Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/f4b5b8ad-7e8c-3312-a2d8-a8f181e583a0.roa
File:                     f4b5b8ad-7e8c-3312-a2d8-a8f181e583a0.roa (raw, json)
Hash identifier:          0NT8Y9ZdQzyOGLntEipj2vioBL60XAfXZDlFoV+KDdA=
Subject key identifier:   3E:7D:8F:9C:0B:DF:8E:F2:CA:2D:98:EF:45:3F:A1:BA:AA:00:0D:BF
Certificate issuer:       /CN=796bba95-b159-4867-a648-a9ff88973be1
Certificate serial:       010D0C9F4328584A49706CE5991C9D5200BF5200
Authority key identifier: B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/f4b5b8ad-7e8c-3312-a2d8-a8f181e583a0.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     17161
IP address blocks:        205.156.64.0/21 maxlen: 24
                          205.156.88.0/21 maxlen: 24
                          205.156.96.0/22 maxlen: 24
                          205.156.100.0/23 maxlen: 23
                          205.156.102.0/23 maxlen: 23
                          205.156.104.0/21 maxlen: 24
                          205.156.112.0/22 maxlen: 24
                          205.156.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:6c:e5:99:1c:9d:52:00:bf:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796bba95-b159-4867-a648-a9ff88973be1
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=b0c6cfdd-42b0-43f6-b453-0abfef4ab0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:d3:0a:66:ba:71:73:90:40:a5:41:26:1e:
                    17:ed:0e:f9:45:cb:e1:f3:6a:ec:e8:fe:f9:48:c5:
                    7b:57:a4:42:17:d5:d6:a7:d9:8a:09:e4:4a:4c:bb:
                    58:89:55:97:6b:3e:bd:58:91:36:85:c1:80:95:4f:
                    2c:d9:6f:62:84:cd:41:ca:01:d5:9f:12:30:95:5e:
                    de:7b:1c:3e:08:24:ea:93:bc:50:f4:eb:63:a8:57:
                    a8:45:e5:a0:17:9b:30:e3:a3:37:c8:a0:25:9f:d6:
                    a1:63:93:c2:41:fe:72:01:56:d5:6f:81:2e:f2:fa:
                    e9:de:72:94:6d:a4:6d:08:3d:1a:cb:d3:aa:f9:d7:
                    1c:2e:d8:87:fd:89:68:67:24:06:97:58:c9:25:6b:
                    76:bb:31:93:f9:fa:16:ee:67:b0:34:0d:8a:fd:09:
                    90:6c:06:db:d3:28:d7:c6:23:5a:e2:22:16:88:59:
                    b9:65:40:fe:b4:59:73:db:33:89:45:04:65:bc:36:
                    b2:ea:c4:b4:5e:b1:08:ff:35:95:a4:37:1e:ec:d4:
                    8e:bb:4f:ff:11:bc:d4:33:fc:1d:19:b4:91:a1:26:
                    2e:09:0c:96:f1:22:e0:c7:5c:98:92:61:64:f9:04:
                    24:7c:0b:f4:89:d4:50:e0:c2:0c:60:8a:e7:75:dd:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7D:8F:9C:0B:DF:8E:F2:CA:2D:98:EF:45:3F:A1:BA:AA:00:0D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/f4b5b8ad-7e8c-3312-a2d8-a8f181e583a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl

            X509v3 Authority Key Identifier:
                keyid:B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.156.64.0/21
                  205.156.88.0-205.156.115.255
                  205.156.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d1:7c:0b:65:57:8a:2a:9a:ce:c5:bc:3d:91:52:f3:a5:20:
         70:ef:22:d3:1a:cd:8c:cf:eb:a7:ed:00:9e:83:ab:12:d0:65:
         b4:f6:d2:98:11:65:12:27:52:3b:55:fc:91:18:7c:fa:a2:12:
         8e:e0:02:7f:49:3f:4e:1f:b7:ae:7c:5e:4a:2d:3e:28:7e:92:
         cf:25:18:5b:ad:65:9b:02:ca:e4:1c:5b:41:c7:19:20:c3:8f:
         3c:a5:e4:fa:2a:e5:aa:8c:e5:39:0e:40:ae:b8:9b:ff:73:4a:
         fa:45:6d:cf:06:52:95:8b:d0:5f:a9:94:a9:29:40:a3:c4:72:
         96:5c:9e:b5:30:0b:21:43:43:ad:41:06:f0:80:97:a3:08:8b:
         c8:e9:ff:f9:23:fc:c5:ed:8e:b6:2e:73:8b:1a:57:97:8f:a4:
         41:92:9e:83:a8:e1:55:44:79:22:a4:9e:09:4c:35:06:6b:30:
         85:fa:ed:42:22:5c:86:e2:5e:ab:27:b8:2e:b9:45:6b:35:70:
         01:40:ce:d9:b6:45:7e:89:bb:36:6e:5b:97:68:01:bb:d3:43:
         d2:f6:c5:9c:ec:ef:92:ba:6d:fa:ea:3c:05:43:b0:84:89:4b:
         cd:cc:fa:79:61:43:4c:54:98:20:c5:21:b5:8b:6c:7b:c8:4a:
         5a:af:38:5e
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEpJcGzlmRydUgC/UgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzk2YmJhOTUtYjE1OS00ODY3LWE2NDgtYTlmZjg4OTcz
YmUxMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk
YjBjNmNmZGQtNDJiMC00M2Y2LWI0NTMtMGFiZmVmNGFiMGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPnTCma6cXOQQKVBJh4X7Q75Rcvh82rs6P75
SMV7V6RCF9XWp9mKCeRKTLtYiVWXaz69WJE2hcGAlU8s2W9ihM1BygHVnxIwlV7e
exw+CCTqk7xQ9OtjqFeoReWgF5sw46M3yKAln9ahY5PCQf5yAVbVb4Eu8vrp3nKU
baRtCD0ay9Oq+dccLtiH/YloZyQGl1jJJWt2uzGT+foW7mewNA2K/QmQbAbb0yjX
xiNa4iIWiFm5ZUD+tFlz2zOJRQRlvDay6sS0XrEI/zWVpDce7NSOu0//EbzUM/wd
GbSRoSYuCQyW8SLgx1yYkmFk+QQkfAv0idRQ4MIMYIrndd0ALwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFD59j5wL347yyi2Y70U/obqqAA2/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83OTZi
YmE5NS1iMTU5LTQ4NjctYTY0OC1hOWZmODg5NzNiZTEvZjRiNWI4YWQtN2U4Yy0z
MzEyLWEyZDgtYThmMTgxZTU4M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzk2YmJhOTUtYjE1OS00ODY3LWE2
NDgtYTlmZjg4OTczYmUxLzc5NmJiYTk1LWIxNTktNDg2Ny1hNjQ4LWE5ZmY4ODk3
M2JlMS5jcmwwHwYDVR0jBBgwFoAUtusl9Lerc/uJ6agb3SIo2qd7XHMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83OTZiYmE5NS1iMTU5LTQ4NjctYTY0OC1hOWZm
ODg5NzNiZTEuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDzZxAMAwD
BAPNnFgDBALNnHADBADNnHUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAA9F8C2VXiiqazsW8PZFS86UgcO8i
0xrNjM/rp+0AnoOrEtBltPbSmBFlEidSO1X8kRh8+qISjuACf0k/Th+3rnxeSi0+
KH6SzyUYW61lmwLK5BxbQccZIMOPPKXk+irlqozlOQ5Arrib/3NK+kVtzwZSlYvQ
X6mUqSlAo8RyllyetTALIUNDrUEG8ICXowiLyOn/+SP8xe2Oti5zixpXl4+kQZKe
g6jhVUR5IqSeCUw1BmswhfrtQiJchuJeqye4LrlFazVwAUDO2bZFfom7Nm5bl2gB
u9ND0vbFnOzvkrpt+uo8BUOwhIlLzcz6eWFDTFSYIMUhtYtse8hKWq84Xg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:42:00 2025 by rpki-client