Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/0692e810-a13c-316b-9fea-20e5d3ef32ef.roa
File:                     0692e810-a13c-316b-9fea-20e5d3ef32ef.roa (raw, json)
Hash identifier:          aI9ChlhYA23oOqt60UTQbEjV60FYzmpRBtito1J4NS4=
Subject key identifier:   06:EE:6B:6D:B4:E1:DB:E7:56:28:52:DA:3C:F1:8F:59:F7:A3:20:39
Certificate issuer:       /CN=1611a391-6eb0-4dd1-aebb-1afecce05d9c
Certificate serial:       010D0C9F4328584ACA71262B47E2AFE1681DA900
Authority key identifier: C2:E2:AA:67:FB:0B:CF:64:AF:2A:C4:E4:90:84:81:6E:B3:3B:D2:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/0692e810-a13c-316b-9fea-20e5d3ef32ef.roa
Signing time:             Fri 08 Aug 2025 16:34:23 +0000
ROA not before:           Fri 08 Aug 2025 16:34:23 +0000
ROA not after:            Thu 06 Nov 2025 17:34:23 +0000
asID:                     399970
IP address blocks:        149.112.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/1611a391-6eb0-4dd1-aebb-1afecce05d9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/1611a391-6eb0-4dd1-aebb-1afecce05d9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ca:71:26:2b:47:e2:af:e1:68:1d:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1611a391-6eb0-4dd1-aebb-1afecce05d9c
        Validity
            Not Before: Aug  8 16:34:23 2025 GMT
            Not After : Nov  6 17:34:23 2025 GMT
        Subject: CN=3b31de60-fed5-48af-af62-065f54bf6295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:92:f9:b2:db:f4:c3:f4:81:85:f4:c7:83:75:
                    16:8e:a9:62:7a:9a:7c:5e:46:3c:71:d0:55:04:23:
                    94:75:d2:89:3e:58:96:72:92:09:f0:cc:e8:3b:6e:
                    b1:7c:50:fd:d7:3a:20:62:8a:c8:57:21:8b:4e:95:
                    84:23:1d:3e:0c:57:b5:db:60:ae:03:fb:80:02:f5:
                    e7:b3:db:b5:95:cd:9d:4f:14:07:74:7a:fb:b4:38:
                    86:d3:ca:53:f2:d5:b0:21:fe:40:40:e8:09:1d:b4:
                    34:de:d1:ed:b8:17:90:a7:68:b0:72:3e:cf:09:2e:
                    ab:a4:77:16:dd:2b:ff:d2:2c:db:18:40:1a:3e:72:
                    fc:d6:6f:da:7b:15:1b:5c:71:82:9d:36:f3:2a:6b:
                    32:40:b9:6d:66:41:6e:72:28:21:f9:c3:fd:e6:3a:
                    6a:e3:22:75:f9:f7:e6:79:40:15:a1:94:b0:3c:6f:
                    2b:c8:03:6e:9b:3e:9a:e9:f9:e3:3a:a8:7a:34:e5:
                    2e:54:aa:2f:3a:11:0f:89:f7:85:3c:fc:4e:3b:03:
                    2b:7f:45:ed:e7:01:82:00:1b:c3:62:cf:98:4e:41:
                    bd:8c:66:67:73:22:f0:15:2c:bd:eb:62:7d:51:46:
                    13:1a:ae:56:fe:5a:b3:46:34:d2:b6:83:51:51:4f:
                    e8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EE:6B:6D:B4:E1:DB:E7:56:28:52:DA:3C:F1:8F:59:F7:A3:20:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/0692e810-a13c-316b-9fea-20e5d3ef32ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/1611a391-6eb0-4dd1-aebb-1afecce05d9c.crl

            X509v3 Authority Key Identifier:
                keyid:C2:E2:AA:67:FB:0B:CF:64:AF:2A:C4:E4:90:84:81:6E:B3:3B:D2:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:70:e1:b1:c3:17:ed:b2:6e:1b:74:03:0e:0c:35:e5:14:fc:
         76:e6:cd:96:88:8e:77:8d:3c:a7:0f:b1:ee:00:55:9a:73:f9:
         20:96:89:26:a4:01:3f:4a:32:a9:27:83:92:1a:a4:d3:c6:50:
         51:f7:77:06:31:09:9d:c7:fb:da:48:b2:90:a9:13:92:c8:88:
         b5:ae:af:4c:3b:81:f6:db:e3:25:53:1a:f6:4b:a1:b3:d4:c8:
         d2:ba:d9:77:b0:4a:bc:e2:a4:62:f2:a1:d7:0e:ed:c4:0a:80:
         8e:f2:54:5d:cb:a2:20:f0:1b:b4:71:d7:06:78:f5:1a:1d:84:
         00:56:a9:61:56:9c:69:ad:cb:3f:e7:35:cf:3b:c5:3c:21:52:
         ff:1f:d3:81:8c:18:87:0d:16:e4:17:ef:d3:88:26:9e:ea:2b:
         10:d3:7b:c3:98:aa:fc:57:68:12:a0:00:1a:f3:47:f3:90:5e:
         2d:7f:73:95:e5:1e:a0:d3:dd:bf:41:dd:df:a9:48:0a:23:d8:
         76:f6:2a:d6:12:21:c0:6e:40:11:e6:1c:c3:4e:97:58:cc:2c:
         ec:5d:49:85:2c:d4:82:2f:11:38:d7:5e:96:01:78:5b:9c:a6:
         c1:66:c5:c7:82:c1:8d:3d:aa:c2:b8:e0:0c:d7:99:b5:e8:4b:
         90:3f:bc:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErKcSYrR+Kv4WgdqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTYxMWEzOTEtNmViMC00ZGQxLWFlYmItMWFmZWNjZTA1
ZDljMB4XDTI1MDgwODE2MzQyM1oXDTI1MTEwNjE3MzQyM1owLzEtMCsGA1UEAxMk
M2IzMWRlNjAtZmVkNS00OGFmLWFmNjItMDY1ZjU0YmY2Mjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpL5stv0w/SBhfTHg3UWjqliepp8XkY8cdBV
BCOUddKJPliWcpIJ8MzoO26xfFD91zogYorIVyGLTpWEIx0+DFe122CuA/uAAvXn
s9u1lc2dTxQHdHr7tDiG08pT8tWwIf5AQOgJHbQ03tHtuBeQp2iwcj7PCS6rpHcW
3Sv/0izbGEAaPnL81m/aexUbXHGCnTbzKmsyQLltZkFucigh+cP95jpq4yJ1+ffm
eUAVoZSwPG8ryANumz6a6fnjOqh6NOUuVKovOhEPifeFPPxOOwMrf0Xt5wGCABvD
Ys+YTkG9jGZncyLwFSy962J9UUYTGq5W/lqzRjTStoNRUU/oJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbua2204dvnVihS2jzxj1n3oyA5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xNjEx
YTM5MS02ZWIwLTRkZDEtYWViYi0xYWZlY2NlMDVkOWMvMDY5MmU4MTAtYTEzYy0z
MTZiLTlmZWEtMjBlNWQzZWYzMmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTYxMWEzOTEtNmViMC00ZGQxLWFl
YmItMWFmZWNjZTA1ZDljLzE2MTFhMzkxLTZlYjAtNGRkMS1hZWJiLTFhZmVjY2Uw
NWQ5Yy5jcmwwHwYDVR0jBBgwFoAUwuKqZ/sLz2SvKsTkkISBbrM70howDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8xNjExYTM5MS02ZWIwLTRkZDEtYWViYi0xYWZl
Y2NlMDVkOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEpw4bHDF+2ybht0Aw4MNeUU/HbmzZaIjneNPKcPse4AVZpz+SCWiSak
AT9KMqkng5IapNPGUFH3dwYxCZ3H+9pIspCpE5LIiLWur0w7gfbb4yVTGvZLobPU
yNK62XewSrzipGLyodcO7cQKgI7yVF3LoiDwG7Rx1wZ49RodhABWqWFWnGmtyz/n
Nc87xTwhUv8f04GMGIcNFuQX79OIJp7qKxDTe8OYqvxXaBKgABrzR/OQXi1/c5Xl
HqDT3b9B3d+pSAoj2Hb2KtYSIcBuQBHmHMNOl1jMLOxdSYUs1IIvETjXXpYBeFuc
psFmxceCwY09qsK44AzXmbXoS5A/vHw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:45:29 2025 by rpki-client