Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/629df4aa-26d3-3389-ad5a-de5201771d41.roa
File:                     629df4aa-26d3-3389-ad5a-de5201771d41.roa (raw, json)
Hash identifier:          wNbNeOIDfZ2pw92tkruVkmdN6TEDK5I+3GDxPN3kfO8=
Subject key identifier:   1C:4B:DA:4D:04:88:F8:DF:18:68:7C:B8:AF:B8:B2:CB:B5:F5:09:DB
Certificate issuer:       /CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
Certificate serial:       010D0C9F4328584AC2E0D744ECE67F474D7B2580
Authority key identifier: E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/629df4aa-26d3-3389-ad5a-de5201771d41.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     6128
IP address blocks:        161.129.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:d7:44:ec:e6:7f:47:4d:7b:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=3ea008e6-3329-4f92-890c-bddd22098d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:96:82:b1:42:4b:9f:03:fd:ef:0c:10:c5:c6:
                    cf:d2:47:13:26:11:49:9a:0f:80:a5:9d:c8:9e:21:
                    9b:e2:4d:4c:8d:d9:36:9a:53:98:cc:25:54:36:62:
                    7d:74:fe:ca:4a:2e:97:d8:2e:44:e5:fd:7a:41:a9:
                    0a:af:2c:b7:52:dc:91:9a:9d:a8:0a:c1:9c:86:33:
                    22:3b:9e:58:4e:21:ba:27:ea:34:76:d2:ac:c1:37:
                    c4:73:76:57:b1:26:51:33:6f:2b:26:db:a7:fd:1a:
                    05:fa:f1:0f:d3:2a:83:55:b7:1b:c4:c7:2e:e1:06:
                    0e:08:25:94:cc:0d:56:af:f3:c7:1c:3b:a3:e3:8d:
                    c8:ea:7a:3b:fc:05:6b:f4:2d:21:35:44:2f:12:60:
                    1d:6a:0d:1c:aa:30:aa:05:b6:b7:3b:18:78:88:78:
                    fa:de:a1:66:ea:a3:c1:e1:7b:64:fd:ba:72:58:1b:
                    9c:31:39:69:24:e9:39:47:f9:22:6a:07:44:6d:97:
                    38:02:32:c9:40:76:82:25:f9:27:c3:34:57:c7:e2:
                    03:c4:4e:f5:c4:31:c9:0b:df:9e:18:b5:9f:ef:91:
                    70:47:91:40:77:04:af:52:4a:29:40:d7:66:35:ff:
                    0b:c8:d9:43:42:66:ba:f0:45:71:5f:8f:de:1d:f6:
                    be:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4B:DA:4D:04:88:F8:DF:18:68:7C:B8:AF:B8:B2:CB:B5:F5:09:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/629df4aa-26d3-3389-ad5a-de5201771d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl

            X509v3 Authority Key Identifier:
                keyid:E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:ea:ee:26:46:03:cf:72:bf:e0:1e:10:a0:25:99:85:6f:81:
         7e:28:3e:b7:3e:cc:08:60:c7:5f:1e:7c:67:eb:5b:7f:9a:f8:
         56:c8:c0:4c:4e:99:c8:9f:25:da:06:4a:6e:b5:33:86:14:9e:
         f6:b8:fc:4d:bb:b1:f7:41:25:55:71:98:28:61:7a:6a:da:0e:
         11:88:76:3b:19:af:05:58:70:a7:c9:c7:38:e9:9b:4d:f0:94:
         70:57:94:63:e4:34:e6:09:9d:ca:f5:12:08:a9:f6:1f:a3:47:
         32:36:d2:f5:bb:e7:20:92:e4:35:5d:4f:d4:82:48:fa:fb:6d:
         f9:c2:9c:a3:90:e1:6e:d5:1d:ce:de:89:26:66:4e:b1:2b:e4:
         f7:0e:5f:a6:42:52:f7:e9:b4:38:11:64:57:17:60:0b:12:bc:
         f7:c3:0e:05:24:f1:e1:95:bf:bf:be:1e:e9:02:e6:c2:4c:1e:
         26:9e:11:a2:ea:12:bd:eb:38:ce:b2:f3:ac:46:1d:27:9d:6d:
         0b:40:04:19:e5:ad:1a:d3:4f:4a:19:5b:73:f2:e3:29:b4:b4:
         7d:c5:31:27:6b:b9:bf:70:73:a3:97:0d:d0:81:ee:ed:7e:e7:
         1c:c0:73:36:3d:f2:c6:b2:7f:9a:ac:52:11:48:ff:17:33:0a:
         e2:f9:78:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4NdE7OZ/R017JYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUzNzlkZWUtNTU1Ni00MmI0LThiOGQtNjNkYmZhZjRm
MGVkMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
M2VhMDA4ZTYtMzMyOS00ZjkyLTg5MGMtYmRkZDIyMDk4ZDQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5aCsUJLnwP97wwQxcbP0kcTJhFJmg+ApZ3I
niGb4k1Mjdk2mlOYzCVUNmJ9dP7KSi6X2C5E5f16QakKryy3UtyRmp2oCsGchjMi
O55YTiG6J+o0dtKswTfEc3ZXsSZRM28rJtun/RoF+vEP0yqDVbcbxMcu4QYOCCWU
zA1Wr/PHHDuj443I6no7/AVr9C0hNUQvEmAdag0cqjCqBba3Oxh4iHj63qFm6qPB
4Xtk/bpyWBucMTlpJOk5R/kiagdEbZc4AjLJQHaCJfknwzRXx+IDxE71xDHJC9+e
GLWf75FwR5FAdwSvUkopQNdmNf8LyNlDQma68EVxX4/eHfa+IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBxL2k0EiPjfGGh8uK+4ssu19QnbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTM3
OWRlZS01NTU2LTQyYjQtOGI4ZC02M2RiZmFmNGYwZWQvNjI5ZGY0YWEtMjZkMy0z
Mzg5LWFkNWEtZGU1MjAxNzcxZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmUzNzlkZWUtNTU1Ni00MmI0LThi
OGQtNjNkYmZhZjRmMGVkLzZlMzc5ZGVlLTU1NTYtNDJiNC04YjhkLTYzZGJmYWY0
ZjBlZC5jcmwwHwYDVR0jBBgwFoAU6ZuIwn9yDKts61oS7GF5pd5ThCIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTM3OWRlZS01NTU2LTQyYjQtOGI4ZC02M2Ri
ZmFmNGYwZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoYG4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK/q7iZGA89yv+AeEKAlmYVvgX4oPrc+zAhgx18efGfrW3+a+FbIwExO
mcifJdoGSm61M4YUnva4/E27sfdBJVVxmChhemraDhGIdjsZrwVYcKfJxzjpm03w
lHBXlGPkNOYJncr1Egip9h+jRzI20vW75yCS5DVdT9SCSPr7bfnCnKOQ4W7VHc7e
iSZmTrEr5PcOX6ZCUvfptDgRZFcXYAsSvPfDDgUk8eGVv7++HukC5sJMHiaeEaLq
Er3rOM6y86xGHSedbQtABBnlrRrTT0oZW3Py4ym0tH3FMSdrub9wc6OXDdCB7u1+
5xzAczY98sayf5qsUhFI/xczCuL5eAg=
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:12:09 2025 by rpki-client