Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa
File:                     8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa (raw, json)
Hash identifier:          ixOuZqoLvpgzqXhZfmuAhpqwZZYzrmb15AHIKyOAWkk=
Subject key identifier:   34:0F:72:93:CF:73:E9:B4:E1:DE:AE:13:25:52:2F:4A:2B:CF:A0:E5
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584AF0F14974F2CCAFDAF88E9B80
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     17378
IP address blocks:        40.133.32.0/21 maxlen: 24
                          40.138.220.0/22 maxlen: 24
                          40.142.8.0/22 maxlen: 24
                          40.142.16.0/20 maxlen: 24
                          40.142.32.0/19 maxlen: 24
                          40.142.64.0/18 maxlen: 24
                          40.143.0.0/18 maxlen: 24
                          40.143.72.0/21 maxlen: 24
                          40.143.80.0/20 maxlen: 24
                          40.143.96.0/19 maxlen: 24
                          40.143.128.0/17 maxlen: 24
                          63.131.224.0/20 maxlen: 24
                          63.246.0.0/19 maxlen: 24
                          63.254.152.0/21 maxlen: 24
                          65.61.96.0/19 maxlen: 24
                          65.99.192.0/18 maxlen: 24
                          66.36.16.0/20 maxlen: 24
                          66.45.160.0/19 maxlen: 24
                          66.203.64.0/19 maxlen: 24
                          66.206.192.0/20 maxlen: 24
                          67.212.128.0/20 maxlen: 24
                          67.216.64.0/20 maxlen: 24
                          67.221.224.0/20 maxlen: 24
                          68.168.80.0/20 maxlen: 24
                          68.171.128.0/19 maxlen: 24
                          69.7.224.0/20 maxlen: 24
                          69.26.96.0/19 maxlen: 24
                          69.40.208.0/20 maxlen: 24
                          69.147.160.0/19 maxlen: 24
                          69.166.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:49:74:f2:cc:af:da:f8:8e:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=750e0d03-7193-4924-b692-abf0db75121c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9a:7e:36:09:fc:95:7a:4c:da:a9:96:0a:fe:
                    41:f5:af:11:62:e3:09:ce:2e:cf:70:3e:f0:45:33:
                    82:4e:5d:ec:05:f7:46:12:76:71:5a:b4:58:9c:17:
                    c0:38:b7:fd:4a:5d:22:02:e8:71:0d:09:bc:a3:34:
                    a0:9f:0b:c7:76:41:4e:8a:13:00:5b:53:ac:8c:18:
                    53:a1:65:88:ec:25:82:0c:18:6b:16:df:d2:b4:69:
                    0c:44:29:23:bc:66:a8:c3:34:ce:d1:b8:0f:f1:79:
                    75:ab:db:f7:95:26:d1:c7:a8:42:fb:58:b8:ac:b4:
                    16:2b:e8:97:1f:d0:d2:7a:0b:c2:75:4b:4d:e7:f4:
                    1f:d5:ca:af:d7:57:92:8f:c3:95:e2:cb:51:3d:5d:
                    4c:f9:a3:51:e4:f2:84:21:68:e4:10:ab:31:88:cb:
                    02:76:0b:c7:27:2b:d2:81:4b:38:52:ed:48:21:40:
                    a0:f9:2f:53:16:33:c7:9f:9c:c1:09:36:f3:a7:2b:
                    a1:00:e3:8d:f2:5e:0a:10:11:1b:55:00:39:56:4c:
                    c1:60:90:17:d5:13:10:d4:be:ae:e9:66:72:45:8d:
                    0b:a8:c6:11:96:d3:76:c4:63:f8:85:3d:ef:41:d5:
                    db:f0:8a:ed:84:89:f3:40:95:d0:c6:fd:5a:cd:46:
                    76:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0F:72:93:CF:73:E9:B4:E1:DE:AE:13:25:52:2F:4A:2B:CF:A0:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.133.32.0/21
                  40.138.220.0/22
                  40.142.8.0/22
                  40.142.16.0-40.142.127.255
                  40.143.0.0/18
                  40.143.72.0-40.143.255.255
                  63.131.224.0/20
                  63.246.0.0/19
                  63.254.152.0/21
                  65.61.96.0/19
                  65.99.192.0/18
                  66.36.16.0/20
                  66.45.160.0/19
                  66.203.64.0/19
                  66.206.192.0/20
                  67.212.128.0/20
                  67.216.64.0/20
                  67.221.224.0/20
                  68.168.80.0/20
                  68.171.128.0/19
                  69.7.224.0/20
                  69.26.96.0/19
                  69.40.208.0/20
                  69.147.160.0/19
                  69.166.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d5:65:49:fc:fe:cf:4b:ee:ff:d8:d1:99:13:33:93:b6:2c:
         40:ce:65:3c:b3:b8:84:e1:68:96:a2:35:63:e4:ec:92:f0:33:
         9e:eb:59:8c:c4:d6:b4:ab:50:c2:7e:97:58:13:b0:ef:f1:18:
         ff:5b:d8:ce:66:4f:0c:07:94:fc:c8:aa:2f:02:f9:bb:42:59:
         ed:35:fd:f8:9f:eb:0f:60:c5:2c:d5:f9:b5:ba:85:dd:d7:ee:
         42:af:8b:ed:4c:9e:f3:0c:5f:2b:e6:23:41:ca:46:15:dc:06:
         f7:b6:73:a6:1c:83:cc:ec:b9:54:91:6d:a4:67:47:c0:6c:3c:
         4b:0a:ea:5e:b8:66:6b:b4:d8:83:7c:47:66:3e:80:73:05:6e:
         47:a3:ea:f5:14:5b:97:0a:de:01:a2:67:52:b2:64:6d:84:0f:
         63:f1:ec:e4:69:2b:70:b2:45:df:90:a7:b7:89:ba:f6:87:08:
         a7:17:c6:0f:8f:bf:2d:42:23:e6:5f:7a:45:8e:31:51:42:7c:
         72:ee:cd:d4:df:df:7a:9c:c0:74:b4:a9:15:82:05:32:af:39:
         e6:d9:eb:1a:09:dd:57:e8:7f:c1:82:3f:67:12:25:82:42:db:
         c9:21:fe:16:df:a6:ac:5c:48:34:64:1e:91:e1:77:3e:98:1d:
         c4:21:d3:0a
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWErw8Ul08syv2viOm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk
NzUwZTBkMDMtNzE5My00OTI0LWI2OTItYWJmMGRiNzUxMjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZp+Ngn8lXpM2qmWCv5B9a8RYuMJzi7PcD7w
RTOCTl3sBfdGEnZxWrRYnBfAOLf9Sl0iAuhxDQm8ozSgnwvHdkFOihMAW1OsjBhT
oWWI7CWCDBhrFt/StGkMRCkjvGaowzTO0bgP8Xl1q9v3lSbRx6hC+1i4rLQWK+iX
H9DSegvCdUtN5/Qf1cqv11eSj8OV4stRPV1M+aNR5PKEIWjkEKsxiMsCdgvHJyvS
gUs4Uu1IIUCg+S9TFjPHn5zBCTbzpyuhAOON8l4KEBEbVQA5VkzBYJAX1RMQ1L6u
6WZyRY0LqMYRltN2xGP4hT3vQdXb8IrthInzQJXQxv1azUZ22wIDAQABo4ID+TCC
A/UwHQYDVR0OBBYEFDQPcpPPc+m04d6uEyVSL0orz6DlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvOGE0Nzc5YjItNzQ0YS0z
NDUwLWE0M2QtYmYyYmY1ZGQ3YmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo
hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD
BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD
BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD
BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAg9VlSfz+z0vu/9jRmRMzk7YsQM5l
PLO4hOFolqI1Y+TskvAznutZjMTWtKtQwn6XWBOw7/EY/1vYzmZPDAeU/MiqLwL5
u0JZ7TX9+J/rD2DFLNX5tbqF3dfuQq+L7Uye8wxfK+YjQcpGFdwG97ZzphyDzOy5
VJFtpGdHwGw8SwrqXrhma7TYg3xHZj6AcwVuR6Pq9RRblwreAaJnUrJkbYQPY/Hs
5GkrcLJF35Cnt4m69ocIpxfGD4+/LUIj5l96RY4xUUJ8cu7N1N/fepzAdLSpFYIF
Mq855tnrGgndV+h/wYI/ZxIlgkLbySH+Ft+mrFxINGQekeF3PpgdxCHTCg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:19:24 2025 by rpki-client