Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ad5eb1ae-4706-37c1-96c9-6ffc33464a42.roa
File:                     ad5eb1ae-4706-37c1-96c9-6ffc33464a42.roa (raw, json)
Hash identifier:          o2JCmHuOgCFNHDgwzk6XDwEHS53KPnKB7bHk99xvP/c=
Subject key identifier:   C3:5B:87:DD:72:46:67:AC:8A:E9:54:8B:77:22:1D:D4:F6:6C:FE:30
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB0039A062CFB3716408100
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ad5eb1ae-4706-37c1-96c9-6ffc33464a42.roa
Signing time:             Sun 03 Aug 2025 02:35:46 +0000
ROA not before:           Sun 03 Aug 2025 02:35:46 +0000
ROA not after:            Sat 01 Nov 2025 02:35:46 +0000
asID:                     53813
IP address blocks:        165.225.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:03:9a:06:2c:fb:37:16:40:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:46 2025 GMT
            Not After : Nov  1 02:35:46 2025 GMT
        Subject: CN=44bc5c40-8026-4016-bc53-3503e35b175c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8b:71:c4:55:e9:a8:06:70:7c:94:d4:c3:10:
                    56:7b:5f:3d:de:12:3f:c1:a0:8a:98:4c:60:d8:2c:
                    82:fb:b1:d3:6d:dc:57:7f:df:aa:8a:62:65:6e:76:
                    05:5c:8b:16:e8:c1:68:c9:68:80:49:57:26:be:0e:
                    b3:af:f4:d7:60:86:2e:7f:34:39:8f:7b:fd:68:27:
                    dc:88:ae:b1:1f:08:8b:8c:c6:81:21:d0:b2:37:0f:
                    e3:10:7d:d8:b9:0f:93:57:bb:89:b1:f5:27:aa:b2:
                    5a:7d:73:3b:f9:3e:3c:51:73:9c:67:10:ad:e5:4a:
                    48:38:17:a1:7b:76:8f:00:90:c3:82:78:8d:a3:09:
                    de:22:3a:82:53:71:75:7d:bb:7a:45:d1:b0:7a:df:
                    d5:50:83:9a:4b:e3:d0:53:e3:b7:10:d1:93:7f:fc:
                    63:3a:c2:6e:cd:f4:ef:cf:4b:8d:22:9f:46:ed:62:
                    22:95:47:21:8e:45:0a:9a:7b:d1:c0:03:7c:30:9d:
                    8c:61:48:4e:0e:c4:e4:06:33:00:4e:2f:34:9d:94:
                    a0:0c:37:9b:7f:06:58:c3:fd:43:fe:4c:6d:45:f7:
                    0c:b1:a8:ab:64:77:9b:1e:68:07:07:61:2e:64:b8:
                    8a:0e:0b:49:30:de:82:6e:bf:48:69:6d:28:ac:75:
                    ee:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5B:87:DD:72:46:67:AC:8A:E9:54:8B:77:22:1D:D4:F6:6C:FE:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ad5eb1ae-4706-37c1-96c9-6ffc33464a42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:36:9b:e7:81:7b:53:69:89:20:00:fe:c1:c7:5a:4e:9b:18:
         70:e7:67:0a:22:d6:bd:48:73:f1:36:26:f3:a0:7b:e5:03:eb:
         b1:bd:9e:09:58:dd:ea:f5:48:e2:0a:73:38:e0:a4:32:e2:61:
         f3:6e:52:55:5b:22:b7:bc:01:2b:e9:d8:20:56:d9:48:fb:28:
         27:50:41:50:28:76:16:82:c4:59:5d:dd:18:79:09:47:52:a5:
         40:dd:f5:68:d3:cb:30:b7:c7:50:a0:54:d0:ed:98:1c:ed:bc:
         29:58:e0:b7:f4:7b:93:ef:3b:e3:27:1e:87:33:65:57:ef:0f:
         69:3a:8d:01:a9:ae:b0:74:3e:26:90:a0:14:dc:9c:05:e3:de:
         e6:45:cd:d2:8b:d9:95:d1:c7:58:5e:7c:ad:a4:5b:67:42:fc:
         7e:89:f7:cb:59:8d:47:3a:08:de:dd:94:d4:86:da:a9:75:aa:
         9a:9b:81:64:6b:ee:b0:c9:97:52:42:66:bd:0f:6c:59:cc:ba:
         08:b9:3d:4c:fe:48:c2:7f:bd:ec:99:be:c9:6e:7e:11:47:5d:
         ae:8d:91:d3:19:cd:f9:51:38:53:37:d3:92:1b:39:1c:15:37:
         b2:33:6a:9d:7e:d4:18:ae:06:65:b9:c6:25:5e:7d:f5:b8:2d:
         96:7f:1a:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAOaBiz7NxZAgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDgwMzAyMzU0NloXDTI1MTEwMTAyMzU0NlowLzEtMCsGA1UEAxMk
NDRiYzVjNDAtODAyNi00MDE2LWJjNTMtMzUwM2UzNWIxNzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34txxFXpqAZwfJTUwxBWe1893hI/waCKmExg
2CyC+7HTbdxXf9+qimJlbnYFXIsW6MFoyWiASVcmvg6zr/TXYIYufzQ5j3v9aCfc
iK6xHwiLjMaBIdCyNw/jEH3YuQ+TV7uJsfUnqrJafXM7+T48UXOcZxCt5UpIOBeh
e3aPAJDDgniNowneIjqCU3F1fbt6RdGwet/VUIOaS+PQU+O3ENGTf/xjOsJuzfTv
z0uNIp9G7WIilUchjkUKmnvRwAN8MJ2MYUhODsTkBjMATi80nZSgDDebfwZYw/1D
/kxtRfcMsairZHebHmgHB2EuZLiKDgtJMN6Cbr9IaW0orHXuCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNbh91yRmesiulUi3ciHdT2bP4wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYWQ1ZWIxYWUtNDcwNi0z
N2MxLTk2YzktNmZmYzMzNDY0YTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeFqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADU2m+eBe1NpiSAA/sHHWk6bGHDnZwoi1r1Ic/E2JvOge+UD67G9nglY
3er1SOIKczjgpDLiYfNuUlVbIre8ASvp2CBW2Uj7KCdQQVAodhaCxFld3Rh5CUdS
pUDd9WjTyzC3x1CgVNDtmBztvClY4Lf0e5PvO+MnHoczZVfvD2k6jQGprrB0PiaQ
oBTcnAXj3uZFzdKL2ZXRx1hefK2kW2dC/H6J98tZjUc6CN7dlNSG2ql1qpqbgWRr
7rDJl1JCZr0PbFnMugi5PUz+SMJ/veyZvslufhFHXa6NkdMZzflROFM305IbORwV
N7Izap1+1BiuBmW5xiVeffW4LZZ/Gr4=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:41 2025 by rpki-client