Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/42884e54-6fb3-3b04-b1c9-dc63e1917ea7.roa
File:                     42884e54-6fb3-3b04-b1c9-dc63e1917ea7.roa (raw, json)
Hash identifier:          rcIw2Es2g6EurrtblXB0IxTh6PDGY625x6GtMkwdZww=
Subject key identifier:   22:14:72:D9:B2:BE:2C:1C:59:40:85:F9:7A:E3:B8:17:78:85:37:FE
Certificate issuer:       /CN=48912ebd-72b7-4f0d-a6bc-40bc4403bce9
Certificate serial:       010D0C9F4328584ABD4B9159A383E349EA95B9C0
Authority key identifier: CD:5A:71:52:E4:D8:1E:47:EB:4F:86:EE:47:2F:5C:EB:73:6C:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/42884e54-6fb3-3b04-b1c9-dc63e1917ea7.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     36127
IP address blocks:        134.195.52.0/23 maxlen: 24
                          2602:805:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:91:59:a3:83:e3:49:ea:95:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48912ebd-72b7-4f0d-a6bc-40bc4403bce9
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=a90a08cd-bcf2-4019-8151-f27644c254e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ed:aa:08:c9:62:bb:84:81:fa:c4:12:4f:d6:
                    94:56:4a:19:24:7c:0c:00:fb:f6:bf:f4:29:5f:35:
                    9e:6c:45:b4:e2:d1:7b:bd:ae:c6:8f:47:1d:ca:8d:
                    51:85:72:ed:62:b0:4d:39:d2:c6:18:b9:50:f7:ab:
                    1f:4d:1b:24:47:7e:c2:cf:b8:d3:0b:1d:8c:1c:84:
                    47:3a:8d:f7:93:ee:36:86:7f:60:c9:3b:2d:bf:56:
                    7b:9e:bc:4e:a5:68:7e:11:d0:4f:e6:3a:77:32:9d:
                    84:b2:e3:b6:3b:58:8e:75:4a:4e:ff:26:31:32:e1:
                    0d:fd:01:53:4e:49:7d:5f:c9:be:90:da:28:4e:70:
                    a0:56:a5:c7:0c:f5:d7:41:3d:51:34:a3:3a:b9:31:
                    a8:7c:57:db:0d:4d:15:8d:0a:e1:e2:1b:80:7e:9f:
                    8b:a6:72:08:ea:bb:20:42:19:63:72:0b:b0:46:8f:
                    f1:db:cb:1d:7b:71:b3:aa:ff:dc:35:ed:59:94:80:
                    c6:fb:e9:77:8b:59:43:c8:8c:58:4a:14:54:89:a5:
                    f6:47:ac:b4:17:56:f1:08:ec:04:e8:c3:91:12:6b:
                    fa:8b:f4:f7:4c:c3:fe:d7:5c:1e:24:34:3e:01:bb:
                    e5:72:87:f3:e0:d4:43:13:4f:5e:aa:0f:07:53:4e:
                    2b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:14:72:D9:B2:BE:2C:1C:59:40:85:F9:7A:E3:B8:17:78:85:37:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/42884e54-6fb3-3b04-b1c9-dc63e1917ea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:5A:71:52:E4:D8:1E:47:EB:4F:86:EE:47:2F:5C:EB:73:6C:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.52.0/23
                IPv6:
                  2602:805:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5b:7c:46:26:7c:18:07:42:97:ce:e9:a6:82:79:ae:49:3e:
         2d:2c:63:ed:ef:10:fd:f7:37:73:d5:c9:66:75:a9:22:09:7a:
         93:bc:df:74:b5:3d:6c:21:3b:6a:d0:8f:40:db:6d:49:cf:bd:
         6c:02:88:9d:de:1b:98:89:e4:d6:ad:30:8b:50:22:ff:b1:92:
         4b:63:35:e6:88:f4:4d:22:ad:d0:19:f4:54:61:72:7f:60:2f:
         6d:70:fe:ce:c1:a1:fb:d2:aa:c9:9e:bb:da:8b:25:e2:ae:45:
         18:57:48:be:0c:b0:2e:93:e1:53:2f:9c:26:72:cc:77:f4:d8:
         10:0c:a0:ff:0b:28:87:a5:52:c0:69:f6:99:0c:5a:d3:13:40:
         5c:31:27:25:ee:bc:ba:e8:ce:51:40:05:22:71:f9:e6:4c:27:
         70:f6:19:59:3f:4a:2a:bf:d3:9a:31:bb:d1:6c:56:9a:02:d7:
         34:ba:5d:20:99:b3:2f:4f:e8:10:74:e4:90:1b:b6:84:6f:31:
         32:6e:d9:03:b3:f7:08:c7:43:03:5e:f5:b7:f1:15:68:e2:20:
         44:0d:ec:36:d2:0b:28:e6:e5:87:bc:66:53:c3:01:bc:9c:93:
         38:9f:b7:f2:57:33:c4:2f:3b:7c:55:b7:da:c0:f4:f8:dc:7b:
         ba:69:94:45
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEq9S5FZo4PjSeqVucAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDg5MTJlYmQtNzJiNy00ZjBkLWE2YmMtNDBiYzQ0MDNi
Y2U5MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
YTkwYTA4Y2QtYmNmMi00MDE5LTgxNTEtZjI3NjQ0YzI1NGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu2qCMliu4SB+sQST9aUVkoZJHwMAPv2v/Qp
XzWebEW04tF7va7Gj0cdyo1RhXLtYrBNOdLGGLlQ96sfTRskR37Cz7jTCx2MHIRH
Oo33k+42hn9gyTstv1Z7nrxOpWh+EdBP5jp3Mp2EsuO2O1iOdUpO/yYxMuEN/QFT
Tkl9X8m+kNooTnCgVqXHDPXXQT1RNKM6uTGofFfbDU0VjQrh4huAfp+LpnII6rsg
QhljcguwRo/x28sde3Gzqv/cNe1ZlIDG++l3i1lDyIxYShRUiaX2R6y0F1bxCOwE
6MOREmv6i/T3TMP+11weJDQ+Abvlcofz4NRDE09eqg8HU04rOwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFCIUctmyviwcWUCF+XrjuBd4hTf+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODkx
MmViZC03MmI3LTRmMGQtYTZiYy00MGJjNDQwM2JjZTkvNDI4ODRlNTQtNmZiMy0z
YjA0LWIxYzktZGM2M2UxOTE3ZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDg5MTJlYmQtNzJiNy00ZjBkLWE2
YmMtNDBiYzQ0MDNiY2U5LzQ4OTEyZWJkLTcyYjctNGYwZC1hNmJjLTQwYmM0NDAz
YmNlOS5jcmwwHwYDVR0jBBgwFoAUzVpxUuTYHkfrT4buRy9c63NsyKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODkxMmViZC03MmI3LTRmMGQtYTZiYy00MGJj
NDQwM2JjZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBhsM0MA8E
AgACMAkDBwQmAggFYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWlt8RiZ8GAdCl87ppoJ5rkk+LSxj7e8Q
/fc3c9XJZnWpIgl6k7zfdLU9bCE7atCPQNttSc+9bAKInd4bmInk1q0wi1Ai/7GS
S2M15oj0TSKt0Bn0VGFyf2AvbXD+zsGh+9KqyZ672osl4q5FGFdIvgywLpPhUy+c
JnLMd/TYEAyg/wsoh6VSwGn2mQxa0xNAXDEnJe68uujOUUAFInH55kwncPYZWT9K
Kr/TmjG70WxWmgLXNLpdIJmzL0/oEHTkkBu2hG8xMm7ZA7P3CMdDA171t/EVaOIg
RA3sNtILKOblh7xmU8MBvJyTOJ+38lczxC87fFW32sD0+Nx7ummURQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:28 2025 by rpki-client