:03:10:28:0a:90:21:e1:5a:27:54:
         e9:45:ae:6b:e4:62:68:b4:8b:a0:d8:92:a3:4f:51:43:89:40:
         93:c5:e3:d2:9f:29:3a:27:3c:05:59:f5:0e:fd:44:b9:1a:72:
         d1:25:5b:be:94:8d:04:0d:b4:46:25:73:04:bc:82:64:79:4c:
         e6:b6:d5:c5:e4:ac:7f:87:29:97:7f:ab:60:cf:a9:43:5b:30:
         38:76:cb:65:f7:ef:a0:73:73:e9:1f:a3:e2:c7:07:7a:95:9c:
         30:1b:b6:9a:3e:2a:b2:dc:9b:ef:9a:f2:9c:00:5d:50:7f:e0:
         5f:05:7b:d3:c6:24:e4:af:55:f2:9b:d9:13:2b:80:22:52:1e:
         cb:ba:4a:a0:f9:e9:5f:c3:c8:d4:99:2f:95:0e:a5:24:fa:9f:
         5c:7f:f1:9e:5f:ae:40:8a:49:aa:ae:22:68:55:63:22:d2:7c:
         44:78:a8:5c:64:b1:43:58:4c:3d:3c:6d:a9:a0:e8:f8:c7:7a:
         63:2a:c9:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsZFZlwZzO2iggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3
ZWVlMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
ZDA2NmQ0YjktNDY3NS00NzlmLTg1ZTItYmRmNjJkMzRmNDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQTEaJdcDBv1CZBnEkT/8fnZh1MDOmOFCjEI
aj3dVMjFZOnYf3RhoxIzGJpTft5A1+yFh6QkftLM4Ncdk3jNqyF6TvgdNS1F4xjA
7t17UiwK5uBmMHtwGU/OaxgMoqYvSoGgMlw3co8EW2GFucF0OWb1Tt5snvFaNUnB
zoSGnpNs4I/YzXQNl9eXOAtQRNujmDE/wQkc5oAffKaRsMxzd7NMTAm0gCHS+w6N
pNWtuxRz4A03Fmud7oSBXxP0OoNRn1For62GNjDMGl7VVF/IlhdyZ8Y674rsm3wO
xbt7Q4ed/lfPCg9mRcRufa4H2pJAIlQOicZOa3wPj0JZ1AsjowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDew/st+if2c7QYar8bfBFZNKKOaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3
Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvOTY2OWE1M2QtMzM5ZS0z
NmQ5LTg3MDAtOGM1YmMzMzMwZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy
ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw
N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk
N2MyMDdlZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABctmpl5IdkKlpRiqlmM9a4eOefw8XKOkoaSnHVr1qiPA5Gy2jbU+YZc
/xg4IGlbrIUXF4KxYkuB27Z2yiUuAxAoCpAh4VonVOlFrmvkYmi0i6DYkqNPUUOJ
QJPF49KfKTonPAVZ9Q79RLkactElW76UjQQNtEYlcwS8gmR5TOa21cXkrH+HKZd/
q2DPqUNbMDh2y2X376Bzc+kfo+LHB3qVnDAbtpo+KrLcm++a8pwAXVB/4F8Fe9PG
JOSvVfKb2RMrgCJSHsu6SqD56V/DyNSZL5UOpST6n1x/8Z5frkCKSaquImhVYyLS
fER4qFxksUNYTD08bamg6PjHemMqyWM=
-----END CERTIFICATE-----
Generated at Tue Jul 1 10:27:00 2025 by rpki-client