Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/810875bd-6e03-36df-9391-d1cefd6ab120.roa
File:                     810875bd-6e03-36df-9391-d1cefd6ab120.roa (raw, json)
Hash identifier:          3JTqxgWVGF6LZXYPNPmjFPA93rFvhiAcCk8+b8t7WDM=
Subject key identifier:   F5:58:31:96:E0:BE:61:84:8D:A8:60:3C:07:6C:6E:2F:AA:4A:59:04
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AB0A6E28075ED13F36307E7C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/810875bd-6e03-36df-9391-d1cefd6ab120.roa
Signing time:             Wed 30 Jul 2025 12:19:17 +0000
ROA not before:           Wed 30 Jul 2025 12:19:17 +0000
ROA not after:            Tue 28 Oct 2025 12:19:17 +0000
asID:                     13335
IP address blocks:        172.64.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:a6:e2:80:75:ed:13:f3:63:07:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 30 12:19:17 2025 GMT
            Not After : Oct 28 12:19:17 2025 GMT
        Subject: CN=aa22f232-3cd5-4041-ba14-34961d71b0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ef:ab:8f:e4:d4:2d:86:48:42:0b:53:75:af:
                    98:61:ab:00:97:17:24:52:cf:08:92:0d:7d:b1:66:
                    0c:fa:2b:de:34:e9:b2:e8:ce:3f:26:e4:35:cf:7a:
                    ff:25:a7:90:b1:68:8c:40:e5:d4:93:a3:0a:e2:db:
                    fd:07:3e:69:0a:9b:cf:4b:94:df:77:d4:3e:7e:5f:
                    ca:a0:18:2d:32:39:e9:f9:91:bd:f1:ab:96:1a:9a:
                    ac:74:ab:13:b1:a3:64:14:c2:21:6e:98:1c:76:4e:
                    f0:d0:68:de:5d:62:7a:8d:bf:d1:25:d3:90:6b:0f:
                    fb:b3:a3:6a:a3:9e:85:2a:6e:4c:5b:5d:4d:4a:e7:
                    fe:b9:64:83:f6:88:79:34:f2:f6:7f:ea:f2:da:1e:
                    3c:3d:de:8f:90:b1:bd:36:87:ae:c6:d8:d1:db:23:
                    42:b5:9a:52:23:da:59:97:ef:4c:30:c0:ab:d8:d7:
                    6a:5f:b2:01:8e:5d:ca:ed:d6:9f:c6:3f:3f:f6:8e:
                    f6:0f:83:49:13:a8:58:39:f0:35:3f:30:99:27:c6:
                    09:41:15:6b:c5:45:97:e1:c4:3d:af:0a:86:83:d1:
                    05:a5:61:85:77:29:17:71:88:9d:35:bc:34:59:b8:
                    d1:4a:e0:2f:f6:9f:d5:c3:50:6f:52:de:08:83:83:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:58:31:96:E0:BE:61:84:8D:A8:60:3C:07:6C:6E:2F:AA:4A:59:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/810875bd-6e03-36df-9391-d1cefd6ab120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e9:44:d7:1e:7a:e2:2c:69:24:d1:c7:5f:c1:1c:bd:2b:9b:
         9a:75:49:37:53:76:92:00:32:18:ff:1c:52:5b:89:df:fc:b0:
         b1:f8:3f:ea:e1:ca:c2:5b:4d:03:5d:16:52:eb:b7:94:20:78:
         87:fb:a2:63:0b:1f:cf:16:87:dd:88:5f:30:bf:9d:8b:cf:e3:
         64:69:18:b7:16:01:f7:15:6d:e3:0d:03:e8:d0:19:5d:b3:b2:
         ff:80:bd:ec:0b:b6:b6:90:b1:56:e0:2f:2e:4d:88:a1:2b:1a:
         05:d5:bd:ad:da:78:c8:a7:b9:4e:65:55:64:26:a4:3e:f8:ea:
         2d:ae:46:8a:b4:7c:ce:ba:ea:80:5a:81:e0:4e:ba:87:e5:60:
         aa:2b:8f:15:3d:b6:6e:25:03:e7:4a:c2:b5:f2:e4:73:cb:9a:
         76:29:7a:03:24:4a:ca:7a:77:a6:f9:87:ef:3c:92:0d:84:b1:
         d6:0e:a5:1a:2b:2d:29:49:3e:8e:17:7b:54:66:54:f8:87:e6:
         8a:b3:3d:57:4b:f0:fb:64:5e:a0:4e:25:92:80:ca:e8:50:fe:
         18:52:e6:bb:3e:7e:79:0a:00:ad:57:6d:4e:d8:1c:3f:e2:b0:
         ff:43:f4:fc:82:69:30:62:a3:90:39:33:04:d2:e5:ba:6c:82:
         03:a4:f1:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqwpuKAde0T82MH58AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDczMDEyMTkxN1oXDTI1MTAyODEyMTkxN1owLzEtMCsGA1UEAxMk
YWEyMmYyMzItM2NkNS00MDQxLWJhMTQtMzQ5NjFkNzFiMGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke+rj+TULYZIQgtTda+YYasAlxckUs8Ikg19
sWYM+iveNOmy6M4/JuQ1z3r/JaeQsWiMQOXUk6MK4tv9Bz5pCpvPS5Tfd9Q+fl/K
oBgtMjnp+ZG98auWGpqsdKsTsaNkFMIhbpgcdk7w0GjeXWJ6jb/RJdOQaw/7s6Nq
o56FKm5MW11NSuf+uWSD9oh5NPL2f+ry2h48Pd6PkLG9NoeuxtjR2yNCtZpSI9pZ
l+9MMMCr2NdqX7IBjl3K7dafxj8/9o72D4NJE6hYOfA1PzCZJ8YJQRVrxUWX4cQ9
rwqGg9EFpWGFdykXcYidNbw0WbjRSuAv9p/Vw1BvUt4Ig4O8zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPVYMZbgvmGEjahgPAdsbi+qSlkEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODEwODc1YmQtNmUwMy0z
NmRmLTkzOTEtZDFjZWZkNmFiMTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/pRNceeuIsaSTRx1/BHL0rm5p1STdTdpIAMhj/HFJbid/8sLH4P+rh
ysJbTQNdFlLrt5QgeIf7omMLH88Wh92IXzC/nYvP42RpGLcWAfcVbeMNA+jQGV2z
sv+AvewLtraQsVbgLy5NiKErGgXVva3aeMinuU5lVWQmpD746i2uRoq0fM666oBa
geBOuoflYKorjxU9tm4lA+dKwrXy5HPLmnYpegMkSsp6d6b5h+88kg2EsdYOpRor
LSlJPo4Xe1RmVPiH5oqzPVdL8PtkXqBOJZKAyuhQ/hhS5rs+fnkKAK1XbU7YHD/i
sP9D9PyCaTBio5A5MwTS5bpsggOk8Xo=
-----END CERTIFICATE-----
Generated at Mon Aug 4 01:46:04 2025 by rpki-client