Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/65b3d038-dc4b-3060-b32a-d60a86753eb8.roa
File:                     65b3d038-dc4b-3060-b32a-d60a86753eb8.roa (raw, json)
Hash identifier:          WQuJAYQDt4njVHJ4EdxNL7UFL9TLrissKG13XQ6rtO4=
Subject key identifier:   C2:2E:3C:F5:78:BB:C7:03:B5:48:EC:5E:09:E6:09:3C:CA:A2:9B:5E
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584A411050E8834D464335EBFD00
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/65b3d038-dc4b-3060-b32a-d60a86753eb8.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     13760
IP address blocks:        216.170.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:50:e8:83:4d:46:43:35:eb:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=09a56e2d-0b52-466f-b8b5-ed19f6279104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:db:28:d2:4d:7a:8f:38:63:8b:30:bc:61:35:
                    cf:57:31:aa:7d:4e:5c:37:5d:9c:89:62:34:77:f8:
                    c5:0f:e4:0d:e5:00:00:bf:c0:36:45:f3:09:86:9c:
                    31:80:6d:b2:25:ca:9f:10:6d:cd:9a:78:21:30:22:
                    38:a1:b7:d8:04:46:82:bc:1b:cd:19:2e:fe:54:37:
                    e8:21:15:68:c9:75:0b:30:ab:0b:80:00:ca:4f:f5:
                    c7:ef:1f:0d:53:36:c5:38:b2:63:e4:79:03:79:b8:
                    93:82:78:03:7f:86:a1:5e:b9:88:84:70:06:d8:3e:
                    82:11:c0:c2:56:a5:1f:46:a6:80:49:44:99:a2:33:
                    12:60:4b:99:d7:f0:f5:ba:32:95:db:d7:37:a6:3c:
                    69:59:19:ce:34:f4:0b:4e:3e:c2:80:7a:34:45:ce:
                    5f:56:60:8e:8b:9e:fb:b5:c0:3a:de:cf:18:bd:e1:
                    50:4b:a6:db:6f:45:e2:41:6f:9f:cd:3d:90:c7:01:
                    cb:e8:09:68:d1:a9:8d:c8:92:aa:8d:65:d3:7f:d9:
                    3d:74:bf:ed:75:74:16:75:ab:e2:7d:d7:a6:b3:54:
                    8b:a0:98:1c:b5:85:f8:02:67:e1:56:30:9f:c9:70:
                    fc:58:74:54:31:1f:e3:64:78:db:e2:83:bd:d8:dd:
                    62:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2E:3C:F5:78:BB:C7:03:B5:48:EC:5E:09:E6:09:3C:CA:A2:9B:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/65b3d038-dc4b-3060-b32a-d60a86753eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.170.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:89:c5:6f:d7:58:8b:2f:b2:f9:b3:04:5c:bc:3a:e2:4d:c2:
         7a:e4:b1:2e:3e:d8:40:24:cf:ed:1e:2c:b9:42:56:c9:14:9d:
         e7:4f:a8:dd:70:84:2c:7a:47:0f:52:ca:8e:49:ac:91:45:53:
         f4:73:2f:44:87:09:90:85:45:bb:26:9e:8e:b6:1f:b1:c7:d2:
         21:83:fe:8c:7a:95:00:bb:b8:55:a0:cb:61:61:dc:0f:75:5c:
         00:f9:94:3a:9d:55:ee:33:94:f6:16:28:8a:13:b6:f6:5c:71:
         b9:bb:0d:dd:b6:75:ef:04:5d:bc:cd:0b:f3:2f:74:cd:7b:4f:
         6f:80:b0:d8:0b:e7:de:60:67:c5:dd:26:4c:27:01:e3:d8:67:
         3e:79:92:72:88:49:03:15:4d:dc:f5:93:49:32:e0:d2:9f:3a:
         42:4e:8c:4b:43:6d:79:1a:3f:79:67:e8:6d:68:c1:1a:b0:80:
         25:8d:f9:1d:b8:bb:84:f7:9f:bb:f9:c5:0f:f7:81:66:a4:ab:
         bb:d1:53:93:ae:ed:27:64:3e:a4:9c:d3:4f:e6:0d:9d:85:03:
         6d:cc:30:1f:bd:c6:84:b1:11:f4:18:dc:cb:17:f0:8f:b1:e5:
         75:39:eb:94:09:29:1b:54:3c:a9:a2:63:9b:e5:3d:f0:09:e5:
         59:a5:36:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFDog01GQzXr/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm
MzQyMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk
MDlhNTZlMmQtMGI1Mi00NjZmLWI4YjUtZWQxOWY2Mjc5MTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldso0k16jzhjizC8YTXPVzGqfU5cN12ciWI0
d/jFD+QN5QAAv8A2RfMJhpwxgG2yJcqfEG3NmnghMCI4obfYBEaCvBvNGS7+VDfo
IRVoyXULMKsLgADKT/XH7x8NUzbFOLJj5HkDebiTgngDf4ahXrmIhHAG2D6CEcDC
VqUfRqaASUSZojMSYEuZ1/D1ujKV29c3pjxpWRnONPQLTj7CgHo0Rc5fVmCOi577
tcA63s8YveFQS6bbb0XiQW+fzT2QxwHL6Alo0amNyJKqjWXTf9k9dL/tdXQWdavi
fdems1SLoJgctYX4AmfhVjCfyXD8WHRUMR/jZHjb4oO92N1idQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMIuPPV4u8cDtUjsXgnmCTzKopteMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0
MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvNjViM2QwMzgtZGM0Yi0z
MDYwLWIzMmEtZDYwYTg2NzUzZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi
MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy
ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz
YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KpPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6JxW/XWIsvsvmzBFy8OuJNwnrksS4+2EAkz+0eLLlCVskUnedPqN1w
hCx6Rw9Syo5JrJFFU/RzL0SHCZCFRbsmno62H7HH0iGD/ox6lQC7uFWgy2Fh3A91
XAD5lDqdVe4zlPYWKIoTtvZccbm7Dd22de8EXbzNC/MvdM17T2+AsNgL595gZ8Xd
JkwnAePYZz55knKISQMVTdz1k0ky4NKfOkJOjEtDbXkaP3ln6G1owRqwgCWN+R24
u4T3n7v5xQ/3gWakq7vRU5Ou7SdkPqSc00/mDZ2FA23MMB+9xoSxEfQY3MsX8I+x
5XU565QJKRtUPKmiY5vlPfAJ5VmlNo8=
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:09:51 2025 by rpki-client