Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/8e4dd94e-9277-3f3d-95db-b793ae4da315.roa
File:                     8e4dd94e-9277-3f3d-95db-b793ae4da315.roa (raw, json)
Hash identifier:          ewq08Zo7zhPL7jNJBVVMO3j0KP1CiZt7EfYfwXQmdf8=
Subject key identifier:   82:2B:98:71:32:81:C1:62:DF:25:80:8B:81:DD:90:AB:B5:C8:3B:2D
Certificate issuer:       /CN=12380a37-68ce-4e9c-9585-53cd09071ada
Certificate serial:       010D0C9F4328584A3050299F284E1D7E27D9A280
Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/8e4dd94e-9277-3f3d-95db-b793ae4da315.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     393764
IP address blocks:        64.189.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:29:9f:28:4e:1d:7e:27:d9:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=f0e66617-aa9c-4892-96ca-08304cdda79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a3:31:65:06:f4:6b:a2:8c:07:e4:b2:24:21:
                    39:b7:11:9e:c7:d1:37:17:7f:9c:20:53:ed:c5:42:
                    a6:cf:4e:22:73:82:6d:41:40:59:57:83:2a:eb:1a:
                    64:76:36:be:eb:66:7f:f0:f1:a7:df:a7:ad:b9:78:
                    80:b8:79:ce:da:12:47:b7:e0:4d:81:7a:ff:a3:43:
                    ed:46:ad:3d:d1:55:fe:21:5e:48:81:5b:10:33:45:
                    1f:c3:b8:03:a5:ab:bd:2e:19:b9:8c:90:1a:7d:7e:
                    fd:16:4f:d7:98:56:2d:d8:c1:a4:13:f7:4f:1e:3e:
                    b8:d1:56:db:70:aa:9d:2b:a0:f9:56:2a:39:b6:d8:
                    bf:d7:33:35:24:dd:03:0b:fd:84:9b:54:91:fc:a6:
                    58:5b:a8:f9:4c:74:81:da:d9:ae:be:21:3f:6b:cb:
                    e2:4c:6a:1b:e5:c5:43:07:ee:b6:d5:95:b3:99:c0:
                    28:58:61:3e:6d:e7:c4:ea:5f:7b:eb:48:d6:3c:1f:
                    6b:45:67:6f:3d:94:73:15:62:bb:d1:a1:38:50:6c:
                    82:39:04:88:11:4a:63:72:d0:0a:c2:26:2d:90:d8:
                    25:06:ff:af:53:73:3c:0a:f7:fb:a1:7e:ec:d0:36:
                    db:9c:95:2d:03:49:9d:41:5a:ef:1d:4a:98:d8:0c:
                    4f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2B:98:71:32:81:C1:62:DF:25:80:8B:81:DD:90:AB:B5:C8:3B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/8e4dd94e-9277-3f3d-95db-b793ae4da315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl

            X509v3 Authority Key Identifier:
                keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.189.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:40:88:bc:14:55:37:2e:ad:2f:8f:83:3a:53:1a:ab:63:bd:
         b8:b4:11:f0:37:c0:bf:36:7e:62:5f:cc:e9:d7:fd:16:df:42:
         79:c6:b3:2b:7d:97:48:93:b0:78:f3:d3:3e:7b:42:64:9a:d0:
         58:15:ff:8c:6b:4a:85:85:ec:0a:89:85:a2:50:e2:09:f7:f2:
         25:c9:5d:5c:31:e5:a8:18:5b:48:e3:19:b6:29:b9:e5:7f:5a:
         d3:b5:3b:84:c5:16:e0:19:07:e0:e4:94:fc:00:b6:a4:b2:0b:
         8d:bc:b6:d5:d3:e9:6e:dc:8a:4f:2a:4c:2b:cb:df:29:f8:5d:
         69:ff:7a:b7:1e:bb:c3:08:21:e2:29:7d:a1:b4:e8:e3:1f:d6:
         4f:41:f7:cd:b0:02:82:11:5c:8f:80:20:15:1d:45:2a:dd:48:
         99:06:da:3f:30:0d:fe:3d:18:31:e9:9a:a1:ba:7e:75:9f:05:
         82:85:5e:e2:f0:3e:dd:48:b8:be:5d:d7:80:b9:24:51:c2:ad:
         a5:c2:93:ff:8d:a2:e0:45:81:22:80:8b:a9:96:c3:ba:47:fa:
         a1:11:b8:15:2f:4a:83:f0:1c:c8:8c:54:44:5f:e2:db:0f:d2:
         ff:5b:15:31:fc:6b:c6:7a:58:49:17:49:d0:0d:bc:26:b9:c0:
         80:d0:1c:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUCmfKE4dfifZooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTIzODBhMzctNjhjZS00ZTljLTk1ODUtNTNjZDA5MDcx
YWRhMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZjBlNjY2MTctYWE5Yy00ODkyLTk2Y2EtMDgzMDRjZGRhNzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqMxZQb0a6KMB+SyJCE5txGex9E3F3+cIFPt
xUKmz04ic4JtQUBZV4Mq6xpkdja+62Z/8PGn36etuXiAuHnO2hJHt+BNgXr/o0Pt
Rq090VX+IV5IgVsQM0Ufw7gDpau9Lhm5jJAafX79Fk/XmFYt2MGkE/dPHj640Vbb
cKqdK6D5Vio5tti/1zM1JN0DC/2Em1SR/KZYW6j5THSB2tmuviE/a8viTGob5cVD
B+621ZWzmcAoWGE+befE6l9760jWPB9rRWdvPZRzFWK70aE4UGyCOQSIEUpjctAK
wiYtkNglBv+vU3M8Cvf7oX7s0DbbnJUtA0mdQVrvHUqY2AxPoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIIrmHEygcFi3yWAi4HdkKu1yDstMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4
MGEzNy02OGNlLTRlOWMtOTU4NS01M2NkMDkwNzFhZGEvOGU0ZGQ5NGUtOTI3Ny0z
ZjNkLTk1ZGItYjc5M2FlNGRhMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTIzODBhMzctNjhjZS00ZTljLTk1
ODUtNTNjZDA5MDcxYWRhLzEyMzgwYTM3LTY4Y2UtNGU5Yy05NTg1LTUzY2QwOTA3
MWFkYS5jcmwwHwYDVR0jBBgwFoAUC+v8Zzc9d2IVQpU/rmHdVlHBuaIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4MGEzNy02OGNlLTRlOWMtOTU4NS01M2Nk
MDkwNzFhZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL2YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFAiLwUVTcurS+PgzpTGqtjvbi0EfA3wL82fmJfzOnX/RbfQnnGsyt9
l0iTsHjz0z57QmSa0FgV/4xrSoWF7AqJhaJQ4gn38iXJXVwx5agYW0jjGbYpueV/
WtO1O4TFFuAZB+DklPwAtqSyC428ttXT6W7cik8qTCvL3yn4XWn/erceu8MIIeIp
faG06OMf1k9B982wAoIRXI+AIBUdRSrdSJkG2j8wDf49GDHpmqG6fnWfBYKFXuLw
Pt1IuL5d14C5JFHCraXCk/+NouBFgSKAi6mWw7pH+qERuBUvSoPwHMiMVERf4tsP
0v9bFTH8a8Z6WEkXSdANvCa5wIDQHOA=
-----END CERTIFICATE-----
Generated at Sun Jun 29 18:50:00 2025 by rpki-client