Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8c35bc60-ade1-36af-8d1a-71a84cc713c0.roa
File:                     8c35bc60-ade1-36af-8d1a-71a84cc713c0.roa (raw, json)
Hash identifier:          LYqNH4M/lRdDMdvH3sSuVcw0putKHbDZ96kG+3H0IR0=
Subject key identifier:   48:1B:8D:B7:BD:5F:9D:C8:61:6B:DA:FA:61:36:00:3E:B4:75:22:33
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584A9DA9389F7ACDA1C581466D80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8c35bc60-ade1-36af-8d1a-71a84cc713c0.roa
Signing time:             Wed 23 Jul 2025 17:03:38 +0000
ROA not before:           Wed 23 Jul 2025 17:03:38 +0000
ROA not after:            Tue 21 Oct 2025 17:03:38 +0000
asID:                     138915
IP address blocks:        206.54.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:a9:38:9f:7a:cd:a1:c5:81:46:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul 23 17:03:38 2025 GMT
            Not After : Oct 21 17:03:38 2025 GMT
        Subject: CN=c1b24a72-e6f1-4582-990b-91416f16dae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f5:18:29:a6:de:c9:6e:da:65:a4:61:92:fa:
                    a3:1c:47:98:24:ae:ab:4c:7c:0f:1a:67:b5:0e:86:
                    eb:11:a0:04:d1:7b:fa:8f:c2:d3:5b:30:09:24:31:
                    8f:c6:bb:fe:40:a3:b0:bc:30:82:09:63:ef:50:fd:
                    af:7b:bc:d7:dc:45:47:c7:58:c3:85:d4:37:80:18:
                    1a:f2:3b:9c:d4:a3:bb:a7:b4:97:8c:6d:79:fe:9f:
                    fe:b0:0e:0e:29:7d:47:67:bd:03:aa:32:5b:da:0f:
                    a5:ce:1b:ef:7e:3c:5e:b2:2c:ff:1e:ff:19:08:64:
                    ac:80:b6:dd:2e:33:a3:2a:ed:0b:ae:c3:bf:c9:76:
                    25:ba:5b:55:31:08:ba:5b:16:17:78:30:a4:4d:67:
                    47:52:17:da:0b:f0:fa:59:5c:c9:cc:8c:a4:5f:ae:
                    f5:59:5c:68:79:bb:a0:74:96:ef:86:4c:00:86:04:
                    20:1f:3a:7d:29:38:65:7b:05:30:78:c9:d1:42:f0:
                    60:41:63:2c:5c:79:9a:c5:e9:4c:0f:36:8e:cc:a5:
                    4b:67:7b:0b:a2:78:bb:f9:77:76:0d:98:f5:12:90:
                    d1:41:2a:81:02:a9:6f:78:76:e0:b8:d3:bd:e9:70:
                    15:53:8c:09:16:91:0b:2c:4d:19:36:62:cb:eb:ac:
                    a6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1B:8D:B7:BD:5F:9D:C8:61:6B:DA:FA:61:36:00:3E:B4:75:22:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8c35bc60-ade1-36af-8d1a-71a84cc713c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:42:8f:39:aa:6c:ce:7d:3e:f1:4f:0f:27:2b:15:c3:bd:31:
         08:05:be:b5:3e:43:78:ed:6d:67:72:a9:b4:68:f1:9c:6a:28:
         cb:f2:b9:f3:75:1f:12:e0:17:77:85:1a:8f:94:af:e3:a2:f8:
         e3:9c:33:b8:85:2c:07:c2:64:0d:73:21:e7:60:c8:69:f3:f4:
         2c:ae:50:13:8d:e5:2c:c6:cb:97:c8:e0:59:c6:7b:c5:d9:70:
         4e:23:ff:92:73:ee:d6:d2:bb:61:cd:19:77:3a:da:a6:13:d9:
         ed:bb:f1:bf:b9:9e:6c:01:f6:a4:2b:d1:89:7c:50:5a:65:4a:
         a2:d1:6c:33:14:a3:2d:6f:95:f2:d7:7c:7e:90:b0:86:7b:ce:
         bc:e5:70:ea:05:57:bd:e9:6a:80:15:6b:09:c8:47:eb:85:f2:
         be:56:76:bc:3c:b6:df:06:ad:b4:84:9f:23:11:8c:88:dc:f7:
         38:bb:59:f8:01:ad:0a:7a:b7:e6:f2:2b:74:2f:68:d0:f6:36:
         dc:4c:f6:7e:0b:bf:75:11:1c:b3:c9:52:1f:e6:7c:a3:00:18:
         c9:9c:79:8d:f1:06:bb:a8:25:d3:9b:71:22:49:e7:e0:d4:09:
         d9:3b:0f:9f:8c:12:67:19:d0:2e:f1:08:f8:a9:16:75:b8:62:
         d5:34:30:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdqTifes2hxYFGbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDcyMzE3MDMzOFoXDTI1MTAyMTE3MDMzOFowLzEtMCsGA1UEAxMk
YzFiMjRhNzItZTZmMS00NTgyLTk5MGItOTE0MTZmMTZkYWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPUYKabeyW7aZaRhkvqjHEeYJK6rTHwPGme1
DobrEaAE0Xv6j8LTWzAJJDGPxrv+QKOwvDCCCWPvUP2ve7zX3EVHx1jDhdQ3gBga
8juc1KO7p7SXjG15/p/+sA4OKX1HZ70DqjJb2g+lzhvvfjxesiz/Hv8ZCGSsgLbd
LjOjKu0LrsO/yXYlultVMQi6WxYXeDCkTWdHUhfaC/D6WVzJzIykX671WVxoebug
dJbvhkwAhgQgHzp9KThlewUweMnRQvBgQWMsXHmaxelMDzaOzKVLZ3sLoni7+Xd2
DZj1EpDRQSqBAqlveHbguNO96XAVU4wJFpELLE0ZNmLL66ymnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgbjbe9X53IYWva+mE2AD60dSIzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGMzNWJjNjAtYWRlMS0z
NmFmLThkMWEtNzFhODRjYzcxM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMlCjzmqbM59PvFPDycrFcO9MQgFvrU+Q3jtbWdyqbRo8ZxqKMvyufN1
HxLgF3eFGo+Ur+Oi+OOcM7iFLAfCZA1zIedgyGnz9CyuUBON5SzGy5fI4FnGe8XZ
cE4j/5Jz7tbSu2HNGXc62qYT2e278b+5nmwB9qQr0Yl8UFplSqLRbDMUoy1vlfLX
fH6QsIZ7zrzlcOoFV73paoAVawnIR+uF8r5Wdrw8tt8GrbSEnyMRjIjc9zi7WfgB
rQp6t+byK3QvaND2NtxM9n4Lv3URHLPJUh/mfKMAGMmceY3xBruoJdObcSJJ5+DU
Cdk7D5+MEmcZ0C7xCPipFnW4YtU0MBg=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:24:43 2025 by rpki-client