Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/c4a59523-f240-37e8-ac26-9073b623df9c.roa
File:                     c4a59523-f240-37e8-ac26-9073b623df9c.roa (raw, json)
Hash identifier:          K7Tf3GeeotNGsI15WqfavTM0toBAIMiQkyFHI4YDBXk=
Subject key identifier:   3A:FC:9C:01:6D:AE:07:A2:70:23:D1:29:46:E7:55:E6:FF:05:18:A2
Certificate issuer:       /CN=d03866eb-6362-4657-aa66-83307258d945
Certificate serial:       010D0C9F4328584AE46110A87A3896E17C5A0540
Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/c4a59523-f240-37e8-ac26-9073b623df9c.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        192.101.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:10:a8:7a:38:96:e1:7c:5a:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03866eb-6362-4657-aa66-83307258d945
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=b7f464a6-8606-46fc-86c7-115fe5b50c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6c:15:2c:78:79:b4:15:35:32:f7:37:66:b9:
                    3b:22:db:7d:81:b1:ed:20:1b:15:8e:bc:09:5f:8e:
                    d3:1b:f4:25:e5:7d:73:77:a5:3e:87:63:65:93:fd:
                    10:ed:11:f3:45:ab:44:79:5b:ba:09:fa:ea:ba:49:
                    b2:ce:bb:8e:fc:fa:7c:42:95:a8:cc:f3:76:7b:08:
                    56:bf:1e:4b:9c:ad:da:10:67:6f:ba:d5:aa:f5:3e:
                    2e:7e:6c:0d:6c:22:c1:e1:79:5c:0f:b1:21:91:7b:
                    43:06:40:c3:c1:15:a9:00:1d:9d:85:e9:04:7e:86:
                    d3:5a:5c:dc:b2:3f:98:dd:94:d8:9e:19:18:6e:a1:
                    df:2f:3d:14:0d:82:0a:07:1a:03:8d:26:54:1c:aa:
                    de:28:99:a6:42:b4:1a:84:13:cc:57:ed:97:23:96:
                    e1:f7:77:dc:33:ff:be:35:d4:1a:9b:9a:70:f2:90:
                    d5:16:f1:eb:08:4e:05:44:72:78:8e:fc:a3:64:af:
                    55:3e:b2:c6:65:6c:15:ae:15:67:c8:0e:5a:3b:5d:
                    db:f2:3e:d3:5b:a2:bd:86:7b:af:45:69:00:13:d8:
                    d9:14:96:0c:dc:53:21:55:55:c9:80:76:02:97:8f:
                    bf:1f:65:9d:a4:69:56:e7:7d:cf:1e:ec:5f:eb:85:
                    2a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FC:9C:01:6D:AE:07:A2:70:23:D1:29:46:E7:55:E6:FF:05:18:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/c4a59523-f240-37e8-ac26-9073b623df9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl

            X509v3 Authority Key Identifier:
                keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b7:85:0a:d0:85:bc:7d:56:ae:b7:75:f6:d7:ac:68:9e:2c:
         31:9a:ba:b7:73:a3:c5:d0:0c:e8:ed:69:df:cc:db:dd:73:7a:
         5c:0c:4c:dd:c8:97:11:77:e2:9a:52:ea:fc:31:92:d3:c0:01:
         db:11:5d:7f:81:f3:07:94:1e:6f:fb:e8:81:53:55:0e:12:51:
         8e:67:ba:d8:d4:3a:ba:7b:9d:d3:90:e6:e5:a6:14:01:e7:0a:
         bd:33:3c:f6:35:a8:46:28:5e:30:08:39:d3:64:59:2e:ea:65:
         29:8f:14:cd:67:d3:fc:3c:0a:e6:33:5a:58:b1:7a:2c:3d:be:
         0b:ab:fd:70:5e:ea:d8:03:8f:99:e3:b0:71:7f:35:28:90:02:
         46:7a:10:4c:4c:4b:c9:f1:a3:bc:8a:e3:b7:ea:f9:f0:a0:d2:
         20:4c:cd:0b:74:10:d8:c2:bf:dd:d3:71:5d:6c:2d:9e:4e:69:
         6c:38:24:f8:01:48:1f:08:05:ea:bb:c0:f0:a1:ad:33:cc:69:
         cd:d7:b0:73:d4:32:6f:4f:bb:80:5b:d1:02:b0:1e:52:67:e9:
         f2:12:99:05:2e:a7:54:d2:cd:0b:96:29:7a:30:60:34:1e:c3:
         38:f3:ac:f0:a2:1c:60:50:7f:e5:8d:a6:5d:b2:4c:61:61:b4:
         f2:e7:5a:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRCoejiW4XxaBUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAzODY2ZWItNjM2Mi00NjU3LWFhNjYtODMzMDcyNThk
OTQ1MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk
YjdmNDY0YTYtODYwNi00NmZjLTg2YzctMTE1ZmU1YjUwYzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WwVLHh5tBU1Mvc3Zrk7Itt9gbHtIBsVjrwJ
X47TG/Ql5X1zd6U+h2Nlk/0Q7RHzRatEeVu6CfrqukmyzruO/Pp8QpWozPN2ewhW
vx5LnK3aEGdvutWq9T4ufmwNbCLB4XlcD7EhkXtDBkDDwRWpAB2dhekEfobTWlzc
sj+Y3ZTYnhkYbqHfLz0UDYIKBxoDjSZUHKreKJmmQrQahBPMV+2XI5bh93fcM/++
NdQam5pw8pDVFvHrCE4FRHJ4jvyjZK9VPrLGZWwVrhVnyA5aO13b8j7TW6K9hnuv
RWkAE9jZFJYM3FMhVVXJgHYCl4+/H2WdpGlW533PHuxf64Uq1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDr8nAFtrgeicCPRKUbnVeb/BRiiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4
NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMwNzI1OGQ5NDUvYzRhNTk1MjMtZjI0MC0z
N2U4LWFjMjYtOTA3M2I2MjNkZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDAzODY2ZWItNjM2Mi00NjU3LWFh
NjYtODMzMDcyNThkOTQ1L2QwMzg2NmViLTYzNjItNDY1Ny1hYTY2LTgzMzA3MjU4
ZDk0NS5jcmwwHwYDVR0jBBgwFoAUZWeWnFr3KGxcJOJP6Iqydn60KRcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMw
NzI1OGQ5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGVGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKG3hQrQhbx9Vq63dfbXrGieLDGaurdzo8XQDOjtad/M291zelwMTN3I
lxF34ppS6vwxktPAAdsRXX+B8weUHm/76IFTVQ4SUY5nutjUOrp7ndOQ5uWmFAHn
Cr0zPPY1qEYoXjAIOdNkWS7qZSmPFM1n0/w8CuYzWlixeiw9vgur/XBe6tgDj5nj
sHF/NSiQAkZ6EExMS8nxo7yK47fq+fCg0iBMzQt0ENjCv93TcV1sLZ5OaWw4JPgB
SB8IBeq7wPChrTPMac3XsHPUMm9Pu4Bb0QKwHlJn6fISmQUup1TSzQuWKXowYDQe
wzjzrPCiHGBQf+WNpl2yTGFhtPLnWow=
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:24:59 2025 by rpki-client