Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c539e820-1aba-30e3-8390-0ea813b57848.roa
File:                     c539e820-1aba-30e3-8390-0ea813b57848.roa (raw, json)
Hash identifier:          kqm3fCZcpbooX6s5p935bQktahCsIbRREkfLmeKSf+8=
Subject key identifier:   2E:AA:02:06:A2:47:B2:48:11:89:48:0D:92:F9:24:AA:80:B1:DE:61
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F4328584AE0311595571D781302F42200
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c539e820-1aba-30e3-8390-0ea813b57848.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     400238
IP address blocks:        147.185.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:15:95:57:1d:78:13:02:f4:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=9280d31b-2ae5-41f5-99e8-fbc9d00dc9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4a:bb:80:84:1c:1a:c8:03:2d:38:92:8b:8a:
                    b6:46:ea:9f:20:96:2e:ee:72:14:1f:86:2c:12:23:
                    17:ef:e5:90:d8:6c:97:3e:3b:5a:e8:33:f8:84:5f:
                    31:d7:06:d5:bf:2f:93:f4:55:a8:91:b8:3a:cd:c9:
                    fe:8c:13:ce:06:4b:fa:2d:99:be:fb:c2:36:02:e5:
                    95:9f:d6:6e:be:6e:4f:ae:5b:04:6f:1e:7d:ee:ce:
                    1b:d3:14:80:3c:45:63:b8:58:77:14:c2:5d:3f:58:
                    4e:8f:d4:26:ab:c6:67:dd:7e:a2:4e:ee:8f:ef:07:
                    29:a9:57:03:f4:7a:bf:c6:c4:af:de:95:64:59:cf:
                    62:c6:a5:1b:aa:3b:db:65:fa:ac:58:1c:46:c0:ba:
                    37:fb:38:e4:fa:5e:cf:41:fb:69:a0:b9:13:13:f9:
                    7b:13:bf:00:e1:21:f9:64:32:6e:a9:19:44:3b:1a:
                    21:84:3f:03:50:66:22:45:ea:2f:97:6c:d7:a8:47:
                    05:30:02:d6:86:19:fc:a9:f2:96:88:b4:ed:28:76:
                    5c:eb:e6:9b:1e:59:a1:ab:de:ea:5b:2f:01:4b:b8:
                    89:00:6a:9a:e9:a3:e3:bb:1e:f3:dc:ed:c3:51:c0:
                    b3:2d:cb:cf:a7:d1:e5:e9:1f:2e:9e:3e:fd:2b:45:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AA:02:06:A2:47:B2:48:11:89:48:0D:92:F9:24:AA:80:B1:DE:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c539e820-1aba-30e3-8390-0ea813b57848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d9:9a:7c:10:c8:a2:19:ee:33:2f:bc:21:2d:bb:ad:ce:c9:
         d0:7f:2c:1e:67:f0:66:42:ee:28:ee:14:94:29:da:5d:66:01:
         be:3f:dd:92:b4:6b:13:a6:cb:f3:b4:13:e5:b9:0f:3a:db:7f:
         45:2f:2f:c8:7c:16:48:9e:9f:61:f4:74:8c:35:e1:6d:d4:33:
         0b:b9:d9:43:60:55:01:81:17:e0:a6:12:2d:77:50:9b:d3:ed:
         45:23:0a:41:1e:1f:b1:22:5f:85:50:c7:32:64:23:65:e7:be:
         c1:57:ba:9c:a0:ac:e0:bf:b2:83:2b:fa:48:02:77:41:51:c8:
         4b:5e:3c:4f:a0:c2:4a:d7:a4:b2:7d:9c:0d:f5:3a:8b:89:b2:
         28:8f:ed:3c:69:0d:47:06:de:91:6b:b1:c3:7f:20:ff:19:fd:
         83:43:b2:27:e1:96:c3:6e:05:ac:d9:7d:bd:58:58:c5:34:f2:
         1e:db:72:8b:97:49:60:64:c6:be:8d:68:71:d8:b2:2f:87:34:
         7b:9d:ea:8d:86:41:52:fc:d3:c8:14:36:ff:7f:c6:0f:03:6f:
         8b:f6:c3:99:aa:49:d7:dc:45:06:99:ac:00:72:ad:27:44:20:
         3e:17:40:cc:f8:6c:29:9f:6e:d4:9f:fc:8c:5e:0a:eb:99:ab:
         5b:27:ed:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMRWVVx14EwL0IgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy
YWVjMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk
OTI4MGQzMWItMmFlNS00MWY1LTk5ZTgtZmJjOWQwMGRjOWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikq7gIQcGsgDLTiSi4q2RuqfIJYu7nIUH4Ys
EiMX7+WQ2GyXPjta6DP4hF8x1wbVvy+T9FWokbg6zcn+jBPOBkv6LZm++8I2AuWV
n9Zuvm5PrlsEbx597s4b0xSAPEVjuFh3FMJdP1hOj9Qmq8Zn3X6iTu6P7wcpqVcD
9Hq/xsSv3pVkWc9ixqUbqjvbZfqsWBxGwLo3+zjk+l7PQftpoLkTE/l7E78A4SH5
ZDJuqRlEOxohhD8DUGYiReovl2zXqEcFMALWhhn8qfKWiLTtKHZc6+abHlmhq97q
Wy8BS7iJAGqa6aPjux7z3O3DUcCzLcvPp9Hl6R8unj79K0VG+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC6qAgaiR7JIEYlIDZL5JKqAsd5hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh
NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvYzUzOWU4MjAtMWFiYS0z
MGUzLTgzOTAtMGVhODEzYjU3ODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy
YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm
MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5
ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7nSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbZmnwQyKIZ7jMvvCEtu63OydB/LB5n8GZC7ijuFJQp2l1mAb4/3ZK0
axOmy/O0E+W5Dzrbf0UvL8h8Fkien2H0dIw14W3UMwu52UNgVQGBF+CmEi13UJvT
7UUjCkEeH7EiX4VQxzJkI2XnvsFXupygrOC/soMr+kgCd0FRyEtePE+gwkrXpLJ9
nA31OouJsiiP7TxpDUcG3pFrscN/IP8Z/YNDsifhlsNuBazZfb1YWMU08h7bcouX
SWBkxr6NaHHYsi+HNHud6o2GQVL808gUNv9/xg8Db4v2w5mqSdfcRQaZrAByrSdE
ID4XQMz4bCmfbtSf/IxeCuuZq1sn7Xs=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:18:43 2025 by rpki-client