Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/cc6341c6-35dd-3f63-bbc2-34872a10d339.roa
File:                     cc6341c6-35dd-3f63-bbc2-34872a10d339.roa (raw, json)
Hash identifier:          8/V79A/iZatrFAu0VPK23Qydj9la1ei63OygdxpdydY=
Subject key identifier:   F2:D4:22:49:02:04:CA:BC:29:8D:AA:74:F9:5B:33:EB:A8:C8:63:6C
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584AF25698A3D8B4985242A8E080
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/cc6341c6-35dd-3f63-bbc2-34872a10d339.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     6079
IP address blocks:        207.229.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:98:a3:d8:b4:98:52:42:a8:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=7835b611-61d2-440a-9513-3810faefb66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4c:e8:33:3b:2c:44:0b:11:f0:e6:35:6f:a4:
                    95:03:00:66:bc:95:fb:1e:5d:98:d6:8a:5f:03:87:
                    e6:21:a2:e0:8e:b3:ab:99:5c:cf:8c:5f:9a:f1:1a:
                    32:e1:b2:af:4c:8f:b8:05:fb:b9:be:38:22:87:a9:
                    81:8a:f0:5c:c5:7e:31:4f:e6:7d:8a:13:a0:45:53:
                    ef:c9:d8:98:e0:d3:95:db:7f:16:15:ed:be:6d:f1:
                    6a:43:03:5e:43:e6:78:fa:86:4b:56:34:a4:ac:bc:
                    61:4f:c8:98:cb:6b:43:67:ba:ec:63:91:62:18:b9:
                    6f:bf:3f:6f:58:76:08:07:e1:a0:ff:13:0b:d3:70:
                    fe:fa:6d:18:58:77:3f:b9:61:31:1e:2d:34:58:53:
                    2b:dc:35:86:1d:f3:6b:02:ef:07:a2:9b:05:9b:fb:
                    62:41:c0:be:77:bb:d0:98:0c:e3:e5:f9:95:e6:16:
                    2a:9e:f0:2d:62:6b:4a:09:b9:87:5d:45:d1:66:3a:
                    bb:4e:85:b3:0a:37:4a:a0:f3:dd:71:4b:b6:2a:15:
                    ed:36:0b:64:9e:49:f6:42:9b:a8:38:b6:06:cd:62:
                    7c:e4:cf:66:1a:7a:e4:74:a6:ee:61:b2:22:46:e7:
                    22:4b:17:6c:8e:b7:e0:27:00:76:c6:9b:7e:fd:1c:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D4:22:49:02:04:CA:BC:29:8D:AA:74:F9:5B:33:EB:A8:C8:63:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/cc6341c6-35dd-3f63-bbc2-34872a10d339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.229.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ba:da:4d:6f:85:1c:90:a0:2c:0c:c6:5b:0c:b4:d1:64:0e:
         27:81:8b:ce:78:dc:51:8d:84:90:87:f1:e3:47:05:83:b0:40:
         40:00:23:e2:bc:f3:32:2f:a6:4c:69:ed:37:d1:0d:a2:ef:a1:
         f2:42:26:64:81:2d:84:50:54:7b:d0:7f:85:ca:6e:48:a2:55:
         0f:eb:34:69:3f:3d:70:5e:7e:e1:7b:f0:ac:65:df:4e:85:36:
         8b:ba:da:ca:c5:80:73:18:ee:a3:56:27:a2:4c:00:c8:52:aa:
         32:8c:80:f2:5e:70:9d:df:e8:dc:cb:3d:0a:cc:2c:70:e9:b3:
         ad:62:11:47:51:54:83:cf:3b:2c:b3:10:db:f4:88:0f:01:65:
         12:03:9a:fc:0d:f0:37:37:90:19:24:9a:b2:e8:2a:21:bd:86:
         b0:ac:aa:be:b4:17:c7:80:83:33:4c:95:41:0a:e8:2c:72:e5:
         c4:1d:d8:56:dc:d5:78:8d:37:2d:54:2a:69:2f:84:c8:0a:79:
         49:84:4f:65:cb:4c:b8:1b:9e:ab:f4:1a:74:8b:8c:64:8c:48:
         fd:d6:2a:f3:55:29:4d:1a:4b:6b:3a:40:d4:c8:d0:6b:92:bc:
         58:54:ad:64:07:46:88:df:9e:52:e4:95:a4:b2:b7:34:e1:76:
         0e:91:c5:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVpij2LSYUkKo4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2
ODczMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk
NzgzNWI2MTEtNjFkMi00NDBhLTk1MTMtMzgxMGZhZWZiNjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUzoMzssRAsR8OY1b6SVAwBmvJX7Hl2Y1opf
A4fmIaLgjrOrmVzPjF+a8Roy4bKvTI+4Bfu5vjgih6mBivBcxX4xT+Z9ihOgRVPv
ydiY4NOV238WFe2+bfFqQwNeQ+Z4+oZLVjSkrLxhT8iYy2tDZ7rsY5FiGLlvvz9v
WHYIB+Gg/xML03D++m0YWHc/uWExHi00WFMr3DWGHfNrAu8HopsFm/tiQcC+d7vQ
mAzj5fmV5hYqnvAtYmtKCbmHXUXRZjq7ToWzCjdKoPPdcUu2KhXtNgtknkn2Qpuo
OLYGzWJ85M9mGnrkdKbuYbIiRuciSxdsjrfgJwB2xpt+/RwvKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPLUIkkCBMq8KY2qdPlbM+uoyGNsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0
NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvY2M2MzQxYzYtMzVkZC0z
ZjYzLWJiYzItMzQ4NzJhMTBkMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli
MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk
Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw
MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz+WAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEO62k1vhRyQoCwMxlsMtNFkDieBi8543FGNhJCH8eNHBYOwQEAAI+K8
8zIvpkxp7TfRDaLvofJCJmSBLYRQVHvQf4XKbkiiVQ/rNGk/PXBefuF78Kxl306F
Nou62srFgHMY7qNWJ6JMAMhSqjKMgPJecJ3f6NzLPQrMLHDps61iEUdRVIPPOyyz
ENv0iA8BZRIDmvwN8Dc3kBkkmrLoKiG9hrCsqr60F8eAgzNMlUEK6Cxy5cQd2Fbc
1XiNNy1UKmkvhMgKeUmET2XLTLgbnqv0GnSLjGSMSP3WKvNVKU0aS2s6QNTI0GuS
vFhUrWQHRojfnlLklaSytzThdg6Rxfo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:54:01 2025 by rpki-client