Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dada4ca2-7547-3d20-b24b-d2ae63c578f0.roa
File:                     dada4ca2-7547-3d20-b24b-d2ae63c578f0.roa (raw, json)
Hash identifier:          KbIRjuLj24hNh+jPBhphDrtmvVN+z/tH6UXC6FbBTes=
Subject key identifier:   A5:56:10:8F:21:CE:E4:E5:55:32:8D:B9:A6:EC:22:90:96:73:80:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED56A6EA974A5B6F1C8380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dada4ca2-7547-3d20-b24b-d2ae63c578f0.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        71.238.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:56:a6:ea:97:4a:5b:6f:1c:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=47df85aa-7b10-449f-842e-6991b7e6adbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9a:9f:bc:6d:02:66:51:d3:12:25:ab:6c:20:
                    e2:d7:73:31:b9:85:d2:6c:31:e2:61:14:f7:35:78:
                    3c:ed:2c:ef:65:f0:60:e2:87:e1:5b:68:c2:d4:53:
                    fa:1d:1d:bd:ba:c9:b5:d4:d5:2a:8f:1f:23:26:81:
                    96:35:3c:74:94:58:2a:d4:d5:9b:ac:c6:b0:67:9a:
                    de:6e:7f:d6:c6:f0:69:7c:b5:2b:d7:b9:26:65:ef:
                    3b:5b:21:7a:5d:c2:ec:bc:f0:a8:91:de:10:1f:14:
                    1c:4f:dc:31:22:a8:78:04:5b:9b:54:3c:25:37:be:
                    14:9e:d7:5f:01:b4:d0:ef:df:ad:ec:e3:0d:10:2c:
                    73:f5:6a:8f:ac:08:e3:09:4a:0a:f6:1d:d5:b2:ae:
                    82:68:ef:a0:88:ea:3d:95:95:12:cd:56:03:d7:62:
                    ea:05:0d:f3:3d:42:13:74:f2:bc:a0:73:a2:52:cb:
                    97:2b:fb:73:d4:8d:4b:4a:e9:fb:76:d2:31:fe:b8:
                    12:c0:f5:ca:d4:bc:d3:58:96:3d:14:7c:41:b1:4b:
                    90:5c:25:fb:9e:09:76:f2:11:82:9a:41:49:0d:a0:
                    05:ed:c3:6b:51:24:54:39:69:a5:9c:73:23:66:30:
                    20:ac:44:f9:d5:d6:61:18:55:cf:ae:07:5a:1a:9f:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:56:10:8F:21:CE:E4:E5:55:32:8D:B9:A6:EC:22:90:96:73:80:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dada4ca2-7547-3d20-b24b-d2ae63c578f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.238.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a7:28:85:85:63:a6:98:f2:d3:54:5c:c6:bc:40:0d:51:3c:
         56:56:45:ce:db:5a:36:36:2d:ec:81:61:91:38:a2:d9:8d:ef:
         58:ed:b3:cd:5c:25:25:a9:92:9f:02:84:fc:63:56:17:c9:82:
         b4:e5:7b:7b:3a:73:1f:ff:1a:94:9d:cb:d6:cd:5e:d5:79:aa:
         b2:4e:4e:63:e3:de:d2:72:13:93:31:33:8e:4e:43:0c:db:d3:
         8a:f3:fc:a2:95:34:18:f1:bd:1d:4c:05:5f:49:43:94:2a:db:
         4e:dd:7d:98:5f:11:5b:58:fb:17:f9:6b:5b:8e:fd:b5:1d:59:
         be:82:3d:74:e4:44:2d:ce:ae:c5:d0:60:bc:4d:d9:c7:e2:ee:
         99:78:89:82:c8:93:b0:37:00:b2:97:e5:f8:bd:ad:2f:b0:b2:
         49:24:5a:56:93:09:45:42:14:f5:6c:86:6f:42:07:06:9b:a0:
         24:3f:58:6b:82:fe:67:9a:05:c0:59:4e:33:11:39:6d:f5:72:
         c8:31:78:b0:01:0a:8b:37:92:12:90:a7:26:0e:57:e9:72:48:
         8e:47:44:ed:59:1d:aa:14:97:cc:ab:a4:63:7b:b0:83:85:dd:
         70:8c:9a:b2:db:b3:02:75:03:e0:5c:f6:9e:56:30:61:26:0c:
         36:aa:69:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07Vam6pdKW28cg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
NDdkZjg1YWEtN2IxMC00NDlmLTg0MmUtNjk5MWI3ZTZhZGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZqfvG0CZlHTEiWrbCDi13MxuYXSbDHiYRT3
NXg87SzvZfBg4ofhW2jC1FP6HR29usm11NUqjx8jJoGWNTx0lFgq1NWbrMawZ5re
bn/WxvBpfLUr17kmZe87WyF6XcLsvPCokd4QHxQcT9wxIqh4BFubVDwlN74Untdf
AbTQ79+t7OMNECxz9WqPrAjjCUoK9h3Vsq6CaO+giOo9lZUSzVYD12LqBQ3zPUIT
dPK8oHOiUsuXK/tz1I1LSun7dtIx/rgSwPXK1LzTWJY9FHxBsUuQXCX7ngl28hGC
mkFJDaAF7cNrUSRUOWmlnHMjZjAgrET51dZhGFXPrgdaGp/X9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKVWEI8hzuTlVTKNuabsIpCWc4AgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGFkYTRjYTItNzU0Ny0z
ZDIwLWIyNGItZDJhZTYzYzU3OGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+5kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+nKIWFY6aY8tNUXMa8QA1RPFZWRc7bWjY2LeyBYZE4otmN71jts81c
JSWpkp8ChPxjVhfJgrTle3s6cx//GpSdy9bNXtV5qrJOTmPj3tJyE5MxM45OQwzb
04rz/KKVNBjxvR1MBV9JQ5Qq207dfZhfEVtY+xf5a1uO/bUdWb6CPXTkRC3OrsXQ
YLxN2cfi7pl4iYLIk7A3ALKX5fi9rS+wskkkWlaTCUVCFPVshm9CBwaboCQ/WGuC
/meaBcBZTjMROW31csgxeLABCos3khKQpyYOV+lySI5HRO1ZHaoUl8yrpGN7sIOF
3XCMmrLbswJ1A+Bc9p5WMGEmDDaqaew=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:24 2025 by rpki-client