Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/e806becf-4b0d-3529-9108-3b24d3fa75e9.roa
File:                     e806becf-4b0d-3529-9108-3b24d3fa75e9.roa (raw, json)
Hash identifier:          EtXgJPm2i8oJx3ZCKbPwrwCW25/HwWKn2QyOX3p1+1g=
Subject key identifier:   6A:87:35:54:C4:42:19:18:8A:BA:65:38:0B:40:DE:09:02:9F:E3:AA
Certificate issuer:       /CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
Certificate serial:       010D0C9F4328584AA42B7EDF64ACABBAF5D92580
Authority key identifier: 4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/e806becf-4b0d-3529-9108-3b24d3fa75e9.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     63452
IP address blocks:        192.171.18.0/24 maxlen: 24
                          192.171.19.0/24 maxlen: 24
                          192.189.171.0/24 maxlen: 24
                          2602:ff50::/40 maxlen: 40
                          2602:ff50:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7e:df:64:ac:ab:ba:f5:d9:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=f30b41a3-d356-4c50-a937-08b752b59eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:3c:93:85:5f:56:a3:80:e8:76:a6:53:61:
                    92:e6:cf:7c:3e:ca:56:90:a5:6a:b7:bf:af:c5:02:
                    24:73:c5:9f:10:63:ce:14:93:fc:fa:a4:61:70:d0:
                    c2:d4:4a:78:41:b9:3d:eb:14:e6:15:05:eb:d4:69:
                    39:1c:96:73:8e:6b:d3:0a:2c:4e:1d:5a:27:0f:50:
                    1f:c1:eb:90:0e:f3:ae:c2:9b:d6:35:13:cd:d8:45:
                    54:8b:4c:22:30:b0:7b:27:0f:96:ed:cb:61:41:74:
                    99:87:8c:c3:46:6a:cc:20:85:27:25:c0:a0:a2:1b:
                    5c:2c:a2:c3:14:4b:7b:ef:ce:3e:cb:ff:0d:84:20:
                    e5:bc:b9:0a:a1:51:2e:1f:71:a7:99:92:43:85:c7:
                    93:aa:c2:20:1c:87:d5:29:ba:1a:28:72:ab:4b:8f:
                    81:36:e0:6c:de:f7:50:a9:ca:4f:92:14:39:34:13:
                    25:2b:9d:8d:a5:1a:ee:7b:ab:6a:db:ae:7d:b3:41:
                    48:ba:b4:93:2a:13:01:5b:2f:ae:bf:4c:e0:fc:f7:
                    bf:27:d9:0e:43:d2:d3:d1:dc:5f:1a:1a:7e:1c:75:
                    87:09:e5:70:ea:aa:41:1f:4d:61:4e:d1:11:f3:be:
                    bd:be:00:a8:d3:af:1a:dd:c0:4c:57:4a:b2:d6:93:
                    d1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:87:35:54:C4:42:19:18:8A:BA:65:38:0B:40:DE:09:02:9F:E3:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/e806becf-4b0d-3529-9108-3b24d3fa75e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl

            X509v3 Authority Key Identifier:
                keyid:4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.18.0/23
                  192.189.171.0/24
                IPv6:
                  2602:ff50::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:45:73:f1:a0:ba:2e:0c:f5:69:bc:b6:f0:de:ca:8c:73:83:
         68:b1:b6:d8:35:a2:ef:15:5f:7b:b2:75:28:1d:f5:54:52:38:
         33:41:bb:29:12:87:d4:46:0f:b4:84:fb:23:ed:41:4d:74:28:
         29:c1:6c:33:63:e8:61:36:6a:30:03:8a:00:0a:e4:0b:88:01:
         74:db:f2:f8:2a:2b:55:11:f0:69:8c:3d:21:eb:ac:9d:9d:44:
         a0:05:ec:e2:d0:61:03:4a:83:2a:d0:6d:99:50:22:71:9d:78:
         9a:43:61:dc:95:13:8b:ba:e1:87:03:7b:a3:e7:f0:38:79:00:
         bd:b6:b1:51:30:a6:5e:03:4a:e2:0e:e2:f0:67:f1:84:61:2d:
         e7:36:cb:b3:18:f2:a8:8c:b3:b6:51:52:75:fe:cd:3b:5f:40:
         76:53:c8:f6:22:5d:fd:61:56:86:64:0f:13:96:5a:19:3c:eb:
         fe:72:69:07:eb:2b:00:12:9c:3b:12:07:f2:dd:74:06:b4:ac:
         18:12:af:57:1c:98:63:da:c0:0d:b7:f9:1a:f1:47:7c:0a:ca:
         29:c1:00:3d:dd:2b:8c:7d:58:cd:1f:8b:c3:93:c3:e5:05:ef:
         71:00:5b:a5:1f:08:98:86:e2:31:19:d3:09:40:03:8d:6b:37:
         41:94:25:12
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEqkK37fZKyruvXZJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VmOGQzMjAtYzJiNC00NzE4LWJlOWMtZWMzZjgwMWMw
ODE4MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
ZjMwYjQxYTMtZDM1Ni00YzUwLWE5MzctMDhiNzUyYjU5ZWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn388k4VfVqOA6HamU2GS5s98PspWkKVqt7+v
xQIkc8WfEGPOFJP8+qRhcNDC1Ep4Qbk96xTmFQXr1Gk5HJZzjmvTCixOHVonD1Af
weuQDvOuwpvWNRPN2EVUi0wiMLB7Jw+W7cthQXSZh4zDRmrMIIUnJcCgohtcLKLD
FEt7784+y/8NhCDlvLkKoVEuH3GnmZJDhceTqsIgHIfVKboaKHKrS4+BNuBs3vdQ
qcpPkhQ5NBMlK52NpRrue6tq2659s0FIurSTKhMBWy+uv0zg/Pe/J9kOQ9LT0dxf
Ghp+HHWHCeVw6qpBH01hTtER8769vgCo068a3cBMV0qy1pPR1QIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFGqHNVTEQhkYirplOAtA3gkCn+OqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZWY4
ZDMyMC1jMmI0LTQ3MTgtYmU5Yy1lYzNmODAxYzA4MTgvZTgwNmJlY2YtNGIwZC0z
NTI5LTkxMDgtM2IyNGQzZmE3NWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2VmOGQzMjAtYzJiNC00NzE4LWJl
OWMtZWMzZjgwMWMwODE4L2NlZjhkMzIwLWMyYjQtNDcxOC1iZTljLWVjM2Y4MDFj
MDgxOC5jcmwwHwYDVR0jBBgwFoAUTiXbhrEvEqYZ1KQB1V/ykpZSQ+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZWY4ZDMyMC1jMmI0LTQ3MTgtYmU5Yy1lYzNm
ODAxYzA4MTguY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBwKsSAwQA
wL2rMA4EAgACMAgDBgEmAv9QADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPRXPxoLouDPVpvLbw3sqMc4No
sbbYNaLvFV97snUoHfVUUjgzQbspEofURg+0hPsj7UFNdCgpwWwzY+hhNmowA4oA
CuQLiAF02/L4KitVEfBpjD0h66ydnUSgBezi0GEDSoMq0G2ZUCJxnXiaQ2HclROL
uuGHA3uj5/A4eQC9trFRMKZeA0riDuLwZ/GEYS3nNsuzGPKojLO2UVJ1/s07X0B2
U8j2Il39YVaGZA8TlloZPOv+cmkH6ysAEpw7Egfy3XQGtKwYEq9XHJhj2sANt/ka
8Ud8CsopwQA93SuMfVjNH4vDk8PlBe9xAFulHwiYhuIxGdMJQAONazdBlCUS
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:43 2025 by rpki-client