Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/76dc3b99-7478-3f95-b13d-ededcd4836ca.roa
File:                     76dc3b99-7478-3f95-b13d-ededcd4836ca.roa (raw, json)
Hash identifier:          vchEXcOpT1FOaewHRBJ4ccgI5jG6aymOs9G0knVUJI8=
Subject key identifier:   5C:15:CF:4B:46:76:BD:52:35:B1:6B:82:9A:EB:78:3C:68:1E:2D:03
Certificate issuer:       /CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Certificate serial:       010D0C9F4328584A0C0567C543F8166207A971C0
Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/76dc3b99-7478-3f95-b13d-ededcd4836ca.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33234
IP address blocks:        24.225.112.0/20 maxlen: 24
                          216.172.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:67:c5:43:f8:16:62:07:a9:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=bf0c507d-66f5-440b-94b0-b170c69c50cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:66:8f:3c:90:b7:3c:7a:0f:20:23:29:df:
                    b9:4b:42:97:0a:e7:78:4f:be:de:36:fb:7f:f3:e3:
                    2f:8b:5e:e9:72:18:29:41:ed:94:b4:4d:eb:3e:86:
                    31:7f:93:c8:ae:d8:3f:4a:86:9d:0a:88:81:1d:d5:
                    c2:06:99:45:ab:43:e0:90:c4:21:96:92:16:bf:88:
                    eb:f5:0c:75:3b:2c:eb:bb:b1:cc:1a:53:9a:3d:ea:
                    e0:6c:14:85:06:a2:06:2d:05:73:46:fb:db:47:b2:
                    1d:d0:e5:60:c5:68:31:5d:ce:2b:3e:ef:ab:b1:6c:
                    13:13:b3:4f:79:eb:2b:e4:33:94:49:08:7a:40:68:
                    96:2a:7b:d0:82:b9:dc:92:76:18:ec:2a:86:13:e0:
                    4f:ac:12:95:2a:78:c4:c8:3b:bc:f6:08:a0:ac:c4:
                    f5:3f:aa:7b:2a:01:11:68:b5:7a:1d:d1:7a:42:f0:
                    c6:0a:bd:d6:f3:f8:50:5a:f5:11:1a:05:9f:30:ff:
                    c9:04:52:01:29:47:33:ed:90:3c:7f:d9:b4:28:57:
                    3a:43:de:7a:8f:7c:a2:0c:46:aa:4b:cd:15:54:15:
                    13:4e:52:3f:3f:04:73:e5:ba:6d:66:40:75:b0:1c:
                    04:d7:6a:3a:49:1a:fc:3a:87:64:1f:f6:f5:f7:fa:
                    9f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:15:CF:4B:46:76:BD:52:35:B1:6B:82:9A:EB:78:3C:68:1E:2D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/76dc3b99-7478-3f95-b13d-ededcd4836ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl

            X509v3 Authority Key Identifier:
                keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.225.112.0/20
                  216.172.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6b:21:ee:65:eb:38:20:7d:0a:f1:3c:50:77:d4:82:73:57:
         3b:6a:90:91:bd:07:86:03:ed:f9:af:4c:31:d0:ff:bf:65:1c:
         21:57:2b:77:29:ba:60:62:63:4c:ba:74:f5:af:b1:31:31:52:
         99:09:a7:30:c5:9d:2d:81:9d:67:27:bc:bf:6b:ac:a3:bb:78:
         64:e3:66:1d:93:15:c3:e2:5d:ca:a3:96:23:5c:3e:aa:d7:7e:
         b2:9e:d8:fd:4a:05:2a:61:e5:13:f7:68:16:1f:d7:45:d4:71:
         fa:45:f3:ac:14:52:55:ad:b1:23:dc:15:ee:b6:68:52:ec:f5:
         91:b4:e4:38:e9:c6:55:ff:72:73:c4:c0:f0:ff:44:c7:f3:17:
         68:56:2d:58:9b:c7:de:e6:ee:ff:a5:ed:4f:fd:e0:87:d7:f7:
         b5:01:ae:1b:29:5b:15:39:e8:90:2e:ee:6e:05:2d:a0:4c:17:
         b4:3c:8e:72:fa:8b:64:22:af:72:cf:47:00:92:34:d4:cf:86:
         da:cd:22:04:67:31:86:43:4f:25:ce:71:5c:ee:a8:6e:ff:5c:
         b1:c6:bf:2a:af:87:c6:bc:bf:6e:77:e7:2d:c6:b3:71:10:f3:
         62:9f:48:aa:7e:26:2a:44:09:46:98:83:17:b2:21:ee:ce:4a:
         93:e7:e3:d8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoMBWfFQ/gWYgepccAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjAzMWYyODgtYWExMC00YzZkLWI2NDAtNjc0OWYyMTJj
NmI3MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
YmYwYzUwN2QtNjZmNS00NDBiLTk0YjAtYjE3MGM2OWM1MGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpVmjzyQtzx6DyAjKd+5S0KXCud4T77eNvt/
8+Mvi17pchgpQe2UtE3rPoYxf5PIrtg/SoadCoiBHdXCBplFq0PgkMQhlpIWv4jr
9Qx1Oyzru7HMGlOaPergbBSFBqIGLQVzRvvbR7Id0OVgxWgxXc4rPu+rsWwTE7NP
eesr5DOUSQh6QGiWKnvQgrncknYY7CqGE+BPrBKVKnjEyDu89gigrMT1P6p7KgER
aLV6HdF6QvDGCr3W8/hQWvURGgWfMP/JBFIBKUcz7ZA8f9m0KFc6Q956j3yiDEaq
S80VVBUTTlI/PwRz5bptZkB1sBwE12o6SRr8OodkH/b19/qfXQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFwVz0tGdr1SNbFrgprreDxoHi0DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMDMx
ZjI4OC1hYTEwLTRjNmQtYjY0MC02NzQ5ZjIxMmM2YjcvNzZkYzNiOTktNzQ3OC0z
Zjk1LWIxM2QtZWRlZGNkNDgzNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjAzMWYyODgtYWExMC00YzZkLWI2
NDAtNjc0OWYyMTJjNmI3L2IwMzFmMjg4LWFhMTAtNGM2ZC1iNjQwLTY3NDlmMjEy
YzZiNy5jcmwwHwYDVR0jBBgwFoAUpyjee9vTdDuXx9kIaBKDfKcx5w0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iMDMxZjI4OC1hYTEwLTRjNmQtYjY0MC02NzQ5
ZjIxMmM2YjcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEGOFwAwQE
2KxwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADNrIe5l6zggfQrxPFB31IJzVztqkJG9B4YD7fmvTDHQ/79l
HCFXK3cpumBiY0y6dPWvsTExUpkJpzDFnS2BnWcnvL9rrKO7eGTjZh2TFcPiXcqj
liNcPqrXfrKe2P1KBSph5RP3aBYf10XUcfpF86wUUlWtsSPcFe62aFLs9ZG05Djp
xlX/cnPEwPD/RMfzF2hWLVibx97m7v+l7U/94IfX97UBrhspWxU56JAu7m4FLaBM
F7Q8jnL6i2Qir3LPRwCSNNTPhtrNIgRnMYZDTyXOcVzuqG7/XLHGvyqvh8a8v253
5y3Gs3EQ82KfSKp+JipECUaYgxeyIe7OSpPn49g=
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:52:17 2025 by rpki-client