Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d2d7e6f-4c08-37dc-a5e6-6a47c8bd6414.roa
File:                     4d2d7e6f-4c08-37dc-a5e6-6a47c8bd6414.roa (raw, json)
Hash identifier:          dOUeToyqgRourJeI7jQu9TMpLA70rD8WOd1S4qDIXXA=
Subject key identifier:   9E:4E:C5:BF:9B:FD:D0:FF:59:F4:93:9E:96:0B:F8:C2:3D:87:F7:22
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A9FFBB449CAEB97F3BACF4180
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d2d7e6f-4c08-37dc-a5e6-6a47c8bd6414.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     396571
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:b4:49:ca:eb:97:f3:ba:cf:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=41e6a572-dcc5-430e-a0ad-8ab1cb6ab844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:98:f5:5d:18:aa:91:27:00:72:21:17:33:
                    61:3c:e9:83:4a:ef:3b:23:45:1c:0c:61:4d:2e:59:
                    1d:e8:56:92:9b:a0:62:48:4e:77:24:77:b1:1d:d7:
                    6a:5e:66:b4:f9:6a:13:62:c4:7f:8a:1f:e3:c2:0c:
                    fb:6c:01:7d:be:e3:81:15:b0:a3:8d:0b:3a:56:38:
                    fa:bf:89:19:61:b1:68:fc:f4:9f:63:d1:48:c5:2d:
                    b2:f8:2c:96:62:b9:a8:8b:c7:16:d6:5e:72:39:24:
                    15:4f:78:69:78:ca:ee:b9:aa:fc:da:88:0c:bb:4a:
                    80:27:e5:8c:be:47:ee:74:ba:8d:b1:1b:67:e4:a1:
                    e9:3c:24:fb:23:c5:cf:b8:7e:73:55:93:ec:82:00:
                    bf:25:d2:e5:91:92:f4:76:0b:25:5f:f2:4f:b1:21:
                    3a:1c:c7:4f:af:bd:92:cc:30:f5:2c:ae:c9:c5:ab:
                    3f:8e:26:9d:31:d8:a8:d3:db:50:c4:62:7d:da:fb:
                    40:6a:94:6f:cd:2c:af:65:4c:ae:87:14:47:45:21:
                    7e:73:12:4f:6b:8a:1b:c4:09:bc:37:e7:5a:63:63:
                    40:de:d0:9e:0c:d9:48:c8:b8:d9:02:b1:7d:2c:1d:
                    ba:e2:6d:a2:2d:86:75:19:4f:2f:a0:16:48:98:90:
                    61:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4E:C5:BF:9B:FD:D0:FF:59:F4:93:9E:96:0B:F8:C2:3D:87:F7:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d2d7e6f-4c08-37dc-a5e6-6a47c8bd6414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:01:a4:b7:f1:e6:e0:fb:83:0e:32:75:70:a8:53:ab:b6:e9:
         10:d9:2e:1d:cd:3f:70:5d:0d:5b:42:02:e5:d7:90:1f:0a:b2:
         c7:9b:db:47:60:fb:03:5c:64:55:dc:fe:fa:7b:37:e9:74:79:
         40:f2:d1:00:48:39:61:4a:84:ba:fd:38:05:80:11:23:be:57:
         4b:5a:77:2b:07:db:f1:98:08:b3:e6:4e:39:ad:57:11:0b:f0:
         89:90:b2:65:f6:37:a6:26:36:95:db:c5:a5:41:e2:7f:9f:c9:
         34:2b:38:ed:be:a1:89:b7:e6:67:91:ae:33:b5:3d:29:37:bc:
         f6:d2:b7:35:bf:9c:c3:5b:db:a8:1a:85:3a:9b:bd:c7:aa:1b:
         3b:14:88:6d:4a:15:eb:92:8c:4c:83:f7:f1:8c:ac:e3:08:7c:
         62:13:29:ed:ce:73:16:a8:d8:e1:a7:36:7b:7d:53:ce:0c:80:
         33:96:c3:dc:8a:00:f7:0f:7d:b2:be:87:57:fb:72:99:64:ad:
         35:b3:62:2c:5d:36:47:4d:19:14:0d:d1:2c:e6:de:42:64:aa:
         49:36:fe:80:b6:fb:28:87:c9:4f:6b:b0:c6:16:12:ee:9b:c6:
         32:16:a7:6d:f2:ff:1a:13:4d:d7:b1:2e:c4:40:13:ca:cd:d2:
         09:a3:ae:24
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7RJyuuX87rPQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk
NDFlNmE1NzItZGNjNS00MzBlLWEwYWQtOGFiMWNiNmFiODQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOGY9V0YqpEnAHIhFzNhPOmDSu87I0UcDGFN
Llkd6FaSm6BiSE53JHexHddqXma0+WoTYsR/ih/jwgz7bAF9vuOBFbCjjQs6Vjj6
v4kZYbFo/PSfY9FIxS2y+CyWYrmoi8cW1l5yOSQVT3hpeMruuar82ogMu0qAJ+WM
vkfudLqNsRtn5KHpPCT7I8XPuH5zVZPsggC/JdLlkZL0dgslX/JPsSE6HMdPr72S
zDD1LK7Jxas/jiadMdio09tQxGJ92vtAapRvzSyvZUyuhxRHRSF+cxJPa4obxAm8
N+daY2NA3tCeDNlIyLjZArF9LB264m2iLYZ1GU8voBZImJBheQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJ5Oxb+b/dD/WfSTnpYL+MI9h/ciMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGQyZDdlNmYtNGMwOC0z
N2RjLWE1ZTYtNmE0N2M4YmQ2NDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBeAaS38ebg+4MOMnVwqFOrtukQ2S4dzT9wXQ1bQgLl15AfCrLHm9tH
YPsDXGRV3P76ezfpdHlA8tEASDlhSoS6/TgFgBEjvldLWncrB9vxmAiz5k45rVcR
C/CJkLJl9jemJjaV28WlQeJ/n8k0KzjtvqGJt+Znka4ztT0pN7z20rc1v5zDW9uo
GoU6m73Hqhs7FIhtShXrkoxMg/fxjKzjCHxiEyntznMWqNjhpzZ7fVPODIAzlsPc
igD3D32yvodX+3KZZK01s2IsXTZHTRkUDdEs5t5CZKpJNv6Atvsoh8lPa7DGFhLu
m8YyFqdt8v8aE03XsS7EQBPKzdIJo64k
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:56 2025 by rpki-client