Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/484b2e51-e2e2-3603-b826-82fb71cd4ce7.roa
File:                     484b2e51-e2e2-3603-b826-82fb71cd4ce7.roa (raw, json)
Hash identifier:          /4h1zQnTV3SH/905d+tbFaQ7nI2uVBHf3S3uyKxBsXY=
Subject key identifier:   08:C6:7C:04:29:90:B7:34:52:25:CF:8D:6A:71:59:D7:5B:20:9F:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE8697C0FA1249D4EB72C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/484b2e51-e2e2-3603-b826-82fb71cd4ce7.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        76.139.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:86:97:c0:fa:12:49:d4:eb:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=91a73e42-e808-43e0-b640-b5d00b7aac9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:5c:9e:e5:4b:34:cf:2b:f9:8e:41:cf:a7:
                    83:c3:81:e5:36:94:a8:06:56:54:aa:ec:8d:a4:a4:
                    e1:d7:36:a3:81:dd:47:dc:d6:f0:2f:75:25:fc:a0:
                    26:b6:90:13:44:81:be:d6:71:5f:32:9c:0d:f6:ae:
                    b2:f5:2e:fa:68:a6:0d:71:38:57:a3:e7:f3:6b:0f:
                    d1:a7:3b:de:80:35:ae:97:a4:c2:86:3d:3a:a8:3b:
                    8e:c6:da:81:08:b5:54:d8:36:38:0d:b2:f9:d6:b5:
                    82:a9:dd:db:c6:ca:dd:53:50:07:95:7f:e4:67:9a:
                    47:99:ea:88:1c:e8:34:16:68:64:03:16:ff:9f:41:
                    6f:ff:7d:24:ea:4d:e9:a9:b5:8e:24:65:f4:5b:77:
                    ec:04:3e:15:e4:64:5a:96:ef:dc:59:bd:11:55:8a:
                    9a:8c:0a:78:08:16:6a:6f:2e:29:c5:dd:fe:75:39:
                    9c:df:d8:c1:7f:5e:35:4c:e5:46:d6:ee:ad:88:b2:
                    1c:83:b4:6d:89:9c:af:b5:84:f2:f0:08:5c:06:68:
                    fd:98:d9:f1:0a:33:6f:5b:fd:a5:14:65:5a:80:4c:
                    a0:2e:18:49:e5:b4:6f:b4:60:63:5e:9f:b6:1a:a3:
                    cc:6c:14:02:07:55:e1:7a:a6:07:ec:b7:77:fa:07:
                    b8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C6:7C:04:29:90:B7:34:52:25:CF:8D:6A:71:59:D7:5B:20:9F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/484b2e51-e2e2-3603-b826-82fb71cd4ce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.139.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:5f:ba:4b:7c:3c:e3:29:09:a4:bb:de:22:0e:84:cc:03:10:
         63:10:87:f2:7a:5f:61:7d:ce:f3:93:ea:34:fa:22:63:6a:f6:
         80:2e:51:3b:08:75:64:37:93:46:3a:4d:63:9e:eb:11:d0:de:
         61:86:7d:df:b2:4e:dd:fa:36:c1:5f:80:a3:f5:e9:5a:1c:29:
         c9:0c:95:4e:12:2f:be:90:1c:c7:01:9d:b7:2e:fd:92:06:b0:
         1b:85:95:cd:b7:14:82:dd:d4:6b:66:ab:8a:62:6c:5d:69:8a:
         f8:d5:1f:66:74:f3:43:69:de:53:7b:b1:cd:88:71:eb:ed:2a:
         82:c1:4e:f0:4e:ad:ef:d6:d4:7f:f2:13:ee:a7:1f:51:81:97:
         c1:7a:7a:f0:a2:da:eb:18:f2:ba:ac:4e:ca:bc:cc:fb:e7:3e:
         dd:da:47:a2:29:92:ef:f9:eb:10:d5:ab:c8:5e:ec:41:5b:ca:
         3b:5a:d9:4b:2a:a2:01:08:ed:19:e3:65:eb:00:11:a8:d5:c7:
         1e:ac:e4:f1:1a:40:11:69:0f:4e:2d:0c:47:8f:f7:0c:af:99:
         b8:e8:6d:02:52:b3:cc:87:82:42:9b:e8:bd:ce:80:35:9c:d8:
         44:a9:a9:ee:5f:6a:5f:db:47:1c:ac:b8:fb:6d:2d:cd:31:99:
         2d:53:ea:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07oaXwPoSSdTrcsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
OTFhNzNlNDItZTgwOC00M2UwLWI2NDAtYjVkMDBiN2FhYzliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3dcnuVLNM8r+Y5Bz6eDw4HlNpSoBlZUquyN
pKTh1zajgd1H3NbwL3Ul/KAmtpATRIG+1nFfMpwN9q6y9S76aKYNcThXo+fzaw/R
pzvegDWul6TChj06qDuOxtqBCLVU2DY4DbL51rWCqd3bxsrdU1AHlX/kZ5pHmeqI
HOg0FmhkAxb/n0Fv/30k6k3pqbWOJGX0W3fsBD4V5GRalu/cWb0RVYqajAp4CBZq
by4pxd3+dTmc39jBf141TOVG1u6tiLIcg7RtiZyvtYTy8AhcBmj9mNnxCjNvW/2l
FGVagEygLhhJ5bRvtGBjXp+2GqPMbBQCB1XheqYH7Ld3+ge4EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAjGfAQpkLc0UiXPjWpxWddbIJ+vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDg0YjJlNTEtZTJlMi0z
NjAzLWI4MjYtODJmYjcxY2Q0Y2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIvYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALVfukt8POMpCaS73iIOhMwDEGMQh/J6X2F9zvOT6jT6ImNq9oAuUTsI
dWQ3k0Y6TWOe6xHQ3mGGfd+yTt36NsFfgKP16VocKckMlU4SL76QHMcBnbcu/ZIG
sBuFlc23FILd1Gtmq4pibF1pivjVH2Z080Np3lN7sc2IcevtKoLBTvBOre/W1H/y
E+6nH1GBl8F6evCi2usY8rqsTsq8zPvnPt3aR6Ipku/56xDVq8he7EFbyjta2Usq
ogEI7RnjZesAEajVxx6s5PEaQBFpD04tDEeP9wyvmbjobQJSs8yHgkKb6L3OgDWc
2ESpqe5fal/bRxysuPttLc0xmS1T6qM=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:42:19 2025 by rpki-client