Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/09d56c0d-13f3-3fb3-812f-518fb519c631.roa
File:                     09d56c0d-13f3-3fb3-812f-518fb519c631.roa (raw, json)
Hash identifier:          JQFC7i+hJMR/RmnOQkt2c1Q2mEJ1Ig7aSrXRjyTqEJ8=
Subject key identifier:   36:8C:A6:51:DF:B3:7A:F7:AB:65:C0:38:7A:8D:02:CC:5B:C3:9E:78
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F4328584A331AE1E478DB7D88E0157A80
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/09d56c0d-13f3-3fb3-812f-518fb519c631.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     26914
IP address blocks:        64.127.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:e1:e4:78:db:7d:88:e0:15:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=cc0c5cca-a4d1-4e7f-99e3-dd515870d0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:b3:96:5c:e7:d7:96:4b:4a:84:f3:9a:08:
                    02:c7:84:30:36:78:1e:ba:fd:d3:46:aa:89:79:3b:
                    fd:dc:6c:a5:d2:5d:a9:0e:16:b2:f1:bd:89:15:1a:
                    fb:f5:96:56:58:05:c1:63:33:b0:a0:9b:e1:57:87:
                    e6:51:ba:8c:21:3a:f8:39:7b:4e:2e:0a:08:8c:60:
                    e4:5f:30:c8:92:0d:41:4f:c0:85:ea:52:1d:ab:e2:
                    d2:b1:e0:af:94:25:2e:28:10:0b:34:62:f2:d4:28:
                    94:f7:72:48:dc:5f:a4:08:cb:7a:53:70:64:48:ee:
                    8f:4d:79:53:68:bd:d2:11:fd:05:9a:3b:4a:f4:87:
                    b9:ee:47:23:ef:97:1a:8f:32:f6:c8:9e:00:17:4d:
                    b0:59:48:9f:31:75:ae:f9:68:85:e8:1d:17:85:b1:
                    9e:11:5a:be:73:bd:2d:36:21:fc:c8:ad:39:f8:44:
                    bb:fc:ea:9e:67:28:10:7c:4f:ab:73:26:35:44:89:
                    55:99:78:75:47:32:56:92:b0:f6:12:ee:4b:56:a7:
                    0d:36:ef:90:84:dd:47:1b:ad:f0:1f:6e:c6:46:14:
                    c8:51:5f:cf:f1:c8:ef:88:32:fb:89:dc:d4:d4:02:
                    10:ef:a4:b1:ba:bf:77:24:e7:86:09:ea:55:bf:c5:
                    0d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8C:A6:51:DF:B3:7A:F7:AB:65:C0:38:7A:8D:02:CC:5B:C3:9E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/09d56c0d-13f3-3fb3-812f-518fb519c631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:3c:19:b6:aa:7c:c7:5b:8b:f4:f8:8c:6c:dd:16:b5:3c:b1:
         62:b3:cc:e0:10:33:7f:eb:e4:f3:1f:5c:e3:88:28:3e:dd:7d:
         c1:01:e7:dd:a8:da:fc:7c:20:a0:3e:90:8a:0f:89:b7:c1:60:
         86:fe:cb:1a:c1:6b:a0:2b:5e:59:ae:b5:c6:2a:27:9e:ca:61:
         1c:d5:53:8d:df:da:78:70:93:0c:5c:88:38:ed:44:d9:5f:be:
         7f:70:d0:51:c6:e8:87:6f:47:46:74:4c:14:97:e4:3e:e8:bd:
         61:d4:3b:9c:2c:ef:63:b3:7b:41:b4:e6:5f:3e:c5:63:6b:aa:
         c0:d6:ef:2c:3b:42:01:38:bf:2d:f5:7b:28:b2:9f:8f:fa:19:
         67:82:9f:93:24:9d:24:62:5a:23:94:51:8c:d9:4f:2b:1b:bf:
         b4:eb:b4:4c:a6:d3:d2:c6:48:b1:1d:c4:b7:97:c1:38:51:d1:
         d1:05:24:95:31:de:db:e7:d9:57:5f:2c:26:28:4b:33:e3:41:
         25:64:7b:79:c9:11:f6:73:43:05:bb:44:a2:ae:aa:d1:16:be:
         dc:53:24:95:35:ab:d4:a5:18:00:6f:98:60:d0:32:80:ee:d1:
         e0:2c:bd:06:75:42:16:ec:d1:7b:da:5d:09:f0:16:8c:1e:06:
         1e:f5:b8:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGuHkeNt9iOAVeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWM3MDUzYWItMDczNi00M2JiLWJkZmMtMDE2OWFlOTBi
ODBkMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
Y2MwYzVjY2EtYTRkMS00ZTdmLTk5ZTMtZGQ1MTU4NzBkMGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXizllzn15ZLSoTzmggCx4QwNngeuv3TRqqJ
eTv93Gyl0l2pDhay8b2JFRr79ZZWWAXBYzOwoJvhV4fmUbqMITr4OXtOLgoIjGDk
XzDIkg1BT8CF6lIdq+LSseCvlCUuKBALNGLy1CiU93JI3F+kCMt6U3BkSO6PTXlT
aL3SEf0FmjtK9Ie57kcj75cajzL2yJ4AF02wWUifMXWu+WiF6B0XhbGeEVq+c70t
NiH8yK05+ES7/OqeZygQfE+rcyY1RIlVmXh1RzJWkrD2Eu5LVqcNNu+QhN1HG63w
H27GRhTIUV/P8cjviDL7idzU1AIQ76Sxur93JOeGCepVv8UNWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDaMplHfs3r3q2XAOHqNAsxbw554MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lYzcw
NTNhYi0wNzM2LTQzYmItYmRmYy0wMTY5YWU5MGI4MGQvMDlkNTZjMGQtMTNmMy0z
ZmIzLTgxMmYtNTE4ZmI1MTljNjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWM3MDUzYWItMDczNi00M2JiLWJk
ZmMtMDE2OWFlOTBiODBkL2VjNzA1M2FiLTA3MzYtNDNiYi1iZGZjLTAxNjlhZTkw
YjgwZC5jcmwwHwYDVR0jBBgwFoAU3pcubt/PvchrC3xOqzpSG2XulSwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lYzcwNTNhYi0wNzM2LTQzYmItYmRmYy0wMTY5
YWU5MGI4MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQH9gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHE8GbaqfMdbi/T4jGzdFrU8sWKzzOAQM3/r5PMfXOOIKD7dfcEB592o
2vx8IKA+kIoPibfBYIb+yxrBa6ArXlmutcYqJ57KYRzVU43f2nhwkwxciDjtRNlf
vn9w0FHG6IdvR0Z0TBSX5D7ovWHUO5ws72Oze0G05l8+xWNrqsDW7yw7QgE4vy31
eyiyn4/6GWeCn5MknSRiWiOUUYzZTysbv7TrtEym09LGSLEdxLeXwThR0dEFJJUx
3tvn2VdfLCYoSzPjQSVke3nJEfZzQwW7RKKuqtEWvtxTJJU1q9SlGABvmGDQMoDu
0eAsvQZ1Qhbs0XvaXQnwFoweBh71uMo=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:40:31 2025 by rpki-client