Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/2e76c261-fdad-3290-a47c-70e64b04cc41.roa
File:                     2e76c261-fdad-3290-a47c-70e64b04cc41.roa (raw, json)
Hash identifier:          cz1QibRhVZjalzMyhuzHI1ild/8y2pDX/de9KClG4LA=
Subject key identifier:   18:3C:9A:5D:43:23:EC:66:77:AC:08:B6:D6:4C:3F:37:6A:DF:F1:DC
Certificate issuer:       /CN=d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed
Certificate serial:       010D0C9F4328584A51D064453C804B64F03D9D00
Authority key identifier: 2F:F7:BD:CB:F6:81:8B:78:85:D8:33:81:75:70:E4:2D:F3:A5:F6:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/2e76c261-fdad-3290-a47c-70e64b04cc41.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        199.250.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:64:45:3c:80:4b:64:f0:3d:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=fa7d8eeb-6c23-4888-9b05-9baea69b0409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:4c:6c:d2:70:b1:01:34:d1:bb:d3:60:77:
                    ee:b0:c4:26:b2:78:15:93:e1:95:6d:a6:e2:98:3d:
                    9b:d1:19:48:f8:06:2a:3e:ff:e5:60:f4:af:37:1f:
                    52:5b:2e:37:d1:a8:dd:fa:97:e5:69:39:b0:04:7b:
                    20:4a:bb:c2:99:d7:ca:2f:32:fb:9c:a2:23:2c:f2:
                    34:a6:fd:04:c1:a0:29:b3:c1:65:73:6e:da:d9:09:
                    60:46:71:13:79:ba:71:ee:cf:1c:33:e8:78:9a:63:
                    0a:6f:68:1d:39:01:b1:23:7e:9e:2f:f5:d1:69:ad:
                    2d:28:44:d4:21:5c:3a:fa:55:93:3a:5e:99:fe:50:
                    be:fa:f7:5c:14:dd:96:d5:d1:a4:c4:84:fd:92:5f:
                    36:df:c5:5b:54:5f:f4:6e:a7:ed:d8:84:19:88:e8:
                    1b:b8:93:02:93:ef:1e:10:5d:a9:ec:d2:82:1b:c7:
                    a5:72:d0:32:bf:80:ad:9e:32:db:19:df:1b:b9:7f:
                    b9:78:3b:31:6a:10:20:4e:24:6b:3c:1f:8c:29:35:
                    d4:5c:81:46:74:30:5d:88:0d:a9:7c:c5:9e:69:78:
                    d6:8d:5d:ad:b0:70:9b:52:b5:de:98:96:7d:d8:50:
                    9f:cd:da:e7:0b:c0:f3:eb:a3:35:43:9d:37:4f:3f:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3C:9A:5D:43:23:EC:66:77:AC:08:B6:D6:4C:3F:37:6A:DF:F1:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/2e76c261-fdad-3290-a47c-70e64b04cc41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.crl

            X509v3 Authority Key Identifier:
                keyid:2F:F7:BD:CB:F6:81:8B:78:85:D8:33:81:75:70:E4:2D:F3:A5:F6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b9:09:19:f7:b3:67:af:2d:72:76:6a:40:76:a1:da:16:0a:
         54:d8:75:3a:38:3e:f4:20:4d:8a:0b:ee:f0:2e:6e:dd:8a:3e:
         bb:af:7c:b6:42:26:c2:29:6b:fd:97:52:86:59:c4:b9:48:31:
         15:d5:fa:05:28:a1:97:61:96:f8:98:a3:e4:39:93:97:7e:af:
         af:6a:a6:3b:00:7b:ed:99:17:6a:55:5f:59:7c:83:80:f9:fb:
         20:a0:a3:c5:43:4e:b4:db:26:30:de:bd:ac:03:1b:28:9b:87:
         d1:b4:c5:44:cc:a1:96:21:04:98:28:c4:72:98:ce:8e:d9:fc:
         7a:26:6c:00:04:78:5a:bb:9c:14:09:91:80:a7:f9:bf:80:cc:
         3c:f4:a7:44:32:af:44:ef:a7:86:87:d8:79:97:cd:f4:3a:5c:
         6a:4e:58:f5:82:d4:10:53:42:7c:2b:35:99:fe:8f:03:a4:17:
         36:0a:4c:1c:9f:34:61:7c:32:60:a1:5b:50:9e:d8:e9:da:31:
         23:3a:82:8b:7b:10:e2:64:c1:6f:8f:cf:00:97:17:d4:d0:2a:
         ee:db:55:dd:62:16:45:88:be:ff:f0:c7:2e:be:3d:ee:3e:79:
         ca:3a:36:b8:f7:55:6e:13:81:b4:45:64:17:0b:b0:04:15:62:
         3e:20:e3:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0GRFPIBLZPA9nQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDc5YjZhZGItYjU4Yy00YmNmLTllZmItMmY2MGNhYTFk
NGVkMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk
ZmE3ZDhlZWItNmMyMy00ODg4LTliMDUtOWJhZWE2OWIwNDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+lMbNJwsQE00bvTYHfusMQmsngVk+GVbabi
mD2b0RlI+AYqPv/lYPSvNx9SWy430ajd+pflaTmwBHsgSrvCmdfKLzL7nKIjLPI0
pv0EwaAps8Flc27a2QlgRnETebpx7s8cM+h4mmMKb2gdOQGxI36eL/XRaa0tKETU
IVw6+lWTOl6Z/lC++vdcFN2W1dGkxIT9kl8238VbVF/0bqft2IQZiOgbuJMCk+8e
EF2p7NKCG8elctAyv4CtnjLbGd8buX+5eDsxahAgTiRrPB+MKTXUXIFGdDBdiA2p
fMWeaXjWjV2tsHCbUrXemJZ92FCfzdrnC8Dz66M1Q503Tz8XzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBg8ml1DI+xmd6wIttZMPzdq3/HcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNzli
NmFkYi1iNThjLTRiY2YtOWVmYi0yZjYwY2FhMWQ0ZWQvMmU3NmMyNjEtZmRhZC0z
MjkwLWE0N2MtNzBlNjRiMDRjYzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDc5YjZhZGItYjU4Yy00YmNmLTll
ZmItMmY2MGNhYTFkNGVkL2Q3OWI2YWRiLWI1OGMtNGJjZi05ZWZiLTJmNjBjYWEx
ZDRlZC5jcmwwHwYDVR0jBBgwFoAUL/e9y/aBi3iF2DOBdXDkLfOl9l0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNzliNmFkYi1iNThjLTRiY2YtOWVmYi0yZjYw
Y2FhMWQ0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/r5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABq5CRn3s2evLXJ2akB2odoWClTYdTo4PvQgTYoL7vAubt2KPruvfLZC
JsIpa/2XUoZZxLlIMRXV+gUooZdhlviYo+Q5k5d+r69qpjsAe+2ZF2pVX1l8g4D5
+yCgo8VDTrTbJjDevawDGyibh9G0xUTMoZYhBJgoxHKYzo7Z/HombAAEeFq7nBQJ
kYCn+b+AzDz0p0Qyr0Tvp4aH2HmXzfQ6XGpOWPWC1BBTQnwrNZn+jwOkFzYKTByf
NGF8MmChW1Ce2OnaMSM6got7EOJkwW+PzwCXF9TQKu7bVd1iFkWIvv/wxy6+Pe4+
eco6Nrj3VW4TgbRFZBcLsAQVYj4g40w=
-----END CERTIFICATE-----
Generated at Sun Jun 29 21:36:51 2025 by rpki-client