Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/60d4ccec-dd80-35e0-84a5-4b72a81d35e6.roa
File:                     60d4ccec-dd80-35e0-84a5-4b72a81d35e6.roa (raw, json)
Hash identifier:          5CZjM7ZpvuwzdkcBx6YwmtuziybieJfkmgnAP/I4j3c=
Subject key identifier:   DF:2F:71:34:93:B9:33:A0:5E:97:7B:AD:F3:F7:80:9B:C3:2F:2E:02
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F4328584A4F05C6686911AEFBE8554780
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/60d4ccec-dd80-35e0-84a5-4b72a81d35e6.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        198.176.122.0/24 maxlen: 24
                          198.176.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c6:68:69:11:ae:fb:e8:55:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=f1d5ed61-d19a-4fdf-997b-ba35886e05b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:18:d2:88:d6:70:f8:3e:b6:1a:f3:8a:87:8c:
                    a0:53:46:a5:d7:9f:31:1c:ca:22:2c:a4:99:1f:e5:
                    4a:6d:13:55:ac:98:cb:d6:96:9f:39:76:be:13:72:
                    c7:5c:7a:32:d3:f9:3c:80:7a:66:8b:5f:8e:ac:15:
                    34:d6:5c:a8:d4:aa:80:14:25:aa:56:63:b7:fc:87:
                    d4:bb:b1:55:ce:f2:90:56:5e:f5:3d:3f:72:69:14:
                    05:4f:76:37:3d:7a:09:4d:9a:2b:f6:17:62:d0:29:
                    76:d5:7f:88:62:9f:2d:f5:62:c6:bf:73:c0:34:2d:
                    7e:32:dc:4b:b0:7c:6d:27:3d:2f:ec:ce:36:3c:fc:
                    c9:30:74:8c:ba:fd:5b:79:d5:80:c8:ad:7f:7a:7e:
                    97:82:2d:bd:47:a4:ff:89:ae:31:77:8b:32:03:d1:
                    05:50:26:26:4b:6c:5c:40:06:c8:37:75:9f:da:6a:
                    3f:94:d8:ac:b9:6b:0a:7c:19:d2:5d:60:1f:e3:d8:
                    0b:4b:c3:51:3d:b1:18:f5:89:31:ca:89:1b:b6:14:
                    87:d2:a3:8c:ae:bb:5c:02:db:6c:dd:03:9c:40:f2:
                    e7:eb:4f:fc:15:63:a8:41:91:5e:d4:63:97:bd:21:
                    86:4d:ac:88:da:8a:68:40:2c:67:ea:31:30:a0:57:
                    94:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2F:71:34:93:B9:33:A0:5E:97:7B:AD:F3:F7:80:9B:C3:2F:2E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/60d4ccec-dd80-35e0-84a5-4b72a81d35e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:9f:fa:26:c7:10:d1:7b:5d:bc:c7:0e:76:5e:56:0d:06:5a:
         c3:38:12:93:59:42:68:bb:86:17:47:a6:bf:b8:a3:e8:a0:b7:
         61:7c:f2:21:3e:04:fd:41:e2:54:79:f8:0d:bd:fe:59:bd:90:
         2c:ae:52:29:7b:d2:c4:92:f9:03:04:76:8e:b3:be:c1:a4:29:
         00:86:b2:ca:93:47:df:c8:82:5b:40:e4:71:c3:b5:1d:90:a9:
         0e:b6:ae:05:7d:8f:38:8f:33:73:0b:f9:da:7c:07:1b:17:fe:
         ec:64:a4:c4:df:c3:7e:66:9f:19:6a:20:83:79:16:99:1d:0c:
         dc:d7:15:97:72:8f:2e:df:33:e5:dd:2e:a5:c6:72:09:ad:b6:
         c3:06:84:05:55:26:31:40:2f:26:e7:af:9f:8c:fe:9c:48:4b:
         9f:0c:25:dd:2d:f2:5e:b2:66:ad:56:e3:cf:77:2c:97:a9:94:
         64:54:0f:8c:ea:60:b0:fd:b9:1f:f6:16:38:58:11:44:ce:9a:
         53:a5:91:a5:e9:29:54:59:e0:8f:13:c9:51:63:d3:3a:87:e7:
         43:a2:d1:d6:a6:9b:47:5b:96:d8:68:7c:33:58:5c:75:d0:f5:
         f4:9d:6c:a7:35:31:11:ad:62:2c:33:6b:81:78:73:f5:79:da:
         06:4c:f3:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBcZoaRGu++hVR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTYyMzkxNDktZmEwYi00MzI1LWI4ZGMtZmQwZTI1MDQ1
NGMyMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk
ZjFkNWVkNjEtZDE5YS00ZmRmLTk5N2ItYmEzNTg4NmUwNWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BjSiNZw+D62GvOKh4ygU0al158xHMoiLKSZ
H+VKbRNVrJjL1pafOXa+E3LHXHoy0/k8gHpmi1+OrBU01lyo1KqAFCWqVmO3/IfU
u7FVzvKQVl71PT9yaRQFT3Y3PXoJTZor9hdi0Cl21X+IYp8t9WLGv3PANC1+MtxL
sHxtJz0v7M42PPzJMHSMuv1bedWAyK1/en6Xgi29R6T/ia4xd4syA9EFUCYmS2xc
QAbIN3Wf2mo/lNisuWsKfBnSXWAf49gLS8NRPbEY9YkxyokbthSH0qOMrrtcAtts
3QOcQPLn60/8FWOoQZFe1GOXvSGGTayI2opoQCxn6jEwoFeUDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN8vcTSTuTOgXpd7rfP3gJvDLy4CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNjIz
OTE0OS1mYTBiLTQzMjUtYjhkYy1mZDBlMjUwNDU0YzIvNjBkNGNjZWMtZGQ4MC0z
NWUwLTg0YTUtNGI3MmE4MWQzNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTYyMzkxNDktZmEwYi00MzI1LWI4
ZGMtZmQwZTI1MDQ1NGMyL2E2MjM5MTQ5LWZhMGItNDMyNS1iOGRjLWZkMGUyNTA0
NTRjMi5jcmwwHwYDVR0jBBgwFoAUXhqfqO2JLdZA54wAofK0/3LXMWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNjIzOTE0OS1mYTBiLTQzMjUtYjhkYy1mZDBl
MjUwNDU0YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxrB6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAyf+ibHENF7XbzHDnZeVg0GWsM4EpNZQmi7hhdHpr+4o+igt2F88iE+
BP1B4lR5+A29/lm9kCyuUil70sSS+QMEdo6zvsGkKQCGssqTR9/IgltA5HHDtR2Q
qQ62rgV9jziPM3ML+dp8BxsX/uxkpMTfw35mnxlqIIN5FpkdDNzXFZdyjy7fM+Xd
LqXGcgmttsMGhAVVJjFALybnr5+M/pxIS58MJd0t8l6yZq1W4893LJeplGRUD4zq
YLD9uR/2FjhYEUTOmlOlkaXpKVRZ4I8TyVFj0zqH50Oi0damm0dblthofDNYXHXQ
9fSdbKc1MRGtYiwza4F4c/V52gZM8+Y=
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:25:21 2025 by rpki-client