Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8f6ac702-a11b-37d8-96fb-20251e3e2ca6.roa
File:                     8f6ac702-a11b-37d8-96fb-20251e3e2ca6.roa (raw, json)
Hash identifier:          rHnyEh3gFNj3/f0KzvqBWM8Ade4lGwhVndCOC6hjJQI=
Subject key identifier:   B3:BC:07:20:6F:2E:50:E3:EB:7A:8A:EB:9E:7A:4C:6D:94:A0:EF:B0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584AE19692CEA183856C4FBFD000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8f6ac702-a11b-37d8-96fb-20251e3e2ca6.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     22773
IP address blocks:        24.249.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:92:ce:a1:83:85:6c:4f:bf:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=2962e507-4dc7-434f-835d-d9897bf50275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:75:7d:5a:22:1a:49:ea:4e:ad:cc:9e:9f:
                    23:20:be:52:11:41:b1:2e:19:5e:31:03:a1:cd:c2:
                    c9:88:16:bf:0b:37:e5:94:16:fa:13:20:f3:26:7e:
                    11:e7:38:e2:92:92:0c:98:86:12:c5:83:12:f5:f2:
                    4f:ac:85:e5:8e:46:05:17:b0:2a:78:82:08:ab:b7:
                    e2:ce:cc:67:ac:bc:51:1e:26:6c:e6:76:04:f4:9e:
                    94:98:45:cf:62:db:49:c1:ac:e5:5f:4b:b9:b6:25:
                    24:b3:1c:ce:b4:43:b2:ae:50:95:11:5e:97:29:55:
                    0b:ce:a8:6e:57:9b:e3:1d:09:9c:fa:b0:4e:f8:e9:
                    15:3a:97:d9:17:90:ee:af:01:e7:46:e0:7a:0c:c6:
                    06:19:b1:3c:d3:ea:8b:34:54:8a:7c:b4:cf:23:4a:
                    61:36:d9:08:15:0d:3c:e4:03:f0:73:5e:fb:1c:1c:
                    e6:75:6f:52:f6:d8:ad:20:4a:6f:52:43:ad:8e:d8:
                    fc:dd:10:6e:0d:26:68:8b:03:d4:24:98:9a:d6:f2:
                    c6:18:2e:2f:dc:7e:3b:1d:77:09:f8:1f:bb:60:58:
                    41:bd:3f:d2:39:82:44:0a:31:5a:7f:24:0f:66:32:
                    b6:76:9e:3f:8e:29:6a:95:00:05:cd:eb:61:d0:27:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BC:07:20:6F:2E:50:E3:EB:7A:8A:EB:9E:7A:4C:6D:94:A0:EF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8f6ac702-a11b-37d8-96fb-20251e3e2ca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.249.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0d:c8:9b:bb:5a:cd:50:94:22:f9:92:35:50:47:2c:dd:37:
         02:b1:60:1c:7d:70:4e:2b:3b:05:b0:e6:43:2e:c0:29:cc:a6:
         88:e7:fd:72:39:a8:ed:08:0a:b4:85:dc:1d:63:02:fb:eb:e9:
         af:89:d4:bb:a5:37:2f:8a:23:31:3f:17:66:54:7e:53:6a:e8:
         37:87:60:95:6c:13:55:05:b9:3c:fd:6a:0b:5b:5c:c5:68:16:
         bf:9f:c5:44:f3:63:a3:8f:63:db:e0:86:78:ff:e5:96:d9:22:
         74:6c:ab:77:9d:8a:18:c0:d4:9c:4d:6d:37:1b:25:88:4f:99:
         83:cb:8e:a6:28:16:d3:80:86:2d:d6:f3:66:2f:9d:74:43:bb:
         51:c4:88:ee:10:b7:17:22:09:ab:a7:db:9f:92:e8:6c:9e:7c:
         9b:cf:9e:aa:51:4e:82:aa:19:a6:3d:d5:f8:c6:9a:14:67:51:
         2b:e9:ef:b2:e8:8a:af:6e:d2:53:44:01:c1:7c:cc:ea:98:6e:
         20:e1:09:a4:5a:10:ec:14:17:51:ec:70:fb:cc:8d:40:f1:2f:
         ae:a1:7d:52:f7:12:03:93:e4:b2:2b:52:95:37:ed:07:a1:c1:
         c2:e5:87:e3:87:df:8b:04:c6:99:1a:32:ae:8e:78:f2:73:a4:
         b3:bc:7e:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlpLOoYOFbE+/0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
Mjk2MmU1MDctNGRjNy00MzRmLTgzNWQtZDk4OTdiZjUwMjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxV1fVoiGknqTq3Mnp8jIL5SEUGxLhleMQOh
zcLJiBa/CzfllBb6EyDzJn4R5zjikpIMmIYSxYMS9fJPrIXljkYFF7AqeIIIq7fi
zsxnrLxRHiZs5nYE9J6UmEXPYttJwazlX0u5tiUksxzOtEOyrlCVEV6XKVULzqhu
V5vjHQmc+rBO+OkVOpfZF5DurwHnRuB6DMYGGbE80+qLNFSKfLTPI0phNtkIFQ08
5APwc177HBzmdW9S9titIEpvUkOtjtj83RBuDSZoiwPUJJia1vLGGC4v3H47HXcJ
+B+7YFhBvT/SOYJECjFafyQPZjK2dp4/jilqlQAFzeth0CczSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLO8ByBvLlDj63qK6556TG2UoO+wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGY2YWM3MDItYTExYi0z
N2Q4LTk2ZmItMjAyNTFlM2UyY2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPk4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgNyJu7Ws1QlCL5kjVQRyzdNwKxYBx9cE4rOwWw5kMuwCnMpojn/XI5
qO0ICrSF3B1jAvvr6a+J1LulNy+KIzE/F2ZUflNq6DeHYJVsE1UFuTz9agtbXMVo
Fr+fxUTzY6OPY9vghnj/5ZbZInRsq3edihjA1JxNbTcbJYhPmYPLjqYoFtOAhi3W
82YvnXRDu1HEiO4QtxciCaun25+S6GyefJvPnqpRToKqGaY91fjGmhRnUSvp77Lo
iq9u0lNEAcF8zOqYbiDhCaRaEOwUF1HscPvMjUDxL66hfVL3EgOT5LIrUpU37Qeh
wcLlh+OH34sExpkaMq6OePJzpLO8flo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:46:48 2025 by rpki-client