Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d21cc304-50f6-3541-a630-e955ccb5f674.roa
File:                     d21cc304-50f6-3541-a630-e955ccb5f674.roa (raw, json)
Hash identifier:          /MPQ//BbwLvPH1tK36aZFVRZPWzplez2NKyrhfUHyYc=
Subject key identifier:   F3:9A:75:44:D4:B0:C5:74:AF:A0:C6:15:B0:04:9B:82:EA:D4:02:B2
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584AEE2696D10721A2CFCD6DD9C0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d21cc304-50f6-3541-a630-e955ccb5f674.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     376
IP address blocks:        207.162.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:96:d1:07:21:a2:cf:cd:6d:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=a86cf2ec-5c34-456b-8e0d-470cd38c08c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4f:33:75:24:c2:ed:91:62:92:d2:0d:c9:40:
                    d2:28:dd:a6:78:6d:23:e2:f7:33:92:a4:a6:cf:d7:
                    66:37:6a:47:f5:b4:f5:3a:28:56:1f:de:b9:d7:73:
                    d3:d6:97:d4:f1:bd:fe:7b:8d:95:13:a6:6d:35:d5:
                    57:57:5a:2e:52:f7:ca:61:94:97:86:a8:28:02:9f:
                    b1:5d:98:69:39:0b:f7:4a:68:96:fd:6a:80:b5:8e:
                    41:7f:6c:38:91:ff:f6:d7:70:29:a7:ef:3a:f3:54:
                    c0:7c:27:35:25:6b:15:de:d1:a4:87:db:87:a7:f7:
                    e0:b7:46:cc:b3:26:e6:21:b6:3c:86:a2:43:0b:05:
                    99:b3:a0:c4:d2:c6:a3:6f:fa:be:31:d9:95:f2:a5:
                    51:12:75:c4:65:7e:41:13:90:a7:97:62:9c:56:d9:
                    38:3a:97:97:3f:b4:d3:a6:68:75:b9:d6:92:a7:e4:
                    c2:ab:9f:9d:c5:00:df:c1:b5:88:21:f5:4a:1c:7a:
                    c2:33:c2:5d:73:31:b9:53:99:75:68:49:07:9d:b6:
                    b6:48:8b:e8:a3:7d:48:59:a8:49:27:07:cf:3f:fc:
                    3c:26:43:73:0a:b0:32:78:63:06:2b:75:6f:27:97:
                    6c:a8:71:92:c7:5d:0d:c8:c4:9d:79:9e:12:f0:88:
                    04:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9A:75:44:D4:B0:C5:74:AF:A0:C6:15:B0:04:9B:82:EA:D4:02:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d21cc304-50f6-3541-a630-e955ccb5f674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d6:c5:69:af:e4:d9:2a:d9:fe:02:79:2b:69:a2:69:7c:f9:
         15:35:c8:c0:41:a2:03:d9:13:d9:7c:34:cd:0d:f2:5f:fc:58:
         e8:de:77:4d:2d:b6:6a:21:2f:cc:6f:08:bc:36:83:ac:a8:2b:
         50:4d:0a:89:1d:c7:b7:68:b4:5d:18:58:75:28:bc:6e:a7:a2:
         c9:a1:66:7a:4f:46:6a:73:72:aa:5d:41:57:cc:73:86:4c:8d:
         a5:e4:0c:c4:ee:ae:e0:7c:a8:dd:9d:c0:b8:b0:fe:b8:10:c4:
         3b:12:d3:ce:4a:78:75:87:a7:d4:03:f3:4f:57:70:88:21:a0:
         fa:b3:e5:57:d9:dd:32:f2:bc:54:c2:13:ba:98:36:61:71:8a:
         0b:e8:e2:be:96:a8:de:a9:96:dc:52:df:f7:f9:07:f7:61:66:
         aa:0e:91:81:39:65:b9:fe:8d:a2:c2:74:e2:a0:fd:fc:f2:81:
         49:1b:21:6b:7c:af:2e:3c:63:4d:4d:eb:32:f6:1f:1f:3b:45:
         34:ba:96:e9:fd:c1:8f:cd:dd:2e:6b:12:ab:36:5a:4c:24:5d:
         e0:72:47:4c:7b:2e:91:4b:7d:46:f1:57:a6:37:d3:2e:c1:3e:
         1b:34:2c:b9:ec:7f:bf:d8:73:5e:82:22:b9:29:74:74:96:eb:
         91:34:2b:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJpbRByGiz81t2cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk
YTg2Y2YyZWMtNWMzNC00NTZiLThlMGQtNDcwY2QzOGMwOGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk8zdSTC7ZFiktINyUDSKN2meG0j4vczkqSm
z9dmN2pH9bT1OihWH96513PT1pfU8b3+e42VE6ZtNdVXV1ouUvfKYZSXhqgoAp+x
XZhpOQv3SmiW/WqAtY5Bf2w4kf/213App+8681TAfCc1JWsV3tGkh9uHp/fgt0bM
sybmIbY8hqJDCwWZs6DE0sajb/q+MdmV8qVREnXEZX5BE5Cnl2KcVtk4OpeXP7TT
pmh1udaSp+TCq5+dxQDfwbWIIfVKHHrCM8JdczG5U5l1aEkHnba2SIvoo31IWahJ
JwfPP/w8JkNzCrAyeGMGK3VvJ5dsqHGSx10NyMSdeZ4S8IgEVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPOadUTUsMV0r6DGFbAEm4Lq1AKyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvZDIxY2MzMDQtNTBmNi0z
NTQxLWE2MzAtZTk1NWNjYjVmNjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6IMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/WxWmv5Nkq2f4CeStpoml8+RU1yMBBogPZE9l8NM0N8l/8WOjed00t
tmohL8xvCLw2g6yoK1BNCokdx7dotF0YWHUovG6nosmhZnpPRmpzcqpdQVfMc4ZM
jaXkDMTuruB8qN2dwLiw/rgQxDsS085KeHWHp9QD809XcIghoPqz5VfZ3TLyvFTC
E7qYNmFxigvo4r6WqN6pltxS3/f5B/dhZqoOkYE5Zbn+jaLCdOKg/fzygUkbIWt8
ry48Y01N6zL2Hx87RTS6lun9wY/N3S5rEqs2WkwkXeByR0x7LpFLfUbxV6Y30y7B
Phs0LLnsf7/Yc16CIrkpdHSW65E0K2M=
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:55:59 2025 by rpki-client