Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8d303a-d7a9-3ca4-a119-5035068afc46.roa
File:                     7e8d303a-d7a9-3ca4-a119-5035068afc46.roa (raw, json)
Hash identifier:          vmeV0Tb+FESpeh6WvRwnoLN/2mAM58GR2dXBl0DE3Jk=
Subject key identifier:   49:14:63:AF:1D:37:B8:93:3C:16:6E:B7:7E:A0:6F:D8:A6:46:F0:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EBD5AB477243D3DB81A918
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8d303a-d7a9-3ca4-a119-5035068afc46.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        24.2.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:d5:ab:47:72:43:d3:db:81:a9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=ed9129aa-ff24-4712-95aa-f89943d4bcfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:f4:4a:ba:08:92:5e:64:61:bc:28:0b:84:
                    4d:d6:9a:45:1e:7f:c4:c1:51:79:4f:4b:4a:9c:40:
                    83:22:6e:1b:06:b9:ed:03:1c:bb:54:20:dc:5c:c4:
                    be:cf:77:90:6a:09:bf:41:50:57:7e:39:d2:50:5b:
                    1d:f0:b1:bb:c6:86:02:6a:d7:ad:0b:55:b8:8d:24:
                    ed:03:e6:cf:71:1d:53:d4:16:5f:f2:5c:f0:9e:e4:
                    c7:d7:b4:61:a4:d0:75:d6:1b:17:e7:12:c5:b1:91:
                    55:09:4f:4b:5e:42:a8:bd:06:68:61:57:3b:b9:b0:
                    7d:82:63:64:9e:b2:ae:73:15:5d:24:c4:3e:f2:a8:
                    f8:3f:2d:09:65:cd:41:75:5f:6e:b0:43:02:cd:ac:
                    47:87:f1:85:b3:b8:98:66:2f:43:c8:72:bb:ad:46:
                    f8:27:31:8e:92:c3:7f:7b:82:e3:43:8f:fd:d3:bc:
                    3a:cf:95:64:f8:16:20:92:e8:eb:67:d0:05:dd:e8:
                    5d:4b:0a:20:e2:2a:db:92:4f:98:16:9e:75:0b:97:
                    56:09:fe:7a:f0:9c:d4:a1:56:8d:36:3b:e8:6e:0a:
                    23:4b:61:82:78:e3:4c:8a:dd:31:d3:05:07:74:49:
                    b9:fe:b9:e1:37:03:cc:e5:7d:25:3d:48:aa:4f:c9:
                    39:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:14:63:AF:1D:37:B8:93:3C:16:6E:B7:7E:A0:6F:D8:A6:46:F0:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8d303a-d7a9-3ca4-a119-5035068afc46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.2.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:3c:3f:84:e3:96:17:83:b9:5f:6a:6e:41:a1:46:df:a1:4f:
         66:51:f1:76:2c:0f:a1:12:1f:e9:44:66:ef:b1:d9:41:1f:4b:
         97:df:d3:0a:9b:27:18:02:97:67:54:c1:0e:d3:87:6b:06:20:
         8b:fa:b7:0f:23:e4:8f:fb:0b:50:2b:be:e5:e8:c4:cd:37:fb:
         d9:ec:9e:8a:67:86:1c:6f:06:08:e9:6a:e4:44:c1:2e:39:86:
         b0:bd:3a:f0:fc:2b:c8:a3:24:cb:ee:97:94:35:cc:11:a4:f6:
         11:8b:bd:e9:fc:bc:ec:e2:60:2e:d0:27:40:cb:37:f3:5f:62:
         9e:24:9e:ca:73:59:6f:a2:5d:c4:9a:c0:a8:e2:f6:39:13:ef:
         ee:b2:53:1c:ec:20:73:fa:74:52:84:9f:e2:38:9b:86:7f:6e:
         1e:2b:3f:bc:c0:ef:15:b5:3f:c7:79:33:79:67:74:64:7d:d5:
         c6:0e:17:9a:94:05:2f:9f:62:3c:d9:2d:c5:4e:7b:e7:56:b1:
         c0:98:d1:fa:cc:f8:47:48:ae:47:4c:dd:de:f8:a0:e6:45:45:
         dd:2c:9f:95:00:a5:46:00:18:9c:94:dd:fd:e1:6a:d3:97:ac:
         2a:e5:f0:9f:ac:e4:dd:a2:b2:80:72:84:7a:2a:c5:56:d0:7b:
         50:f5:0a:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq069WrR3JD09uBqRgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
ZWQ5MTI5YWEtZmYyNC00NzEyLTk1YWEtZjg5OTQzZDRiY2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcL0SroIkl5kYbwoC4RN1ppFHn/EwVF5T0tK
nECDIm4bBrntAxy7VCDcXMS+z3eQagm/QVBXfjnSUFsd8LG7xoYCatetC1W4jSTt
A+bPcR1T1BZf8lzwnuTH17RhpNB11hsX5xLFsZFVCU9LXkKovQZoYVc7ubB9gmNk
nrKucxVdJMQ+8qj4Py0JZc1BdV9usEMCzaxHh/GFs7iYZi9DyHK7rUb4JzGOksN/
e4LjQ4/907w6z5Vk+BYgkujrZ9AF3ehdSwog4irbkk+YFp51C5dWCf568JzUoVaN
NjvobgojS2GCeONMit0x0wUHdEm5/rnhNwPM5X0lPUiqT8k5ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkUY68dN7iTPBZut36gb9imRvB0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2U4ZDMwM2EtZDdhOS0z
Y2E0LWExMTktNTAzNTA2OGFmYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAK6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADk8P4TjlheDuV9qbkGhRt+hT2ZR8XYsD6ESH+lEZu+x2UEfS5ff0wqb
JxgCl2dUwQ7Th2sGIIv6tw8j5I/7C1ArvuXoxM03+9nsnopnhhxvBgjpauREwS45
hrC9OvD8K8ijJMvul5Q1zBGk9hGLven8vOziYC7QJ0DLN/NfYp4knspzWW+iXcSa
wKji9jkT7+6yUxzsIHP6dFKEn+I4m4Z/bh4rP7zA7xW1P8d5M3lndGR91cYOF5qU
BS+fYjzZLcVOe+dWscCY0frM+EdIrkdM3d74oOZFRd0sn5UApUYAGJyU3f3hatOX
rCrl8J+s5N2isoByhHoqxVbQe1D1CvQ=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:50 2025 by rpki-client