Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa
File:                     9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa (raw, json)
Hash identifier:          RVD3LaDelrnnu97dAhCz0HxKYZLb24TYKLb1daYBpkY=
Subject key identifier:   71:93:58:3E:9C:DE:42:D4:BF:E5:4E:E5:0F:64:8E:C8:0E:B3:81:84
Certificate issuer:       /CN=f7f8499b-2456-4be8-bad9-ced434198fa0
Certificate serial:       010D0C9F4328584A560052386691FC90CFEBF918
Authority key identifier: 35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     7896
IP address blocks:        144.216.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:52:38:66:91:fc:90:cf:eb:f9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f8499b-2456-4be8-bad9-ced434198fa0
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=8fbc4fa9-54c0-4b0d-af07-2440377825e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f6:19:5d:ee:85:9d:d6:cf:f2:f8:48:01:a8:
                    8d:32:2f:0a:d4:17:7e:a4:ee:e8:bf:c3:bc:6a:52:
                    6b:39:23:80:21:94:fa:c6:0b:c3:9a:69:bc:5d:db:
                    fc:c9:95:6a:c2:70:00:b0:05:48:27:24:c7:79:c5:
                    3f:b4:23:38:0c:d1:42:cd:36:89:70:b2:cb:b7:9d:
                    94:ec:5c:b6:90:f0:5e:15:9a:61:25:44:f7:c8:4f:
                    0c:88:17:06:a8:1e:c3:c2:ee:b4:0d:87:a2:9d:89:
                    8d:58:9e:44:f3:4c:1a:66:d6:4a:b8:bb:6b:70:ca:
                    b2:f7:ea:25:52:63:3d:88:c3:53:fc:f6:d2:44:8d:
                    20:58:dd:85:d1:2c:22:36:b0:bc:dc:69:d1:6b:77:
                    14:7f:9f:f6:ee:13:3b:69:d5:09:bd:4c:51:af:98:
                    26:e6:44:ae:94:13:b2:ac:c2:af:c1:6c:33:dd:17:
                    8e:42:b5:1f:23:66:0a:d8:08:e5:17:a0:ec:af:2c:
                    ed:0c:8f:a8:4b:2d:19:81:08:50:a8:29:25:41:87:
                    6a:56:79:02:1f:64:81:d8:d7:de:64:87:eb:7f:1b:
                    8c:7e:27:11:76:f8:54:a0:86:e8:4b:de:f9:99:36:
                    10:d5:2d:72:c9:95:52:14:8f:16:8c:7d:e0:7c:98:
                    a2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:93:58:3E:9C:DE:42:D4:BF:E5:4E:E5:0F:64:8E:C8:0E:B3:81:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl

            X509v3 Authority Key Identifier:
                keyid:35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.216.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e0:9b:8f:e9:dc:ae:c6:34:e4:a5:80:00:32:34:29:70:be:
         0d:23:25:56:69:1f:72:fb:8f:42:f1:dd:23:80:50:b0:b3:ea:
         c7:f2:eb:ae:ab:59:82:bb:20:18:67:30:ee:ce:63:50:36:6d:
         fe:df:78:fa:b1:23:91:67:2c:5a:05:e6:95:c5:38:c3:57:ef:
         54:5d:97:06:ad:78:55:a8:93:ec:eb:01:c7:51:b3:49:c4:87:
         2d:43:63:00:a4:29:d6:60:35:6b:1d:0c:30:da:64:bd:1e:52:
         93:77:3f:ee:d9:ee:4e:e4:a0:ef:df:e3:a5:4e:18:8e:5b:a6:
         c2:ac:57:be:b9:44:45:82:1b:1b:3e:ea:80:0d:aa:59:74:60:
         92:49:aa:03:21:ac:db:7e:28:f9:95:6b:dd:05:92:30:0a:cb:
         a4:f2:ec:50:46:87:54:2d:12:cb:37:c0:b4:be:73:47:86:36:
         bc:7b:ff:a4:aa:8d:38:f8:0b:40:f8:4b:9d:7d:93:a4:d8:f2:
         e2:ca:bb:97:3d:d5:36:fa:f0:42:ae:ad:10:e9:75:2c:43:da:
         9a:c3:c8:16:56:72:91:21:04:98:58:ee:14:96:2d:92:6f:63:
         fd:03:72:57:df:2d:e7:2e:db:e6:68:83:44:5a:0d:65:e3:41:
         4a:18:dd:ac
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEpWAFI4ZpH8kM/r+RgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdmODQ5OWItMjQ1Ni00YmU4LWJhZDktY2VkNDM0MTk4
ZmEwMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk
OGZiYzRmYTktNTRjMC00YjBkLWFmMDctMjQ0MDM3NzgyNWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPYZXe6FndbP8vhIAaiNMi8K1Bd+pO7ov8O8
alJrOSOAIZT6xgvDmmm8Xdv8yZVqwnAAsAVIJyTHecU/tCM4DNFCzTaJcLLLt52U
7Fy2kPBeFZphJUT3yE8MiBcGqB7Dwu60DYeinYmNWJ5E80waZtZKuLtrcMqy9+ol
UmM9iMNT/PbSRI0gWN2F0SwiNrC83GnRa3cUf5/27hM7adUJvUxRr5gm5kSulBOy
rMKvwWwz3ReOQrUfI2YK2AjlF6DsryztDI+oSy0ZgQhQqCklQYdqVnkCH2SB2Nfe
ZIfrfxuMficRdvhUoIboS975mTYQ1S1yyZVSFI8WjH3gfJiiGwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHGTWD6c3kLUv+VO5Q9kjsgOs4GEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mN2Y4
NDk5Yi0yNDU2LTRiZTgtYmFkOS1jZWQ0MzQxOThmYTAvOWRlYWZhN2MtZTk3NC0z
ZmNiLWJkNmItMTRmMmEwYjY2YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjdmODQ5OWItMjQ1Ni00YmU4LWJh
ZDktY2VkNDM0MTk4ZmEwL2Y3Zjg0OTliLTI0NTYtNGJlOC1iYWQ5LWNlZDQzNDE5
OGZhMC5jcmwwHwYDVR0jBBgwFoAUNY08X4pzlnRC8WBNZVfaIPilZJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mN2Y4NDk5Yi0yNDU2LTRiZTgtYmFkOS1jZWQ0
MzQxOThmYTAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkNgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfOCbj+ncrsY05KWAADI0KXC+DSMlVmkfcvuPQvHdI4BQsLPqx/LrrqtZ
grsgGGcw7s5jUDZt/t94+rEjkWcsWgXmlcU4w1fvVF2XBq14VaiT7OsBx1GzScSH
LUNjAKQp1mA1ax0MMNpkvR5Sk3c/7tnuTuSg79/jpU4YjlumwqxXvrlERYIbGz7q
gA2qWXRgkkmqAyGs234o+ZVr3QWSMArLpPLsUEaHVC0SyzfAtL5zR4Y2vHv/pKqN
OPgLQPhLnX2TpNjy4sq7lz3VNvrwQq6tEOl1LEPamsPIFlZykSEEmFjuFJYtkm9j
/QNyV98t5y7b5miDRFoNZeNBShjdrA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:06:13 2025 by rpki-client