Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8447e9a8-7678-3a1e-a3a3-3a54069017aa.roa
File:                     8447e9a8-7678-3a1e-a3a3-3a54069017aa.roa (raw, json)
Hash identifier:          RQrLZGMnqH0tnv3ukqraoMPUG2yBkYK849RjEfVfYbQ=
Subject key identifier:   5B:3F:31:75:63:1C:7A:2F:D3:19:C8:76:14:D7:47:60:03:C0:5A:8F
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AD936543114205653EFEB8B40
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8447e9a8-7678-3a1e-a3a3-3a54069017aa.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     400017
IP address blocks:        64.184.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:54:31:14:20:56:53:ef:eb:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=1d8ac0f1-6a54-48a1-a8ee-fe9632b42f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:e5:9c:ce:c0:6f:2c:f0:b4:04:5d:a8:58:
                    a1:3c:9a:51:5a:55:28:dc:19:ac:61:a6:04:53:c5:
                    b0:95:65:8c:6e:1e:e5:a8:2b:cd:f0:fe:7d:dd:e0:
                    48:b4:8a:c2:26:8d:d9:56:bb:5a:0d:ec:78:aa:b8:
                    94:a7:61:ab:db:72:e1:b5:81:dc:3d:e8:aa:c0:af:
                    de:21:de:99:1e:f5:d7:44:19:ae:42:9c:60:d4:9c:
                    89:21:c5:0c:4d:62:d9:7a:ad:30:6a:b1:42:60:83:
                    94:2e:64:9d:40:e6:ee:d2:88:21:e9:4a:43:f8:08:
                    4a:91:cf:5c:3e:f7:e2:b4:b9:3e:cd:3a:08:a3:99:
                    8c:b3:88:a8:eb:e0:cd:d5:13:b4:b8:3e:71:22:91:
                    85:5d:37:3a:8d:a4:ce:bf:3b:ad:e8:31:72:3e:21:
                    f9:0b:81:1d:cf:1e:1b:3f:31:84:70:5c:1d:03:a9:
                    b6:ae:98:cf:c7:ca:e2:b1:e0:c5:81:ab:bd:17:5b:
                    79:0f:97:0c:83:59:8e:70:3e:eb:f2:b3:60:3f:fa:
                    b1:a0:db:c8:72:53:3d:4a:b7:bf:1b:9e:d8:16:41:
                    0a:4f:39:6d:33:5d:b0:6c:62:e9:80:16:8c:2c:27:
                    14:be:32:63:af:e7:f9:cf:55:11:4e:7e:7e:f5:1e:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3F:31:75:63:1C:7A:2F:D3:19:C8:76:14:D7:47:60:03:C0:5A:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8447e9a8-7678-3a1e-a3a3-3a54069017aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b3:f3:cb:dc:47:94:54:0c:3d:18:25:9b:5b:89:05:37:cb:
         b7:b7:10:b4:82:f5:2c:01:ac:14:6e:9c:6b:8e:52:6b:6e:21:
         d4:cf:0f:07:45:2a:4a:36:99:30:d7:33:22:99:bc:a7:aa:69:
         1b:2f:56:18:9c:da:99:50:9d:3a:11:63:57:a1:e0:b7:9e:33:
         cc:df:9a:b1:d9:76:b0:08:4a:57:07:2d:bb:d1:9f:86:ff:fb:
         f0:d9:1c:40:ec:36:94:10:86:e3:0d:84:22:09:b3:17:36:da:
         9e:43:db:13:5d:95:17:1f:56:a5:1b:2b:21:f6:ee:b3:dc:ca:
         84:05:ed:cb:2a:90:68:4d:60:7e:90:42:c2:87:98:70:8e:0b:
         e5:31:3c:f6:a3:1b:07:e2:dc:fa:06:e5:66:e1:1e:b9:ca:2a:
         8d:e1:51:9b:99:c1:eb:6f:73:8d:70:c6:ba:62:54:35:30:1f:
         7a:71:6c:b5:5b:f4:19:42:96:41:cb:ca:1f:3e:68:d0:e3:30:
         28:b1:67:2f:81:22:73:be:87:3d:34:32:6f:0b:36:e9:93:18:
         f6:5c:76:7e:35:d8:e5:91:f7:00:fb:dc:5d:ce:3c:92:66:3a:
         3b:ee:c3:a0:8b:e0:d4:9c:51:78:32:33:f3:0b:1f:a3:8d:29:
         35:c4:44:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNlQxFCBWU+/ri0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk
MWQ4YWMwZjEtNmE1NC00OGExLWE4ZWUtZmU5NjMyYjQyZjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfflnM7AbyzwtARdqFihPJpRWlUo3BmsYaYE
U8WwlWWMbh7lqCvN8P593eBItIrCJo3ZVrtaDex4qriUp2Gr23LhtYHcPeiqwK/e
Id6ZHvXXRBmuQpxg1JyJIcUMTWLZeq0warFCYIOULmSdQObu0ogh6UpD+AhKkc9c
PvfitLk+zToIo5mMs4io6+DN1RO0uD5xIpGFXTc6jaTOvzut6DFyPiH5C4Edzx4b
PzGEcFwdA6m2rpjPx8riseDFgau9F1t5D5cMg1mOcD7r8rNgP/qxoNvIclM9Sre/
G57YFkEKTzltM12wbGLpgBaMLCcUvjJjr+f5z1URTn5+9R4V0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFs/MXVjHHov0xnIdhTXR2ADwFqPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvODQ0N2U5YTgtNzY3OC0z
YTFlLWEzYTMtM2E1NDA2OTAxN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLhKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmz88vcR5RUDD0YJZtbiQU3y7e3ELSC9SwBrBRunGuOUmtuIdTPDwdF
Kko2mTDXMyKZvKeqaRsvVhic2plQnToRY1eh4LeeM8zfmrHZdrAISlcHLbvRn4b/
+/DZHEDsNpQQhuMNhCIJsxc22p5D2xNdlRcfVqUbKyH27rPcyoQF7csqkGhNYH6Q
QsKHmHCOC+UxPPajGwfi3PoG5WbhHrnKKo3hUZuZwetvc41wxrpiVDUwH3pxbLVb
9BlClkHLyh8+aNDjMCixZy+BInO+hz00Mm8LNumTGPZcdn412OWR9wD73F3OPJJm
Ojvuw6CL4NScUXgyM/MLH6ONKTXERLQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:54 2025 by rpki-client