Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/9ed797f7-59a1-3eb3-a08c-95e891faa255.roa
File:                     9ed797f7-59a1-3eb3-a08c-95e891faa255.roa (raw, json)
Hash identifier:          E7FgEOc9UtlQv3aB0Be3J2NGmFDyrByibym2bQWYuRg=
Subject key identifier:   26:2D:8B:6B:D6:B3:9B:17:C6:5F:85:03:B5:A3:CE:44:05:74:40:01
Certificate issuer:       /CN=baebde37-2461-4409-96e1-a720edbe80a7
Certificate serial:       010D0C9F4328584A5FC5E77CDBA9DF7019663680
Authority key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/9ed797f7-59a1-3eb3-a08c-95e891faa255.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     398848
IP address blocks:        204.107.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:e7:7c:db:a9:df:70:19:66:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baebde37-2461-4409-96e1-a720edbe80a7
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=93919fce-b876-4f8a-9d91-7486af7ef8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9b:78:11:a4:81:82:8b:1d:14:23:bc:26:c3:
                    12:9b:d9:4a:cd:3b:f4:3e:30:2d:cd:8c:1a:73:ca:
                    f4:fc:7e:2a:3d:fe:8f:fe:ae:bf:0b:69:a4:41:9d:
                    66:11:68:5e:86:51:8d:0f:85:99:58:28:46:65:56:
                    cd:6f:51:e9:cb:06:bd:98:49:9b:35:38:ed:d5:1b:
                    1f:fb:95:66:ef:a0:54:83:aa:fe:40:64:09:73:18:
                    53:91:68:02:d0:1f:f6:5b:f8:83:32:a4:f0:98:f7:
                    82:ae:52:dd:b8:9a:77:3c:7b:6b:53:ad:f0:1c:e9:
                    09:34:05:23:e2:47:3f:24:aa:b4:70:59:91:4d:8e:
                    ac:4d:4d:ba:ae:90:a3:8f:b9:d5:65:e3:82:da:c3:
                    ff:f7:fa:4c:eb:40:8b:c7:c4:2d:bd:2b:86:87:95:
                    88:71:71:83:45:63:b1:ad:51:81:f4:ea:57:c7:e0:
                    49:35:50:2b:e2:b9:17:70:66:2c:54:83:ab:ad:43:
                    c7:ae:46:e2:5a:b2:6d:c6:d0:61:3b:17:73:38:bb:
                    64:6e:fb:77:87:53:6e:43:20:60:24:c6:b7:b9:a1:
                    a5:f5:71:53:f7:d4:dd:8a:07:8d:a4:4b:27:51:40:
                    60:35:21:c6:c3:c2:5a:5d:37:79:20:6a:d3:a7:c9:
                    22:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2D:8B:6B:D6:B3:9B:17:C6:5F:85:03:B5:A3:CE:44:05:74:40:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/9ed797f7-59a1-3eb3-a08c-95e891faa255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl

            X509v3 Authority Key Identifier:
                keyid:50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.107.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:33:99:e0:a7:91:1d:ea:f2:d6:56:77:ad:11:bf:42:c6:ed:
         8c:27:08:c1:7b:1c:dc:de:f1:02:59:d1:08:67:51:62:16:85:
         b1:23:c8:64:19:c3:c1:ef:b3:60:dc:ff:be:ac:49:96:e8:da:
         97:3f:6d:5a:17:a7:c5:fb:df:49:b2:13:e9:b2:f9:8c:75:ba:
         c0:98:61:4d:18:51:f0:98:54:fb:d9:0c:bd:c8:3c:3d:dc:27:
         e5:bb:67:1f:e6:9a:fb:12:ea:29:1c:0a:77:2c:7a:bb:ea:c0:
         ea:ac:38:68:85:77:ec:31:b9:d3:50:f9:77:6b:17:12:2b:ff:
         0a:1c:c9:29:fd:d1:a9:56:c7:58:61:7f:f2:d8:78:d1:da:bd:
         85:8c:6b:e9:97:39:1a:88:05:d1:dd:1b:bb:82:9d:49:79:e9:
         74:01:4f:80:c0:40:cf:4e:69:9e:ce:a8:2e:c4:e4:73:21:2b:
         fe:15:3f:a4:54:3d:d4:1c:fe:fb:c0:af:28:9b:25:ea:a2:65:
         ac:f4:37:dd:66:9f:07:46:2f:d5:bb:30:de:8d:87:ff:9d:58:
         a3:30:b8:a2:f7:14:f1:12:8b:c2:5e:cf:ea:6b:cf:fd:79:0c:
         52:cf:be:e2:70:ad:c6:03:d6:23:58:bb:2b:9c:0e:31:11:bc:
         2c:17:7c:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxed826nfcBlmNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFlYmRlMzctMjQ2MS00NDA5LTk2ZTEtYTcyMGVkYmU4
MGE3MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk
OTM5MTlmY2UtYjg3Ni00ZjhhLTlkOTEtNzQ4NmFmN2VmOGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5t4EaSBgosdFCO8JsMSm9lKzTv0PjAtzYwa
c8r0/H4qPf6P/q6/C2mkQZ1mEWhehlGND4WZWChGZVbNb1Hpywa9mEmbNTjt1Rsf
+5Vm76BUg6r+QGQJcxhTkWgC0B/2W/iDMqTwmPeCrlLduJp3PHtrU63wHOkJNAUj
4kc/JKq0cFmRTY6sTU26rpCjj7nVZeOC2sP/9/pM60CLx8QtvSuGh5WIcXGDRWOx
rVGB9OpXx+BJNVAr4rkXcGYsVIOrrUPHrkbiWrJtxtBhOxdzOLtkbvt3h1NuQyBg
JMa3uaGl9XFT99TdigeNpEsnUUBgNSHGw8JaXTd5IGrTp8kiMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCYti2vWs5sXxl+FA7WjzkQFdEABMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYWVi
ZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRiZTgwYTcvOWVkNzk3ZjctNTlhMS0z
ZWIzLWEwOGMtOTVlODkxZmFhMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmFlYmRlMzctMjQ2MS00NDA5LTk2
ZTEtYTcyMGVkYmU4MGE3L2JhZWJkZTM3LTI0NjEtNDQwOS05NmUxLWE3MjBlZGJl
ODBhNy5jcmwwHwYDVR0jBBgwFoAUUDZNFsS1qHZodij63f6yFPBDAOEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIw
ZWRiZTgwYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGseMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABgzmeCnkR3q8tZWd60Rv0LG7YwnCMF7HNze8QJZ0QhnUWIWhbEjyGQZ
w8Hvs2Dc/76sSZbo2pc/bVoXp8X730myE+my+Yx1usCYYU0YUfCYVPvZDL3IPD3c
J+W7Zx/mmvsS6ikcCncservqwOqsOGiFd+wxudNQ+XdrFxIr/wocySn90alWx1hh
f/LYeNHavYWMa+mXORqIBdHdG7uCnUl56XQBT4DAQM9OaZ7OqC7E5HMhK/4VP6RU
PdQc/vvAryibJeqiZaz0N91mnwdGL9W7MN6Nh/+dWKMwuKL3FPESi8Jez+prz/15
DFLPvuJwrcYD1iNYuyucDjERvCwXfL8=
-----END CERTIFICATE-----
Generated at Tue Jul 1 23:27:56 2025 by rpki-client