Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa
File:                     daab233c-3584-3069-b9e0-933500bc4f22.roa (raw, json)
Hash identifier:          1ZYZUFialxrTxocarv85C3ZN0AIVrSp9gKLmam4EFNs=
Subject key identifier:   6A:DB:90:EC:08:8C:DA:FE:71:93:23:50:60:6D:BC:FB:8C:CC:13:24
Certificate issuer:       /CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
Certificate serial:       010D0C9F4328584A506AF1A524629959D57B95C0
Authority key identifier: 93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     20371
IP address blocks:        199.202.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:f1:a5:24:62:99:59:d5:7b:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=6ff85484-e031-4513-b1e0-21a1284f2e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:f2:f6:e1:3e:5a:33:57:64:6f:03:a3:db:
                    a8:41:56:8a:0e:cd:4b:c1:11:81:18:4c:2c:42:c4:
                    e0:50:51:33:5d:cd:c2:4f:3a:e2:e7:71:bc:3e:52:
                    33:4a:64:0b:33:c3:ca:90:d0:e5:ec:0c:ae:7d:66:
                    2b:ae:60:bc:64:65:ca:87:cb:32:d7:22:00:97:ec:
                    07:c7:17:c0:b2:15:c8:90:70:7f:1f:bd:28:d8:a5:
                    ec:d2:c6:15:de:db:a5:c7:a2:33:7c:51:40:b1:0e:
                    be:57:fa:76:3a:19:85:76:32:99:78:e6:09:c3:d9:
                    4f:cd:9d:11:b4:a0:0f:7c:3e:6f:29:14:f0:09:18:
                    d3:6c:c7:04:63:6b:51:72:65:06:19:8e:5e:c2:5d:
                    9e:d8:36:ff:96:f2:c9:9d:ea:f3:c2:48:97:01:67:
                    ad:ed:be:f8:74:03:95:f6:a6:72:47:59:35:66:c8:
                    94:55:65:79:0f:14:1c:9f:c0:0e:b7:3b:cd:58:3b:
                    e3:a9:be:5b:da:ac:a2:91:4c:2f:36:c6:d6:3b:01:
                    a3:39:91:46:17:c2:c3:83:68:34:f7:b1:d2:07:86:
                    ed:19:3c:16:85:2e:fa:fc:cc:d2:c5:2d:34:0c:ed:
                    bb:af:92:3e:56:cc:a0:17:d8:81:ed:76:5d:fd:80:
                    d5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DB:90:EC:08:8C:DA:FE:71:93:23:50:60:6D:BC:FB:8C:CC:13:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl

            X509v3 Authority Key Identifier:
                keyid:93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.202.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:58:69:a4:3d:3b:59:00:1e:05:d0:d3:46:95:1e:11:aa:c6:
         ca:b7:b0:2f:17:6d:50:70:f6:43:03:c5:97:bd:32:f1:02:9d:
         ef:3c:e9:18:70:48:78:84:07:db:94:e1:16:cf:d5:4b:b2:ea:
         3e:42:2f:91:74:ab:70:01:e6:68:69:2c:ad:77:65:fa:31:2d:
         58:8c:63:0d:a0:4f:3d:3f:f5:95:e6:f4:ed:95:72:b7:a0:ee:
         37:b5:ff:03:7e:3e:70:cc:15:09:a3:03:da:40:f0:e5:c1:1c:
         8e:74:32:c3:db:5c:d0:ce:d7:dc:77:10:eb:98:a0:b9:65:2e:
         b3:46:5d:be:65:12:29:d7:bc:f7:64:c5:d5:0d:9b:ee:86:32:
         79:74:bb:ad:0a:8d:0b:ca:52:b7:56:f1:4b:a7:c4:61:7e:a2:
         76:28:17:4e:d5:c4:94:ee:03:95:84:f7:c5:0f:0f:7a:78:78:
         81:4a:64:aa:23:ac:7b:c2:02:08:08:e6:fc:0c:d8:15:23:89:
         6c:96:7e:7d:1e:73:a2:4f:d3:dc:88:47:4b:04:85:99:7f:19:
         0f:1e:ee:bf:a2:3e:e3:d6:ab:8e:a0:6c:af:3b:c6:28:56:a6:
         fe:e7:f1:bd:8a:ba:24:96:77:3a:a0:3f:69:72:99:56:c1:2a:
         7b:75:16:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQavGlJGKZWdV7lcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDdiMWI0NTgtNTI2MS00ZTRhLWEwZmMtMTc1N2ZlNDYx
Zjc1MB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk
NmZmODU0ODQtZTAzMS00NTEzLWIxZTAtMjFhMTI4NGYyZTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllry9uE+WjNXZG8Do9uoQVaKDs1LwRGBGEws
QsTgUFEzXc3CTzri53G8PlIzSmQLM8PKkNDl7AyufWYrrmC8ZGXKh8sy1yIAl+wH
xxfAshXIkHB/H70o2KXs0sYV3tulx6IzfFFAsQ6+V/p2OhmFdjKZeOYJw9lPzZ0R
tKAPfD5vKRTwCRjTbMcEY2tRcmUGGY5ewl2e2Db/lvLJnerzwkiXAWet7b74dAOV
9qZyR1k1ZsiUVWV5DxQcn8AOtzvNWDvjqb5b2qyikUwvNsbWOwGjOZFGF8LDg2g0
97HSB4btGTwWhS76/MzSxS00DO27r5I+VsygF9iB7XZd/YDVPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGrbkOwIjNr+cZMjUGBtvPuMzBMkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wN2Ix
YjQ1OC01MjYxLTRlNGEtYTBmYy0xNzU3ZmU0NjFmNzUvZGFhYjIzM2MtMzU4NC0z
MDY5LWI5ZTAtOTMzNTAwYmM0ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDdiMWI0NTgtNTI2MS00ZTRhLWEw
ZmMtMTc1N2ZlNDYxZjc1LzA3YjFiNDU4LTUyNjEtNGU0YS1hMGZjLTE3NTdmZTQ2
MWY3NS5jcmwwHwYDVR0jBBgwFoAUk25FftjJY+6Z6C8mGj0QzhSqtq8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wN2IxYjQ1OC01MjYxLTRlNGEtYTBmYy0xNzU3
ZmU0NjFmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8rYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANYaaQ9O1kAHgXQ00aVHhGqxsq3sC8XbVBw9kMDxZe9MvECne886Rhw
SHiEB9uU4RbP1Uuy6j5CL5F0q3AB5mhpLK13ZfoxLViMYw2gTz0/9ZXm9O2Vcreg
7je1/wN+PnDMFQmjA9pA8OXBHI50MsPbXNDO19x3EOuYoLllLrNGXb5lEinXvPdk
xdUNm+6GMnl0u60KjQvKUrdW8UunxGF+onYoF07VxJTuA5WE98UPD3p4eIFKZKoj
rHvCAggI5vwM2BUjiWyWfn0ec6JP09yIR0sEhZl/GQ8e7r+iPuPWq46gbK87xihW
pv7n8b2KuiSWdzqgP2lymVbBKnt1FjY=
-----END CERTIFICATE-----
Generated at Mon Jun 30 22:40:06 2025 by rpki-client