Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/794abdc3-ec30-3d87-bee9-bffbd1709212.roa
File:                     794abdc3-ec30-3d87-bee9-bffbd1709212.roa (raw, json)
Hash identifier:          fIWfSvVuIc5yXOwz3ba+Q/4SxduBJqCztOERokezGR0=
Subject key identifier:   DF:6B:2A:DE:17:F8:07:0E:93:ED:96:A3:84:13:EE:B6:38:BF:CB:98
Certificate issuer:       /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial:       010D0C9F4328584A5A3076734B11277FCF246960
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/794abdc3-ec30-3d87-bee9-bffbd1709212.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     6079
IP address blocks:        167.253.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:76:73:4b:11:27:7f:cf:24:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=1731a62b-b6f5-49d0-a473-bdddedca7a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:be:4b:87:2a:0a:a5:c4:72:77:42:fc:ba:9c:
                    39:a3:6a:35:ad:c1:f2:78:a3:c6:a1:df:4f:8b:6e:
                    37:3d:a4:2c:f6:86:77:45:29:18:64:ba:6a:80:ec:
                    5b:32:30:63:18:49:8b:f5:98:a5:46:29:ff:fd:4e:
                    7d:a3:ab:dd:98:b2:de:35:32:3d:4c:5a:4e:bf:4f:
                    a8:67:35:38:e0:99:c4:ae:6d:7d:63:4e:29:ed:03:
                    ae:38:37:48:21:45:68:72:c1:e1:05:90:d6:7c:ac:
                    08:6c:5d:7d:a2:16:fc:48:7b:b1:05:75:75:e3:52:
                    16:23:c1:f2:ab:af:04:34:f2:de:bf:12:73:b0:73:
                    31:73:3c:62:8a:2f:98:59:26:8a:1b:d7:77:36:59:
                    ae:6b:93:f7:cf:f3:ce:84:3b:b9:e9:00:d4:5e:61:
                    69:f2:e8:f7:68:46:81:97:35:e3:2f:3e:2e:08:d3:
                    9a:e0:69:41:19:16:50:20:83:da:d4:dd:2d:c8:60:
                    ea:38:2e:1a:41:20:d0:6a:72:1d:90:95:8e:3c:e7:
                    dc:f9:d2:e0:c6:c5:be:11:5d:4c:f1:f1:c6:72:01:
                    76:b4:12:95:f7:19:9f:c8:42:e5:01:9e:9d:81:f0:
                    64:aa:b1:a7:de:13:4d:06:35:ce:76:0b:61:16:30:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6B:2A:DE:17:F8:07:0E:93:ED:96:A3:84:13:EE:B6:38:BF:CB:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/794abdc3-ec30-3d87-bee9-bffbd1709212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:69:ef:e9:f5:99:2a:75:03:89:56:39:83:be:e6:47:0d:ed:
         1e:5d:0c:f5:99:1d:f3:4d:ea:9f:36:f9:4f:5b:4d:b2:64:ff:
         e8:64:2b:ad:88:24:b2:45:77:16:82:8f:39:a7:3f:b3:9b:81:
         fa:f1:b7:68:b7:35:3b:6d:a2:f1:45:78:b1:7f:97:c2:15:32:
         b7:a4:66:3d:2b:05:c1:0d:40:e3:d4:f0:4f:47:16:05:10:bf:
         92:74:20:4a:ea:b8:ce:da:37:ae:6c:8a:92:f7:f7:c6:4e:e5:
         d0:0f:7e:d1:57:10:ab:41:4d:64:52:24:d5:3b:fe:c8:2b:2b:
         f1:9c:31:df:2c:5a:ef:ad:9a:38:ea:20:87:1d:d7:ed:b7:f5:
         0a:2b:c7:87:2b:71:43:4c:b6:fa:f6:d2:fc:4c:7c:ac:e2:32:
         a5:e6:ae:43:06:0e:94:81:a5:07:3f:21:94:13:0f:98:b7:6e:
         5b:4e:81:60:13:d3:23:9a:14:36:32:cb:7e:87:0e:32:46:5c:
         9f:bd:8b:b5:9a:96:ec:05:21:9d:04:61:4f:19:25:d2:84:45:
         6f:2d:88:df:c8:d1:dc:08:fd:bc:c6:df:f1:0f:ff:d5:cb:75:
         6a:b8:73:80:d8:d7:75:83:5b:70:dd:45:d8:32:f3:b9:d7:9f:
         39:53:d8:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpaMHZzSxEnf88kaWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RmMDU0YjctMGRiZC00MTBhLThhNmEtMTBhZjU3Mjhl
ODRhMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk
MTczMWE2MmItYjZmNS00OWQwLWE0NzMtYmRkZGVkY2E3YTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb5LhyoKpcRyd0L8upw5o2o1rcHyeKPGod9P
i243PaQs9oZ3RSkYZLpqgOxbMjBjGEmL9ZilRin//U59o6vdmLLeNTI9TFpOv0+o
ZzU44JnErm19Y04p7QOuODdIIUVocsHhBZDWfKwIbF19ohb8SHuxBXV141IWI8Hy
q68ENPLevxJzsHMxczxiii+YWSaKG9d3Nlmua5P3z/POhDu56QDUXmFp8uj3aEaB
lzXjLz4uCNOa4GlBGRZQIIPa1N0tyGDqOC4aQSDQanIdkJWOPOfc+dLgxsW+EV1M
8fHGcgF2tBKV9xmfyELlAZ6dgfBkqrGn3hNNBjXOdgthFjAwMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN9rKt4X+AcOk+2Wo4QT7rY4v8uYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZGYw
NTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcyOGU4NGEvNzk0YWJkYzMtZWMzMC0z
ZDg3LWJlZTktYmZmYmQxNzA5MjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2RmMDU0YjctMGRiZC00MTBhLThh
NmEtMTBhZjU3MjhlODRhLzdkZjA1NGI3LTBkYmQtNDEwYS04YTZhLTEwYWY1NzI4
ZTg0YS5jcmwwHwYDVR0jBBgwFoAU6Pw7x68gRdZTF4LOUkaYgOVYgCswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFm
NTcyOGU4NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/16MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1p7+n1mSp1A4lWOYO+5kcN7R5dDPWZHfNN6p82+U9bTbJk/+hkK62I
JLJFdxaCjzmnP7Obgfrxt2i3NTttovFFeLF/l8IVMrekZj0rBcENQOPU8E9HFgUQ
v5J0IErquM7aN65sipL398ZO5dAPftFXEKtBTWRSJNU7/sgrK/GcMd8sWu+tmjjq
IIcd1+239Qorx4crcUNMtvr20vxMfKziMqXmrkMGDpSBpQc/IZQTD5i3bltOgWAT
0yOaFDYyy36HDjJGXJ+9i7WaluwFIZ0EYU8ZJdKERW8tiN/I0dwI/bzG3/EP/9XL
dWq4c4DY13WDW3DdRdgy87nXnzlT2H0=
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:34:46 2025 by rpki-client