Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa
File:                     b89278a3-74c9-3ec5-a92f-44d3676f6324.roa (raw, json)
Hash identifier:          E5lVqLpxBnS5Or0sySZWFHKMgF9AWMrhzzIse6qNxa8=
Subject key identifier:   E3:46:83:BE:E0:4C:8F:07:3E:7E:B1:76:80:CB:D3:0A:DC:53:AA:5D
Certificate issuer:       /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
Certificate serial:       010D0C9F4328584AC87650AF12437EC82725D280
Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     53991
IP address blocks:        216.245.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:50:af:12:43:7e:c8:27:25:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=5c02ab99-0ce6-4175-94d7-106ad53ed6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:84:04:7f:9f:e1:aa:4a:ae:03:75:be:a4:15:
                    4e:bd:70:90:9b:2b:98:2f:4a:96:07:a8:73:51:63:
                    92:3d:e8:86:00:c8:4c:ad:63:da:65:e4:b4:7c:6d:
                    31:99:10:29:3b:72:bd:2d:9c:3a:4b:01:7a:bf:e8:
                    2a:ba:34:e2:22:71:d8:7a:4a:92:a6:43:e6:60:a1:
                    30:49:95:ce:0d:9c:89:37:88:c0:ea:13:37:47:2c:
                    6e:d4:33:96:b8:c4:c5:8f:72:99:96:87:d8:f8:9f:
                    f3:2a:03:6d:6b:c9:fc:67:92:3d:1a:a6:12:e0:96:
                    a0:88:4c:01:f0:51:9d:64:cb:34:f8:6a:13:ed:52:
                    a9:ba:e9:98:70:3f:c3:80:47:d7:08:46:a1:52:f3:
                    2c:43:32:e9:4c:ed:06:cf:16:d5:0c:8b:86:0c:89:
                    0a:a8:96:49:2a:20:82:17:d5:d7:86:0d:12:38:3f:
                    2f:0f:43:03:c7:3a:c3:bc:b7:98:2c:cc:5a:61:7a:
                    1a:34:ab:b4:82:f8:73:20:b2:96:a5:de:a6:93:b8:
                    cd:6d:2e:ed:53:7c:77:ba:2f:0a:1a:ad:d5:73:97:
                    fd:05:e2:c6:e1:ae:2c:ee:53:28:ae:fe:d6:63:dc:
                    5f:24:79:bb:d2:c0:6a:6d:15:6d:bb:af:da:c7:b5:
                    d8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:46:83:BE:E0:4C:8F:07:3E:7E:B1:76:80:CB:D3:0A:DC:53:AA:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b89278a3-74c9-3ec5-a92f-44d3676f6324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:18:bf:7c:30:7d:d7:c1:28:61:93:3b:60:ac:f8:05:46:71:
         d0:b8:ba:00:37:08:a8:84:71:35:a3:3b:3e:d4:ef:0b:18:f3:
         e7:d7:72:03:c2:c6:e3:e2:0c:d3:e9:f9:86:2f:e4:b1:6d:8f:
         29:b5:ef:69:b5:1e:5a:ed:6c:65:13:92:d2:52:83:29:55:02:
         02:26:3f:b4:2b:50:56:3a:ca:55:b7:48:c9:e0:96:f4:3c:58:
         0a:5c:b9:61:4b:35:cc:e5:ca:e4:f1:78:79:50:ac:d7:db:09:
         26:3c:4c:2b:45:aa:16:33:c2:01:8c:99:e8:a1:41:dc:a2:a2:
         a2:f7:3b:42:f9:25:97:ee:76:44:25:8a:96:14:4e:34:91:0f:
         1b:03:98:c4:40:3e:08:ee:a6:89:f8:f9:3f:5f:29:30:45:4c:
         e1:ca:53:96:c5:65:3b:80:c6:99:f6:c8:11:c1:b9:c3:ef:e7:
         5f:ad:14:a1:96:54:bc:53:24:db:4d:65:0a:29:e2:ea:e3:a5:
         ad:c6:29:5e:87:2d:d2:29:4c:c2:e2:17:8b:fd:c6:51:29:ed:
         77:7a:8f:16:26:96:92:51:28:f7:b8:37:07:13:cf:59:78:13:
         4d:d1:aa:6a:87:ba:3c:da:96:ec:b7:03:cf:c9:4f:19:a0:33:
         0b:dd:2f:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdlCvEkN+yCcl0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2
YjdkMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
NWMwMmFiOTktMGNlNi00MTc1LTk0ZDctMTA2YWQ1M2VkNmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4QEf5/hqkquA3W+pBVOvXCQmyuYL0qWB6hz
UWOSPeiGAMhMrWPaZeS0fG0xmRApO3K9LZw6SwF6v+gqujTiInHYekqSpkPmYKEw
SZXODZyJN4jA6hM3Ryxu1DOWuMTFj3KZlofY+J/zKgNta8n8Z5I9GqYS4JagiEwB
8FGdZMs0+GoT7VKpuumYcD/DgEfXCEahUvMsQzLpTO0GzxbVDIuGDIkKqJZJKiCC
F9XXhg0SOD8vD0MDxzrDvLeYLMxaYXoaNKu0gvhzILKWpd6mk7jNbS7tU3x3ui8K
Gq3Vc5f9BeLG4a4s7lMorv7WY9xfJHm70sBqbRVtu6/ax7XYAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFONGg77gTI8HPn6xdoDL0wrcU6pdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2
MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvYjg5Mjc4YTMtNzRjOS0z
ZWM1LWE5MmYtNDRkMzY3NmY2MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk
MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5
NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy
YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PWbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJEYv3wwfdfBKGGTO2Cs+AVGcdC4ugA3CKiEcTWjOz7U7wsY8+fXcgPC
xuPiDNPp+YYv5LFtjym172m1HlrtbGUTktJSgylVAgImP7QrUFY6ylW3SMnglvQ8
WApcuWFLNczlyuTxeHlQrNfbCSY8TCtFqhYzwgGMmeihQdyioqL3O0L5JZfudkQl
ipYUTjSRDxsDmMRAPgjupon4+T9fKTBFTOHKU5bFZTuAxpn2yBHBucPv51+tFKGW
VLxTJNtNZQop4urjpa3GKV6HLdIpTMLiF4v9xlEp7Xd6jxYmlpJRKPe4NwcTz1l4
E03RqmqHujzaluy3A8/JTxmgMwvdL64=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:14:02 2025 by rpki-client