Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2932d1e0-02b7-3dce-9bbe-febab0acfe6a.roa
File:                     2932d1e0-02b7-3dce-9bbe-febab0acfe6a.roa (raw, json)
Hash identifier:          YHClTPcLVKGVvDqIjEDNy0iVpZEH+wavdjtMeQsQxaw=
Subject key identifier:   82:29:72:74:86:8D:EB:90:8E:29:30:FF:1E:5E:09:D4:5B:8D:AA:C3
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAAFFB2F3435D278279B4000
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2932d1e0-02b7-3dce-9bbe-febab0acfe6a.roa
Signing time:             Sun 03 Aug 2025 02:35:42 +0000
ROA not before:           Sun 03 Aug 2025 02:35:42 +0000
ROA not after:            Sat 01 Nov 2025 02:35:42 +0000
asID:                     22616
IP address blocks:        136.226.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:af:fb:2f:34:35:d2:78:27:9b:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:42 2025 GMT
            Not After : Nov  1 02:35:42 2025 GMT
        Subject: CN=9e041447-84cb-43af-9af9-33548faaa4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:32:2e:28:dd:5a:f0:11:3b:c7:05:e5:87:
                    7d:36:60:a1:98:25:00:f4:72:c5:d5:22:c4:0d:cb:
                    8d:ae:c0:f7:f9:aa:16:4c:40:d9:5a:2a:e4:7b:5d:
                    21:09:73:64:17:00:db:2b:41:df:c4:b1:67:ec:fd:
                    43:ab:e7:1d:a4:fb:a7:7c:1e:8f:ff:f6:68:c2:d1:
                    e4:ec:86:07:c1:10:29:2d:2a:46:20:69:25:de:7f:
                    d7:f5:78:bc:06:d3:ad:f6:80:e5:38:52:88:f5:98:
                    1e:5b:ef:e6:0b:dc:93:36:8b:88:c1:f9:ed:6d:f0:
                    7e:d4:5d:cf:b4:df:55:29:d9:5e:3e:7d:68:3f:be:
                    e1:7d:67:ad:63:c3:e6:95:f2:63:8d:a6:60:7b:77:
                    db:ea:63:36:7e:6b:cc:5e:9d:cb:fb:0f:43:b1:8d:
                    a9:8b:b6:70:10:d5:b9:2b:ff:0c:92:57:34:e5:d6:
                    bd:9d:83:0c:98:49:f1:5a:ff:dd:64:92:7c:61:a5:
                    5d:4a:b7:c8:8c:e4:e9:ba:20:d7:e1:70:e2:35:df:
                    38:f8:3d:81:cf:9d:b7:cd:c1:ba:c7:ac:0c:55:c4:
                    23:cd:0a:2f:0c:85:23:33:1b:40:c6:65:53:9a:68:
                    35:1c:41:f8:f8:c7:f7:e7:d8:34:4e:25:ec:be:3b:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:29:72:74:86:8D:EB:90:8E:29:30:FF:1E:5E:09:D4:5B:8D:AA:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2932d1e0-02b7-3dce-9bbe-febab0acfe6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:f6:93:ad:44:ed:ab:b6:37:9f:d9:a2:d9:0a:c5:14:b4:57:
         f8:eb:1f:df:b8:59:6f:0f:c7:bd:4f:4e:7f:69:b5:a0:0e:80:
         cc:7b:5a:63:f1:63:28:3c:aa:e9:96:ca:fc:a0:34:b8:92:c2:
         0c:54:b1:15:37:a1:72:26:5b:17:78:74:81:8e:0d:de:b8:80:
         1e:ec:51:46:a0:f9:de:d0:d9:6d:78:32:4c:58:35:46:72:7f:
         3f:97:a6:30:e3:a0:d0:a9:40:da:98:84:6b:8e:85:a7:17:e7:
         89:0d:22:a1:a8:cd:2f:34:86:5a:01:76:5e:5d:f9:1e:ce:58:
         c0:3c:2a:e3:1d:3b:4f:7b:5b:e0:a9:57:5a:18:f5:09:5c:fd:
         c7:58:80:61:98:4b:cd:65:91:a1:84:db:0c:16:56:d6:d3:e0:
         0d:82:be:98:f7:d1:7b:f1:55:cf:0c:83:0d:fd:e7:55:1e:0b:
         ff:d2:b4:6d:78:b1:65:69:00:89:de:08:5a:7c:27:94:3d:6c:
         8d:15:43:b5:73:c6:28:65:ed:95:d5:4f:a4:99:92:09:dc:6c:
         84:98:02:57:76:84:ce:1e:83:01:50:4e:75:ce:73:8d:73:da:
         b8:a8:4e:6d:52:16:2f:f9:85:40:7f:c7:1d:11:0d:1d:1a:eb:
         50:8c:12:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6r/svNDXSeCebQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDgwMzAyMzU0MloXDTI1MTEwMTAyMzU0MlowLzEtMCsGA1UEAxMk
OWUwNDE0NDctODRjYi00M2FmLTlhZjktMzM1NDhmYWFhNGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppUyLijdWvARO8cF5Yd9NmChmCUA9HLF1SLE
DcuNrsD3+aoWTEDZWirke10hCXNkFwDbK0HfxLFn7P1Dq+cdpPunfB6P//ZowtHk
7IYHwRApLSpGIGkl3n/X9Xi8BtOt9oDlOFKI9ZgeW+/mC9yTNouIwfntbfB+1F3P
tN9VKdlePn1oP77hfWetY8PmlfJjjaZge3fb6mM2fmvMXp3L+w9DsY2pi7ZwENW5
K/8Mklc05da9nYMMmEnxWv/dZJJ8YaVdSrfIjOTpuiDX4XDiNd84+D2Bz523zcG6
x6wMVcQjzQovDIUjMxtAxmVTmmg1HEH4+Mf359g0TiXsvjuVXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIIpcnSGjeuQjikw/x5eCdRbjarDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjkzMmQxZTAtMDJiNy0z
ZGNlLTliYmUtZmViYWIwYWNmZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOKQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMD2k61E7au2N5/ZotkKxRS0V/jrH9+4WW8Px71PTn9ptaAOgMx7WmPx
Yyg8qumWyvygNLiSwgxUsRU3oXImWxd4dIGODd64gB7sUUag+d7Q2W14MkxYNUZy
fz+XpjDjoNCpQNqYhGuOhacX54kNIqGozS80hloBdl5d+R7OWMA8KuMdO097W+Cp
V1oY9Qlc/cdYgGGYS81lkaGE2wwWVtbT4A2Cvpj30XvxVc8Mgw3951UeC//StG14
sWVpAIneCFp8J5Q9bI0VQ7Vzxihl7ZXVT6SZkgncbISYAld2hM4egwFQTnXOc41z
2rioTm1SFi/5hUB/xx0RDR0a61CMEiY=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:26:57 2025 by rpki-client