Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a611df5-8353-333a-ae83-f7504237545d.roa
File:                     7a611df5-8353-333a-ae83-f7504237545d.roa (raw, json)
Hash identifier:          cMF86njgHQDU0a4Vj0HvkR5+Tft+zmzr8/6B0/b5yFY=
Subject key identifier:   8E:14:3F:35:5D:34:6B:86:BF:A9:AE:EC:82:EA:0E:A1:89:5D:93:B5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF07F62B2FC57CB617349C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a611df5-8353-333a-ae83-f7504237545d.roa
Signing time:             Thu 24 Jul 2025 12:38:52 +0000
ROA not before:           Thu 24 Jul 2025 12:38:52 +0000
ROA not after:            Wed 22 Oct 2025 12:38:52 +0000
asID:                     396590
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:7f:62:b2:fc:57:cb:61:73:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:52 2025 GMT
            Not After : Oct 22 12:38:52 2025 GMT
        Subject: CN=955fdddc-401d-4dab-a553-3a397a866a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ee:69:2c:51:4e:f8:e7:3a:02:46:41:82:ea:
                    2a:9c:39:dc:ec:c8:41:2e:2c:02:ca:25:3a:ca:df:
                    90:92:f4:e3:c5:23:1f:c0:d5:3d:e0:21:68:62:c1:
                    c9:39:0f:d1:77:cb:fe:22:f8:a6:5e:92:5b:ce:38:
                    2e:55:17:d3:14:f0:df:13:3f:fc:26:61:62:06:98:
                    1e:2a:61:30:6f:27:ea:e0:61:b8:c9:fa:87:9b:57:
                    50:7a:ad:0d:a2:19:b1:b3:c9:77:ec:8b:51:b7:a4:
                    a4:73:e2:21:63:c8:9d:9d:cb:aa:d7:02:1c:e0:22:
                    bb:cf:ab:9e:90:cf:6c:4b:6c:7b:29:f3:ac:d2:c0:
                    e9:da:88:cf:21:3f:61:ef:07:1d:ed:b4:92:f2:a7:
                    ca:62:6f:ca:c6:e4:ba:d1:62:86:21:9f:32:5a:8c:
                    3d:27:4f:09:db:a3:9f:e8:af:f3:ee:2b:79:da:0a:
                    7c:5a:a2:af:fe:0c:61:f9:eb:6e:b7:68:cb:fa:10:
                    41:de:60:a0:6b:e7:19:db:10:0f:e3:c1:54:a5:3e:
                    a9:9e:f4:fc:4a:86:b9:0e:ff:1e:27:0d:73:bf:0d:
                    20:e3:85:1e:18:69:65:c4:2d:1f:a2:6c:ad:eb:e9:
                    1e:52:dc:5a:36:1d:f7:92:80:1f:f2:94:d4:fa:c5:
                    2b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:14:3F:35:5D:34:6B:86:BF:A9:AE:EC:82:EA:0E:A1:89:5D:93:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a611df5-8353-333a-ae83-f7504237545d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9f:95:6a:b0:e2:65:92:1c:fe:f7:9a:37:a6:cd:e7:23:f6:
         a7:9e:e8:5a:44:1a:94:4c:57:56:20:85:34:29:64:75:39:99:
         b9:29:0f:eb:66:23:20:a0:e0:21:f7:dd:6f:cc:02:a8:b2:3d:
         65:26:9f:ef:91:8e:77:8e:e8:0e:16:c3:eb:7d:93:c8:41:62:
         9d:cf:6a:0b:b5:39:d0:c5:53:65:e2:fb:dc:31:b1:fe:f6:87:
         1a:e8:0d:86:73:66:c7:ff:a6:89:98:03:73:8d:4a:06:f4:c5:
         f4:f5:9a:00:fb:da:2c:ed:3d:56:8e:59:2a:d8:16:ca:eb:0f:
         b9:9e:d6:36:37:e6:b5:1a:f1:1d:45:d4:54:25:d1:1e:aa:15:
         14:58:17:ab:11:7d:14:2d:a4:9f:24:a8:11:16:49:9b:2d:15:
         ba:99:3e:82:ec:10:03:c9:c4:30:a7:6a:56:88:85:01:22:d4:
         6d:99:42:2f:56:b3:ab:59:3c:bc:42:e5:6a:73:4d:8f:bb:59:
         aa:51:d0:55:e6:8a:4b:08:e5:0c:6a:a5:83:4b:59:ef:90:a3:
         10:13:fd:e7:ca:5b:77:4f:82:4b:fe:47:fe:5b:64:72:f7:94:
         64:c6:39:f4:2b:b5:9c:1d:99:88:dc:7b:23:92:18:c3:64:d0:
         25:76:c1:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8H9isvxXy2FzScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyNDEyMzg1MloXDTI1MTAyMjEyMzg1MlowLzEtMCsGA1UEAxMk
OTU1ZmRkZGMtNDAxZC00ZGFiLWE1NTMtM2EzOTdhODY2YTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu5pLFFO+Oc6AkZBguoqnDnc7MhBLiwCyiU6
yt+QkvTjxSMfwNU94CFoYsHJOQ/Rd8v+IvimXpJbzjguVRfTFPDfEz/8JmFiBpge
KmEwbyfq4GG4yfqHm1dQeq0Nohmxs8l37ItRt6Skc+IhY8idncuq1wIc4CK7z6ue
kM9sS2x7KfOs0sDp2ojPIT9h7wcd7bSS8qfKYm/KxuS60WKGIZ8yWow9J08J26Of
6K/z7it52gp8WqKv/gxh+etut2jL+hBB3mCga+cZ2xAP48FUpT6pnvT8Soa5Dv8e
Jw1zvw0g44UeGGllxC0fomyt6+keUtxaNh33koAf8pTU+sUrgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI4UPzVdNGuGv6mu7ILqDqGJXZO1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2E2MTFkZjUtODM1My0z
MzNhLWFlODMtZjc1MDQyMzc1NDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2flWqw4mWSHP73mjemzecj9qee6FpEGpRMV1YghTQpZHU5mbkpD+tm
IyCg4CH33W/MAqiyPWUmn++RjneO6A4Ww+t9k8hBYp3Pagu1OdDFU2Xi+9wxsf72
hxroDYZzZsf/pomYA3ONSgb0xfT1mgD72iztPVaOWSrYFsrrD7me1jY35rUa8R1F
1FQl0R6qFRRYF6sRfRQtpJ8kqBEWSZstFbqZPoLsEAPJxDCnalaIhQEi1G2ZQi9W
s6tZPLxC5WpzTY+7WapR0FXmiksI5QxqpYNLWe+QoxAT/efKW3dPgkv+R/5bZHL3
lGTGOfQrtZwdmYjceyOSGMNk0CV2wfY=
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:08:00 2025 by rpki-client