Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa
File:                     40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa (raw, json)
Hash identifier:          r6qYzdlirBq+eOiX/yc5g4IhV6EE/HVuk80xDsmGViM=
Subject key identifier:   8B:39:E7:5E:7A:D5:6E:44:10:5E:BB:42:D3:89:2E:18:52:9E:96:0A
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584A189544FA3BE66816DDE41800
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     1239
IP address blocks:        63.160.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:44:fa:3b:e6:68:16:dd:e4:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=76cd70be-d49c-4e08-829a-85f4c03f86b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:71:fe:ea:c8:e0:e5:bb:1d:df:00:79:2c:
                    c0:12:9d:0e:2d:7a:42:37:68:b9:91:b9:4f:6c:d6:
                    c1:8b:6e:46:2a:73:c0:1d:55:b8:2a:90:88:a6:01:
                    1e:ea:77:c7:b8:3b:95:02:f0:87:88:9e:be:c2:17:
                    aa:39:e5:4b:96:8e:d8:f9:d8:ee:11:2e:4a:64:4e:
                    dd:0e:7e:f9:f7:8f:4d:0f:78:a0:36:54:1f:a9:77:
                    56:66:1d:b4:d6:f2:12:99:e5:45:a2:14:73:70:63:
                    b7:c6:80:ef:a8:08:e3:3f:57:94:43:6a:9b:37:1e:
                    ab:cb:f8:3e:9c:7f:b8:7f:91:2f:a4:c8:82:cd:c6:
                    6e:23:8b:ec:12:7e:32:81:7b:55:08:00:29:c8:05:
                    85:22:5b:79:88:65:a5:5a:59:a9:14:6d:01:a4:2f:
                    8e:e0:ae:d3:fd:69:cc:f3:a7:76:43:f3:e0:a3:be:
                    a2:3d:6c:f5:8a:45:86:24:63:1d:13:09:51:0f:d3:
                    0b:a3:7e:e4:9d:f6:77:60:44:7e:45:97:14:f3:83:
                    29:e6:bc:f2:f3:ca:84:6d:c5:33:3b:37:9e:d8:98:
                    14:a4:6d:f0:94:59:29:89:b3:b3:22:2c:e7:25:53:
                    50:f7:26:d5:8d:b3:2d:d9:81:11:c7:21:69:cf:bc:
                    a9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:39:E7:5E:7A:D5:6E:44:10:5E:BB:42:D3:89:2E:18:52:9E:96:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.160.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c9:74:c8:69:e3:58:e7:1e:aa:89:d2:4c:04:4c:fc:ce:8d:
         3a:8d:97:47:5a:31:5b:7f:64:97:00:1d:cf:80:a5:de:7b:43:
         e0:43:28:30:f0:32:61:e1:2e:ed:7c:77:94:a4:94:e6:5d:32:
         8e:2d:69:ac:81:ad:aa:0f:c4:c5:3f:c5:16:6f:47:67:bb:1d:
         58:38:c3:c2:57:88:66:54:df:71:71:37:73:d0:a4:4a:94:96:
         72:6a:e7:a5:78:c9:e2:93:ad:a9:28:e6:a8:fc:a6:53:2d:08:
         ba:74:ce:55:b7:4e:55:d7:b3:bc:6f:77:7f:df:40:14:70:2d:
         64:53:fa:fe:ec:eb:c4:70:de:bf:fb:69:96:43:7f:db:90:d6:
         b3:12:5f:70:c7:93:61:0f:06:ae:33:72:93:2c:ad:49:ec:1b:
         5d:f2:8e:15:fa:82:d7:e8:89:31:a5:d9:f5:be:47:c7:e9:6c:
         9d:57:91:ee:a9:71:ab:bb:3e:9e:df:75:21:25:cf:7e:1b:ff:
         fa:a3:96:01:bd:2b:1f:fb:f2:08:64:2a:ee:19:78:62:7d:bc:
         22:16:57:3c:dd:7d:02:b3:6f:32:44:c1:be:f0:b7:09:03:7d:
         2d:e2:34:da:f6:07:f3:a2:95:fd:d9:a0:5c:33:77:1e:b5:0d:
         87:ba:40:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlUT6O+ZoFt3kGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk
ZjZkMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
NzZjZDcwYmUtZDQ5Yy00ZTA4LTgyOWEtODVmNGMwM2Y4NmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu1x/urI4OW7Hd8AeSzAEp0OLXpCN2i5kblP
bNbBi25GKnPAHVW4KpCIpgEe6nfHuDuVAvCHiJ6+wheqOeVLlo7Y+djuES5KZE7d
Dn75949ND3igNlQfqXdWZh201vISmeVFohRzcGO3xoDvqAjjP1eUQ2qbNx6ry/g+
nH+4f5EvpMiCzcZuI4vsEn4ygXtVCAApyAWFIlt5iGWlWlmpFG0BpC+O4K7T/WnM
86d2Q/Pgo76iPWz1ikWGJGMdEwlRD9MLo37knfZ3YER+RZcU84Mp5rzy88qEbcUz
Ozee2JgUpG3wlFkpibOzIiznJVNQ9ybVjbMt2YERxyFpz7ypgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIs551561W5EEF67QtOJLhhSnpYKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm
MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvNDBmY2Q2YWEtOTRhMS0z
MjA0LWIyMGUtZmZmMGExYTg4MzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw
MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy
ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy
ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP6ArMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLJdMhp41jnHqqJ0kwETPzOjTqNl0daMVt/ZJcAHc+Apd57Q+BDKDDw
MmHhLu18d5SklOZdMo4taayBraoPxMU/xRZvR2e7HVg4w8JXiGZU33FxN3PQpEqU
lnJq56V4yeKTrako5qj8plMtCLp0zlW3TlXXs7xvd3/fQBRwLWRT+v7s68Rw3r/7
aZZDf9uQ1rMSX3DHk2EPBq4zcpMsrUnsG13yjhX6gtfoiTGl2fW+R8fpbJ1Xke6p
cau7Pp7fdSElz34b//qjlgG9Kx/78ghkKu4ZeGJ9vCIWVzzdfQKzbzJEwb7wtwkD
fS3iNNr2B/Oilf3ZoFwzdx61DYe6QOc=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:13:02 2025 by rpki-client