Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/58dadb05-4845-3a41-9b2f-663a09e0cfff.roa
File:                     58dadb05-4845-3a41-9b2f-663a09e0cfff.roa (raw, json)
Hash identifier:          ZmlxIMtOKLm/H6Kj9Ha/4i7U/hJzSH1fhBmX4hvNYTY=
Subject key identifier:   AB:F9:BD:41:29:13:1C:54:53:33:F4:D4:98:67:8C:08:76:1A:C5:AB
Certificate issuer:       /CN=3e9fb25a-438f-4e1d-a136-5c878d065c24
Certificate serial:       010D0C9F4328584A4C3B4101F630CEC05BFF7680
Authority key identifier: D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/58dadb05-4845-3a41-9b2f-663a09e0cfff.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     29765
IP address blocks:        162.217.104.0/21 maxlen: 24
                          192.104.0.0/24 maxlen: 24
                          199.80.28.0/22 maxlen: 24
                          204.15.96.0/22 maxlen: 24
                          208.91.240.0/22 maxlen: 24
                          2606:5b00::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:41:01:f6:30:ce:c0:5b:ff:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e9fb25a-438f-4e1d-a136-5c878d065c24
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=629d9067-8263-46bc-a102-16e6a4a33fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6f:aa:fa:f8:9a:80:8a:08:c6:5b:0b:c1:95:
                    ac:d5:2b:73:fc:bb:0a:d7:a6:8c:18:2a:f8:1c:a9:
                    49:34:9f:36:58:f7:a5:dc:29:7c:16:01:04:ba:2b:
                    8d:d4:35:40:26:c9:38:46:5e:cc:e8:83:ef:a3:89:
                    c7:b3:e4:e0:2c:47:bb:92:ea:ef:95:82:c5:01:91:
                    1d:74:7a:8f:da:6a:c6:05:3c:7b:2a:e3:d9:0a:5f:
                    7f:8a:74:ab:10:af:37:e2:30:71:3a:54:8f:e5:1e:
                    37:a3:81:c2:91:74:80:99:d1:88:e8:20:30:92:28:
                    9a:8a:cb:b9:95:69:47:f3:31:fc:09:15:b0:e2:e5:
                    32:b4:d2:68:28:5c:90:16:98:0f:55:ae:09:fc:69:
                    8f:83:d0:3b:00:da:c9:67:fc:6e:60:dc:40:c0:d4:
                    80:46:84:17:fc:32:da:bd:54:a4:55:f3:f3:f0:70:
                    5f:ad:47:a7:96:06:aa:02:d3:26:4b:8d:9a:eb:80:
                    7f:6d:ba:ce:c8:76:a6:c7:2b:9a:4a:b4:75:45:0b:
                    a2:0a:08:3f:f2:77:a5:e2:2e:8a:c8:95:b8:99:6c:
                    89:1b:54:fa:e7:7f:db:27:d0:b7:dc:bc:89:67:7e:
                    f8:50:c0:8e:d7:0f:8f:f0:20:93:a9:ef:47:31:dd:
                    a6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F9:BD:41:29:13:1C:54:53:33:F4:D4:98:67:8C:08:76:1A:C5:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/58dadb05-4845-3a41-9b2f-663a09e0cfff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl

            X509v3 Authority Key Identifier:
                keyid:D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.104.0/21
                  192.104.0.0/24
                  199.80.28.0/22
                  204.15.96.0/22
                  208.91.240.0/22
                IPv6:
                  2606:5b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:9a:1f:41:8d:c7:7d:03:0c:d2:06:6d:0d:44:cd:86:76:dd:
         bb:78:99:0e:63:68:a4:fe:2a:1c:7e:8e:a9:3d:43:06:f1:97:
         7b:2d:10:00:65:ba:cc:d6:97:6f:90:e0:8c:5d:aa:eb:92:c5:
         19:0e:c8:c0:61:72:22:44:ac:9c:2e:a5:2d:e6:80:78:39:9f:
         59:90:19:e8:e8:c1:8b:27:ae:2f:e0:62:10:84:46:c1:60:e6:
         0b:c8:ce:2a:e6:9a:e9:45:01:82:84:7a:0a:15:22:5f:db:f8:
         48:e0:56:63:d5:0c:b7:45:f5:6f:79:bc:f1:55:fe:5a:cb:22:
         d6:26:9e:11:4c:9a:1c:2c:c7:6b:9a:30:02:e3:0b:e4:61:d2:
         2c:f8:87:f0:a9:e2:4d:1f:a5:85:4e:70:10:25:33:2f:5b:cc:
         b4:38:61:a4:a8:dd:48:2f:9a:54:5f:28:0c:34:31:14:ee:f3:
         d0:5b:3b:1c:d1:ac:cb:77:19:d3:67:3b:d2:4b:0f:c7:d6:32:
         5a:d3:c6:ce:d3:36:31:11:23:67:db:71:6c:58:00:f3:0d:f2:
         dc:a9:18:5a:b5:a5:23:56:d3:4f:41:1c:fe:57:93:14:fa:40:
         1b:e2:90:50:d0:f6:ba:55:8a:40:49:8c:23:bb:a0:26:c8:0b:
         eb:04:cc:86
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEpMO0EB9jDOwFv/doAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2U5ZmIyNWEtNDM4Zi00ZTFkLWExMzYtNWM4NzhkMDY1
YzI0MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk
NjI5ZDkwNjctODI2My00NmJjLWExMDItMTZlNmE0YTMzZmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2+q+viagIoIxlsLwZWs1Stz/LsK16aMGCr4
HKlJNJ82WPel3Cl8FgEEuiuN1DVAJsk4Rl7M6IPvo4nHs+TgLEe7kurvlYLFAZEd
dHqP2mrGBTx7KuPZCl9/inSrEK834jBxOlSP5R43o4HCkXSAmdGI6CAwkiiaisu5
lWlH8zH8CRWw4uUytNJoKFyQFpgPVa4J/GmPg9A7ANrJZ/xuYNxAwNSARoQX/DLa
vVSkVfPz8HBfrUenlgaqAtMmS42a64B/bbrOyHamxyuaSrR1RQuiCgg/8nel4i6K
yJW4mWyJG1T653/bJ9C33LyJZ374UMCO1w+P8CCTqe9HMd2mbQIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFKv5vUEpExxUUzP01JhnjAh2GsWrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zZTlm
YjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3OGQwNjVjMjQvNThkYWRiMDUtNDg0NS0z
YTQxLTliMmYtNjYzYTA5ZTBjZmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2U5ZmIyNWEtNDM4Zi00ZTFkLWEx
MzYtNWM4NzhkMDY1YzI0LzNlOWZiMjVhLTQzOGYtNGUxZC1hMTM2LTVjODc4ZDA2
NWMyNC5jcmwwHwYDVR0jBBgwFoAU0w52saMVmAH+L59D/FFDCjr66gQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8zZTlmYjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3
OGQwNjVjMjQuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDotloAwQA
wGgAAwQCx1AcAwQCzA9gAwQC0FvwMA0EAgACMAcDBQAmBlsAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEia
H0GNx30DDNIGbQ1EzYZ23bt4mQ5jaKT+Khx+jqk9Qwbxl3stEABluszWl2+Q4Ixd
quuSxRkOyMBhciJErJwupS3mgHg5n1mQGejowYsnri/gYhCERsFg5gvIzirmmulF
AYKEegoVIl/b+EjgVmPVDLdF9W95vPFV/lrLItYmnhFMmhwsx2uaMALjC+Rh0iz4
h/Cp4k0fpYVOcBAlMy9bzLQ4YaSo3UgvmlRfKAw0MRTu89BbOxzRrMt3GdNnO9JL
D8fWMlrTxs7TNjERI2fbcWxYAPMN8typGFq1pSNW009BHP5XkxT6QBvikFDQ9rpV
ikBJjCO7oCbIC+sEzIY=
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:19:25 2025 by rpki-client