Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/1060af2e-9ce6-3930-9ec2-2d429ed8b239.roa
File:                     1060af2e-9ce6-3930-9ec2-2d429ed8b239.roa (raw, json)
Hash identifier:          J4rusggqOuscVfa/vhdr8N3dGQWxmljqMbHUtLdFdbE=
Subject key identifier:   39:44:1B:C1:B2:AD:6A:AF:11:F0:AB:85:F7:67:F9:36:5C:AA:E7:EA
Certificate issuer:       /CN=4bb89156-2bd6-49be-a0a3-c532a34922e6
Certificate serial:       010D0C9F4328584AA160CFBB047DA510267A5E80
Authority key identifier: D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/1060af2e-9ce6-3930-9ec2-2d429ed8b239.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        139.180.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:cf:bb:04:7d:a5:10:26:7a:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bb89156-2bd6-49be-a0a3-c532a34922e6
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=b9a49888-2ab6-486e-9c37-70fc4b08a991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:60:15:dc:be:5e:58:70:01:49:96:d9:b4:
                    2e:b2:65:30:b1:38:82:21:8e:01:b3:a7:04:4a:f5:
                    c8:85:18:65:f6:00:53:42:97:cb:a9:5f:fc:98:c8:
                    2a:7e:01:c3:6f:ee:a0:87:c0:e6:c3:48:9f:4b:f4:
                    85:fb:33:a2:67:ee:4a:40:df:81:ee:75:08:1a:b7:
                    74:21:1b:ba:16:93:ab:ec:2e:a8:ef:05:42:16:d5:
                    eb:d1:76:ad:5e:91:6a:05:e3:d0:2a:21:57:1a:bd:
                    9a:36:3c:da:99:32:43:d3:ef:70:a4:fa:77:01:9e:
                    cc:63:17:ed:4a:73:7f:6c:9c:76:5a:de:15:ec:b8:
                    f1:56:f0:0f:39:24:33:27:77:e1:de:a0:01:66:94:
                    df:84:97:42:25:ef:2d:d9:e3:02:32:17:52:a5:f0:
                    c6:46:3f:7b:04:3d:99:04:be:29:60:b9:0b:f1:04:
                    2f:c2:99:61:94:10:df:53:61:e5:52:62:b8:b9:b2:
                    7d:15:e7:1b:ef:f4:19:72:7c:6f:32:da:86:1a:9a:
                    f3:71:63:17:d6:d3:44:bc:b7:43:c6:23:51:57:51:
                    6c:bc:b9:53:df:92:ce:ce:ed:cf:bd:63:7e:58:a3:
                    56:4e:cb:10:d8:30:27:16:c8:b1:89:08:c7:e5:87:
                    d8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:44:1B:C1:B2:AD:6A:AF:11:F0:AB:85:F7:67:F9:36:5C:AA:E7:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/1060af2e-9ce6-3930-9ec2-2d429ed8b239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl

            X509v3 Authority Key Identifier:
                keyid:D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f5:6e:b4:c4:3a:ce:4a:dd:bd:8f:ae:37:24:83:f4:18:df:
         93:4d:2e:2e:b4:0a:74:a9:87:35:45:5d:22:3b:1b:91:b6:fc:
         5d:de:ea:0b:92:fd:ae:be:2f:5c:8e:03:59:fa:93:4f:a5:97:
         f3:1c:82:75:2b:3e:51:26:28:f5:53:88:2c:dc:7f:56:c2:94:
         72:94:78:57:4e:bd:13:db:18:8a:b8:61:8a:b0:a8:04:d7:07:
         86:1a:de:cc:e3:0e:b6:2a:34:17:10:ed:1f:ce:a9:6e:de:4f:
         be:e1:23:52:44:40:de:34:b4:31:99:3e:ed:49:3a:50:ef:ff:
         cc:ea:d7:7f:ff:c2:4e:91:1a:98:e8:b5:7c:ef:7f:3b:cd:e5:
         f1:11:51:59:0e:bd:48:ee:38:73:71:5d:33:f7:71:a3:21:36:
         da:62:51:df:9f:07:f2:45:69:04:9b:00:3b:dc:1e:70:dc:0c:
         5d:f6:28:e9:d1:38:bd:2a:64:fe:df:dc:3c:0c:2a:34:8c:c3:
         dd:76:f5:de:b5:79:13:f1:ff:6c:6c:42:99:4f:14:19:ac:fe:
         7a:e6:44:41:aa:ef:1c:bb:1a:b4:b4:44:bf:a0:a9:ab:2d:fc:
         0b:3c:45:00:10:d9:18:41:5d:e8:25:a3:2f:ba:bf:12:22:99:
         3b:96:30:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYM+7BH2lECZ6XoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJiODkxNTYtMmJkNi00OWJlLWEwYTMtYzUzMmEzNDky
MmU2MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
YjlhNDk4ODgtMmFiNi00ODZlLTljMzctNzBmYzRiMDhhOTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yFgFdy+XlhwAUmW2bQusmUwsTiCIY4Bs6cE
SvXIhRhl9gBTQpfLqV/8mMgqfgHDb+6gh8Dmw0ifS/SF+zOiZ+5KQN+B7nUIGrd0
IRu6FpOr7C6o7wVCFtXr0XatXpFqBePQKiFXGr2aNjzamTJD0+9wpPp3AZ7MYxft
SnN/bJx2Wt4V7LjxVvAPOSQzJ3fh3qABZpTfhJdCJe8t2eMCMhdSpfDGRj97BD2Z
BL4pYLkL8QQvwplhlBDfU2HlUmK4ubJ9Fecb7/QZcnxvMtqGGprzcWMX1tNEvLdD
xiNRV1FsvLlT35LOzu3PvWN+WKNWTssQ2DAnFsixiQjH5YfYLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDlEG8GyrWqvEfCrhfdn+TZcqufqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4
OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMyYTM0OTIyZTYvMTA2MGFmMmUtOWNlNi0z
OTMwLTllYzItMmQ0MjllZDhiMjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGJiODkxNTYtMmJkNi00OWJlLWEw
YTMtYzUzMmEzNDkyMmU2LzRiYjg5MTU2LTJiZDYtNDliZS1hMGEzLWM1MzJhMzQ5
MjJlNi5jcmwwHwYDVR0jBBgwFoAU11ernRiVAjwc5BddnSd5Ptco3fEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMy
YTM0OTIyZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7QfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAz1brTEOs5K3b2Prjckg/QY35NNLi60CnSphzVFXSI7G5G2/F3e6guS
/a6+L1yOA1n6k0+ll/McgnUrPlEmKPVTiCzcf1bClHKUeFdOvRPbGIq4YYqwqATX
B4Ya3szjDrYqNBcQ7R/OqW7eT77hI1JEQN40tDGZPu1JOlDv/8zq13//wk6RGpjo
tXzvfzvN5fERUVkOvUjuOHNxXTP3caMhNtpiUd+fB/JFaQSbADvcHnDcDF32KOnR
OL0qZP7f3DwMKjSMw9129d61eRPx/2xsQplPFBms/nrmREGq7xy7GrS0RL+gqast
/As8RQAQ2RhBXegloy+6vxIimTuWMH4=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:36 2025 by rpki-client