Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9054f314-75fe-3ae1-bb48-7b926275e87d.roa
File:                     9054f314-75fe-3ae1-bb48-7b926275e87d.roa (raw, json)
Hash identifier:          3m8bBWdStpSZ6O0A1mOSBZLyqOZLRjzqhRx6M3xww9E=
Subject key identifier:   3F:30:63:24:5A:E0:5A:A3:FE:D4:BD:C0:FB:F8:E1:B6:76:8F:15:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC7D165D1D69D30BA835C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9054f314-75fe-3ae1-bb48-7b926275e87d.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        107.5.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:7d:16:5d:1d:69:d3:0b:a8:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=a11e03bd-d22c-4446-b771-e81eb800424d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c9:ac:04:61:fb:a2:7c:52:2f:e0:15:e4:87:
                    4c:d3:f0:f2:e8:1e:ad:cc:22:71:8f:f6:9c:63:3d:
                    09:1a:0c:da:d8:a8:e6:85:c6:a2:65:aa:bb:98:7f:
                    36:e4:8b:4c:c8:e3:6a:4f:2d:54:d8:41:10:7d:a5:
                    56:5c:7d:56:c2:c0:9a:8d:82:3d:82:8d:87:53:87:
                    26:4e:33:a7:62:b3:95:77:a5:e8:5d:e6:d4:bd:27:
                    a4:22:8b:58:b9:02:30:a3:35:6c:65:20:76:2b:ce:
                    e2:50:f7:98:3b:7b:4c:40:fd:ef:ae:9d:37:6d:72:
                    5a:53:f6:ca:c8:23:04:eb:84:46:3e:be:40:fd:fa:
                    3a:57:6d:bb:df:62:98:b1:89:1b:ae:7e:ec:6c:76:
                    98:59:bb:37:8d:d8:7a:1b:8d:a0:3e:f1:23:cf:82:
                    59:0b:3d:3c:45:10:c8:6b:4c:61:3c:7c:76:df:36:
                    25:56:95:a4:41:0d:11:bb:f2:5e:29:be:c9:01:e9:
                    17:3a:3f:6a:97:f0:c2:74:0c:86:58:9e:cf:99:4e:
                    c9:3a:ef:e2:de:44:cc:2a:48:7c:f8:f8:d3:2d:47:
                    e9:5f:20:6e:96:a8:cf:48:92:1a:9a:17:af:bc:c4:
                    09:49:91:0d:ca:a8:87:c8:53:04:59:a2:86:1e:51:
                    c0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:30:63:24:5A:E0:5A:A3:FE:D4:BD:C0:FB:F8:E1:B6:76:8F:15:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9054f314-75fe-3ae1-bb48-7b926275e87d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.5.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:65:62:85:12:54:7d:e5:19:a9:76:58:ce:e5:d8:75:bb:2b:
         a2:37:78:d0:59:2e:04:31:d8:f0:ac:93:0c:65:a7:2b:e8:65:
         9a:9a:00:2b:a9:26:ac:6c:15:4f:d5:e6:55:90:9f:6c:21:37:
         35:be:bd:da:ed:57:06:7b:c0:10:7d:a3:61:5b:e7:aa:73:5e:
         4f:c6:49:31:3d:0f:5b:ea:0c:82:87:f3:0f:14:49:ed:72:b6:
         ce:76:b6:87:f7:88:27:7c:aa:89:bb:60:3e:c3:e1:38:32:57:
         43:81:5f:73:47:25:9e:dc:62:aa:ae:c7:9d:67:8a:e1:44:0b:
         ff:53:d8:fa:2f:40:1c:0f:ef:c4:de:60:17:2c:b4:20:c5:78:
         53:50:7d:b5:6f:0f:d3:6a:66:da:6e:85:37:19:a6:b9:54:c2:
         39:db:72:61:0c:fa:ed:32:95:8f:d3:ac:1c:65:71:e0:1b:c9:
         0e:5e:90:6d:88:28:77:3e:2a:07:6c:2c:9b:50:32:07:77:bd:
         e5:38:36:ae:b6:ce:14:36:25:7d:4a:a6:ba:86:f9:b8:0e:cd:
         ed:e7:c9:28:d6:10:9c:2f:af:fc:f3:8c:ad:3f:27:eb:de:a1:
         10:c9:ba:a0:8d:85:dc:18:86:9e:87:f5:36:a2:f1:60:28:a4:
         19:ec:ef:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07H0WXR1p0wuoNcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
YTExZTAzYmQtZDIyYy00NDQ2LWI3NzEtZTgxZWI4MDA0MjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsmsBGH7onxSL+AV5IdM0/Dy6B6tzCJxj/ac
Yz0JGgza2KjmhcaiZaq7mH825ItMyONqTy1U2EEQfaVWXH1WwsCajYI9go2HU4cm
TjOnYrOVd6XoXebUvSekIotYuQIwozVsZSB2K87iUPeYO3tMQP3vrp03bXJaU/bK
yCME64RGPr5A/fo6V22732KYsYkbrn7sbHaYWbs3jdh6G42gPvEjz4JZCz08RRDI
a0xhPHx23zYlVpWkQQ0Ru/JeKb7JAekXOj9ql/DCdAyGWJ7PmU7JOu/i3kTMKkh8
+PjTLUfpXyBulqjPSJIamhevvMQJSZENyqiHyFMEWaKGHlHAvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD8wYyRa4Fqj/tS9wPv44bZ2jxXLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTA1NGYzMTQtNzVmZS0z
YWUxLWJiNDgtN2I5MjYyNzVlODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRlYoUSVH3lGal2WM7l2HW7K6I3eNBZLgQx2PCskwxlpyvoZZqaACup
JqxsFU/V5lWQn2whNzW+vdrtVwZ7wBB9o2Fb56pzXk/GSTE9D1vqDIKH8w8USe1y
ts52tof3iCd8qom7YD7D4TgyV0OBX3NHJZ7cYqqux51niuFEC/9T2PovQBwP78Te
YBcstCDFeFNQfbVvD9NqZtpuhTcZprlUwjnbcmEM+u0ylY/TrBxlceAbyQ5ekG2I
KHc+KgdsLJtQMgd3veU4Nq62zhQ2JX1KprqG+bgOze3nySjWEJwvr/zzjK0/J+ve
oRDJuqCNhdwYhp6H9Tai8WAopBns78Q=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:12:36 2025 by rpki-client