Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa
File:                     002cd295-0845-3e0b-8fc6-6be378b880ee.roa (raw, json)
Hash identifier:          WsZBANizude4PhARqz5Imqk/0dosXCTrzu1vGUEscgc=
Subject key identifier:   C9:8C:45:F9:14:B6:FD:65:CA:A5:2F:53:83:90:D6:79:DF:6A:0F:FC
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584A8B0B532FEF2092BDF24F9480
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     46606
IP address blocks:        162.210.70.0/23 maxlen: 24
                          162.222.225.0/24 maxlen: 24
                          162.222.226.0/23 maxlen: 24
                          162.251.80.0/24 maxlen: 24
                          162.251.85.0/24 maxlen: 24
                          199.79.62.0/23 maxlen: 24
                          204.11.58.0/23 maxlen: 24
                          207.174.212.0/22 maxlen: 24
                          208.91.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:53:2f:ef:20:92:bd:f2:4f:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=f4bc85f4-7cd5-459a-aa91-cf84b56f098b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:48:59:c3:a9:9e:80:ed:3e:4f:98:f1:a9:e9:
                    f4:f1:cc:61:39:ce:e5:12:3b:41:ec:b7:fb:6d:bc:
                    05:a5:08:d2:ac:56:95:2e:dd:87:f5:db:c4:1f:6a:
                    45:bd:0b:50:b1:db:e9:f9:40:8e:c9:b8:90:66:81:
                    b6:dc:c7:e7:aa:7e:e8:e1:8a:cb:bc:41:9a:ef:9f:
                    20:cb:79:4d:d5:95:f4:02:ba:00:93:8b:85:e0:8d:
                    8c:f9:eb:bb:0f:6b:78:b2:6b:fd:dd:19:14:a4:19:
                    f3:d1:f1:99:8c:e1:8c:46:76:29:a1:87:fe:41:d3:
                    f1:9f:f0:7e:f7:1d:c5:1a:e5:d9:2e:0c:92:5d:42:
                    76:f6:d0:fa:f0:c3:b1:f8:7b:f8:e5:51:b0:db:d7:
                    01:5b:ea:e2:ec:41:71:eb:8f:bd:79:84:24:49:4f:
                    46:aa:60:bd:e1:1c:d8:af:24:3b:e0:f8:25:dd:32:
                    c2:9d:69:07:96:b6:3a:08:7a:5d:34:61:06:91:ff:
                    97:59:3a:4f:a8:f4:eb:a3:9f:72:c4:1f:13:8f:d8:
                    8d:31:9b:e3:a2:55:82:3c:21:eb:cc:c7:34:7e:fa:
                    ad:a3:2b:1e:14:bf:f1:f3:0d:43:76:bd:85:0e:de:
                    29:4c:d8:48:9d:0e:41:74:c5:bc:bc:d6:3d:6d:e3:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8C:45:F9:14:B6:FD:65:CA:A5:2F:53:83:90:D6:79:DF:6A:0F:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.70.0/23
                  162.222.225.0-162.222.227.255
                  162.251.80.0/24
                  162.251.85.0/24
                  199.79.62.0/23
                  204.11.58.0/23
                  207.174.212.0/22
                  208.91.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:28:96:a5:d2:1c:3d:c2:ee:ea:3e:17:9b:84:2e:28:17:dd:
         e7:fc:96:e0:26:d2:20:80:44:f0:45:bc:99:b2:45:d2:d6:48:
         53:85:d6:d6:fe:79:26:3d:d6:e5:9b:43:5a:cf:0c:ad:21:77:
         40:ce:80:d5:83:7a:4a:91:8f:7c:90:59:4a:83:c3:0a:7b:54:
         ca:65:5b:df:2f:a7:0b:66:58:8c:aa:69:6d:51:c0:e5:7c:7d:
         e0:cd:20:4a:b1:a3:59:67:fe:b3:a0:c2:2c:e6:f4:b9:cd:38:
         36:07:25:56:4c:70:2d:9b:09:5e:d5:3e:66:0a:af:72:29:ad:
         4a:a6:35:82:40:41:28:b5:7e:8b:4b:76:73:f8:7e:64:39:b8:
         73:3d:89:f9:bc:a0:a7:e7:f2:27:ca:bd:90:8c:71:e5:ec:ab:
         62:80:7b:a3:26:6c:a0:14:7a:f5:fd:a3:ba:20:f8:3c:f4:b1:
         e3:de:4e:97:87:b5:58:54:e8:aa:a5:01:e4:2f:ff:f7:59:38:
         a9:a6:ff:b6:36:91:ad:fc:9d:6f:eb:a5:80:a4:f5:42:60:3a:
         ad:5e:15:57:79:0a:2e:e2:f3:f7:4c:88:4c:74:9e:ad:d8:cd:
         df:12:d2:d7:31:8c:ef:6a:f9:2f:ff:82:80:24:ac:9d:b3:d8:
         98:6c:0a:71
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWEqLC1Mv7yCSvfJPlIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw
NTM1MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk
ZjRiYzg1ZjQtN2NkNS00NTlhLWFhOTEtY2Y4NGI1NmYwOThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEhZw6megO0+T5jxqen08cxhOc7lEjtB7Lf7
bbwFpQjSrFaVLt2H9dvEH2pFvQtQsdvp+UCOybiQZoG23Mfnqn7o4YrLvEGa758g
y3lN1ZX0AroAk4uF4I2M+eu7D2t4smv93RkUpBnz0fGZjOGMRnYpoYf+QdPxn/B+
9x3FGuXZLgySXUJ29tD68MOx+Hv45VGw29cBW+ri7EFx64+9eYQkSU9GqmC94RzY
ryQ74Pgl3TLCnWkHlrY6CHpdNGEGkf+XWTpPqPTro59yxB8Tj9iNMZvjolWCPCHr
zMc0fvqtoyseFL/x8w1Ddr2FDt4pTNhInQ5BdMW8vNY9bePInwIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFMmMRfkUtv1lyqUvU4OQ1nnfag/8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4
NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvMDAyY2QyOTUtMDg0NS0z
ZTBiLThmYzYtNmJlMzc4Yjg4MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj
MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1
MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw
YTY1NTA1MzUuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQBotJGMAwD
BACi3uEDBAKi3uADBACi+1ADBACi+1UDBAHHTz4DBAHMCzoDBALPrtQDBAHQW8Yw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATyiWpdIcPcLu6j4Xm4QuKBfd5/yW4CbSIIBE8EW8mbJF0tZIU4XW
1v55Jj3W5ZtDWs8MrSF3QM6A1YN6SpGPfJBZSoPDCntUymVb3y+nC2ZYjKppbVHA
5Xx94M0gSrGjWWf+s6DCLOb0uc04NgclVkxwLZsJXtU+ZgqvcimtSqY1gkBBKLV+
i0t2c/h+ZDm4cz2J+bygp+fyJ8q9kIxx5eyrYoB7oyZsoBR69f2juiD4PPSx495O
l4e1WFToqqUB5C//91k4qab/tjaRrfydb+ulgKT1QmA6rV4VV3kKLuLz90yITHSe
rdjN3xLS1zGM72r5L/+CgCSsnbPYmGwKcQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:27:35 2025 by rpki-client