Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/8364f6e2-aaec-33e5-80c0-465d381b7783.roa
File:                     8364f6e2-aaec-33e5-80c0-465d381b7783.roa (raw, json)
Hash identifier:          xrTP5t1IEYF/LHZ5d/zbbQTHBXQVfYOyh9LSd3m6IBI=
Subject key identifier:   56:87:C2:95:75:06:26:82:76:03:E7:56:60:A1:45:99:80:D8:08:1B
Certificate issuer:       /CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
Certificate serial:       010D0C9F4328584A2ABADA4210C09A86043F9740
Authority key identifier: 77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/8364f6e2-aaec-33e5-80c0-465d381b7783.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     6461
IP address blocks:        216.19.84.0/24 maxlen: 24
                          216.19.86.0/24 maxlen: 24
                          216.19.95.0/24 maxlen: 24
                          2620:a::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:da:42:10:c0:9a:86:04:3f:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=3bf6db78-6eb6-4d93-9783-e72057d17799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:42:9f:8f:97:67:89:5e:06:26:b4:04:73:
                    67:f7:74:98:33:ff:74:09:40:ba:f6:1d:e9:54:fb:
                    86:d6:f2:2c:4d:98:fb:e9:37:cb:f4:86:8b:14:72:
                    67:af:67:6c:6c:a1:6c:02:77:01:4c:10:53:30:f1:
                    0e:b2:e4:00:0a:38:e1:a1:a8:71:b7:db:59:e2:e1:
                    bb:af:bf:33:0f:5d:3f:29:a3:d3:ea:2c:db:9a:4e:
                    76:69:f0:b0:28:78:5f:05:2f:ca:65:d7:cf:80:c1:
                    77:ef:8f:ae:6b:f0:c0:31:e6:40:a5:8e:e2:45:1d:
                    c6:a7:82:70:cb:01:b5:74:d7:04:91:da:aa:13:3b:
                    30:a1:82:a7:93:65:a9:3b:7c:bc:fc:d2:68:21:ea:
                    68:a9:18:74:a1:81:f9:e1:e0:98:f9:87:82:70:d4:
                    ba:88:4f:8b:92:31:a6:d8:72:f7:14:ba:c9:82:98:
                    22:25:c5:d6:ad:24:7b:e3:09:b6:0d:08:86:09:2b:
                    11:1f:cc:0e:e8:ec:4d:e8:fd:f5:aa:97:fd:cf:30:
                    30:7b:5e:86:20:d4:c8:1f:c6:08:66:06:27:f4:06:
                    ad:dc:47:e1:f1:42:07:48:15:4f:13:49:9c:bb:ef:
                    00:d8:78:85:de:78:51:97:4f:a4:ee:90:6a:c4:a1:
                    b5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:87:C2:95:75:06:26:82:76:03:E7:56:60:A1:45:99:80:D8:08:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/8364f6e2-aaec-33e5-80c0-465d381b7783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl

            X509v3 Authority Key Identifier:
                keyid:77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.19.84.0/24
                  216.19.86.0/24
                  216.19.95.0/24
                IPv6:
                  2620:a::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d2:14:54:71:3c:e1:a6:4f:51:13:00:e0:a6:9f:90:46:1c:
         54:07:16:36:d4:29:cc:c8:78:af:99:bc:a1:85:b3:f5:1c:87:
         8b:50:95:d6:31:4c:df:d9:2e:4c:ca:6e:92:54:6a:f3:96:a3:
         73:e7:4d:da:ed:62:a7:fb:4a:ec:19:1d:82:37:bf:ae:4f:09:
         8c:d6:fe:a1:5a:af:3b:70:ee:c4:0a:0b:be:c8:5c:cf:b2:52:
         53:98:a0:45:bf:7b:4e:1a:fc:1e:09:f7:33:86:99:fc:72:b2:
         23:a5:3e:94:2e:98:92:30:78:b3:b0:aa:9c:e0:64:83:7e:a3:
         2b:32:67:0a:11:e0:5f:70:82:e9:fe:27:82:f1:79:4d:bd:dc:
         e0:78:fb:7f:2e:f0:50:f3:49:6f:ea:72:75:c0:db:b1:24:e1:
         08:6c:c4:3e:a0:76:d2:f4:c6:21:46:ca:a8:4e:49:15:14:29:
         bb:61:9e:5b:a0:a8:ff:22:f9:63:db:69:ef:aa:02:e7:7e:22:
         26:ac:72:dd:45:6a:e6:87:f6:09:1a:4f:26:92:53:cb:e5:43:
         b9:e0:42:e8:72:15:f0:ec:b5:97:f6:bd:11:06:9d:99:1b:36:
         d1:bb:60:e3:0b:ae:81:f6:eb:a6:6a:85:ad:58:46:65:ab:de:
         83:ec:aa:72
-----BEGIN CERTIFICATE-----
MIIGYjCCBUqgAwIBAgIUAQ0Mn0MoWEoqutpCEMCahgQ/l0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGRjYzZhM2EtMGU0Zi00OGMxLTkxMTQtNWRkZGYyZDdk
YjlkMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
M2JmNmRiNzgtNmViNi00ZDkzLTk3ODMtZTcyMDU3ZDE3Nzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgNCn4+XZ4leBia0BHNn93SYM/90CUC69h3p
VPuG1vIsTZj76TfL9IaLFHJnr2dsbKFsAncBTBBTMPEOsuQACjjhoahxt9tZ4uG7
r78zD10/KaPT6izbmk52afCwKHhfBS/KZdfPgMF374+ua/DAMeZApY7iRR3Gp4Jw
ywG1dNcEkdqqEzswoYKnk2WpO3y8/NJoIepoqRh0oYH54eCY+YeCcNS6iE+LkjGm
2HL3FLrJgpgiJcXWrSR74wm2DQiGCSsRH8wO6OxN6P31qpf9zzAwe16GINTIH8YI
ZgYn9Aat3Efh8UIHSBVPE0mcu+8A2HiF3nhRl0+k7pBqxKG1WwIDAQABo4IDdDCC
A3AwHQYDVR0OBBYEFFaHwpV1BiaCdgPnVmChRZmA2AgbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZGNj
NmEzYS0wZTRmLTQ4YzEtOTExNC01ZGRkZjJkN2RiOWQvODM2NGY2ZTItYWFlYy0z
M2U1LTgwYzAtNDY1ZDM4MWI3NzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGRjYzZhM2EtMGU0Zi00OGMxLTkx
MTQtNWRkZGYyZDdkYjlkLzRkY2M2YTNhLTBlNGYtNDhjMS05MTE0LTVkZGRmMmQ3
ZGI5ZC5jcmwwHwYDVR0jBBgwFoAUdwVCOieEWFJGFp+ThnGvp8EB9m4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZGNjNmEzYS0wZTRmLTQ4YzEtOTExNC01ZGRk
ZjJkN2RiOWQuY2VyMD4GCCsGAQUFBwEHAQH/BC8wLTAYBAIAATASAwQA2BNUAwQA
2BNWAwQA2BNfMBEEAgACMAsDCQAmIAAKAAAAADBUBgNVHSABAf8ESjBIMEYGCCsG
AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291
cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAE0hRUcTzhpk9R
EwDgpp+QRhxUBxY21CnMyHivmbyhhbP1HIeLUJXWMUzf2S5Mym6SVGrzlqNz503a
7WKn+0rsGR2CN7+uTwmM1v6hWq87cO7ECgu+yFzPslJTmKBFv3tOGvweCfczhpn8
crIjpT6ULpiSMHizsKqc4GSDfqMrMmcKEeBfcILp/ieC8XlNvdzgePt/LvBQ80lv
6nJ1wNuxJOEIbMQ+oHbS9MYhRsqoTkkVFCm7YZ5boKj/Ivlj22nvqgLnfiImrHLd
RWrmh/YJGk8mklPL5UO54ELochXw7LWX9r0RBp2ZGzbRu2DjC66B9uumaoWtWEZl
q96D7Kpy
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:47:01 2025 by rpki-client