Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea35d46b-5215-316b-abc3-0ed6fa88c9c3.roa
File:                     ea35d46b-5215-316b-abc3-0ed6fa88c9c3.roa (raw, json)
Hash identifier:          17m4ZuV5kG/qMR1HDOC8Q2bmuPuVieKipE1/5rdB10k=
Subject key identifier:   DA:A0:60:19:9D:A9:C6:EE:08:53:5A:81:69:19:18:E4:25:A7:A7:9A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A9FFBB575909DBB9DF93DCB00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea35d46b-5215-316b-abc3-0ed6fa88c9c3.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     396550
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:b5:75:90:9d:bb:9d:f9:3d:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=fc854013-cc15-4eac-884c-36e37c9cc59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:85:db:4a:6c:85:51:be:5d:4a:5a:12:fd:
                    40:1d:69:5f:a8:cb:68:4b:49:57:82:7a:b2:d0:dd:
                    f3:2b:fd:b5:a6:01:aa:02:55:1e:56:65:16:3b:5a:
                    df:75:81:9c:80:d2:fe:82:a7:18:93:b1:37:09:c4:
                    72:8d:4d:40:bd:3c:de:51:04:38:24:11:4f:c6:61:
                    f2:8f:90:3f:41:cd:c1:91:ca:de:13:27:9c:0e:c2:
                    a8:2c:2d:09:4e:46:94:14:ca:19:2f:16:e8:f1:91:
                    d6:26:41:4d:a5:cc:d2:5a:1d:6c:43:aa:37:37:ef:
                    16:4a:69:65:88:5d:e5:56:14:66:57:d4:a2:27:22:
                    a1:aa:5d:c1:d0:f0:a3:83:63:63:82:8e:12:ff:e9:
                    14:89:e8:9c:5e:36:5b:f7:67:aa:b1:ea:6b:d4:df:
                    96:66:3a:7d:03:4e:7f:3b:cb:ba:a8:8c:73:6f:f6:
                    d0:71:e5:1d:d5:39:f4:c2:ee:18:ce:aa:46:0a:e9:
                    fb:26:5e:b5:63:00:b2:b8:76:a2:ae:37:5d:b6:3f:
                    d0:32:cc:fe:1b:a3:4f:fc:9b:c6:27:f8:4e:e6:3f:
                    6b:96:11:ee:05:23:6d:87:bc:07:fe:02:da:49:a0:
                    84:a3:45:40:55:1a:d9:49:7f:9b:19:19:22:a1:58:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A0:60:19:9D:A9:C6:EE:08:53:5A:81:69:19:18:E4:25:A7:A7:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea35d46b-5215-316b-abc3-0ed6fa88c9c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c5:c9:dd:34:4c:68:29:2e:ae:b8:a9:81:98:5d:4d:b7:b2:
         f4:d1:be:bf:e6:a5:5e:b0:d6:0c:92:c0:7a:f4:22:c3:8d:7c:
         d0:dd:2b:3d:42:5c:ba:be:3d:04:eb:dc:6f:a9:7d:74:df:27:
         e3:4f:b2:3c:ac:fb:ad:7b:7f:22:af:eb:1a:77:4f:97:c2:cd:
         5e:d8:78:2f:94:15:55:cb:0c:23:db:cb:e6:13:30:5b:0c:1f:
         ae:e9:7c:4f:0e:54:c9:70:9c:d9:3f:c8:ce:01:81:b0:40:80:
         1c:9a:9c:cb:29:c4:18:16:98:36:dc:ee:2c:7f:99:64:bd:9a:
         87:3b:72:38:2e:27:c3:06:4b:c9:ca:ee:8f:6a:7e:d4:83:a9:
         b2:82:8b:00:9f:77:cb:13:e4:a7:b0:d3:23:ef:52:16:3f:31:
         06:27:9d:bd:61:e6:d9:79:9e:36:04:84:fa:c3:cf:f5:5e:18:
         13:03:ba:7c:79:fd:8a:cc:3e:7e:d3:32:7e:da:e5:e4:52:b0:
         73:7c:0b:1a:ca:52:95:02:8a:a2:c5:b8:8b:21:29:79:d1:a9:
         8d:58:77:ac:01:25:fa:02:ef:50:9f:8b:41:52:2a:05:db:40:
         69:76:58:97:23:58:8d:07:65:9f:6f:01:d4:ae:14:fd:e6:81:
         dd:8a:37:4c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7V1kJ27nfk9ywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk
ZmM4NTQwMTMtY2MxNS00ZWFjLTg4NGMtMzZlMzdjOWNjNTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGeF20pshVG+XUpaEv1AHWlfqMtoS0lXgnqy
0N3zK/21pgGqAlUeVmUWO1rfdYGcgNL+gqcYk7E3CcRyjU1AvTzeUQQ4JBFPxmHy
j5A/Qc3BkcreEyecDsKoLC0JTkaUFMoZLxbo8ZHWJkFNpczSWh1sQ6o3N+8WSmll
iF3lVhRmV9SiJyKhql3B0PCjg2Njgo4S/+kUieicXjZb92eqsepr1N+WZjp9A05/
O8u6qIxzb/bQceUd1Tn0wu4YzqpGCun7Jl61YwCyuHairjddtj/QMsz+G6NP/JvG
J/hO5j9rlhHuBSNth7wH/gLaSaCEo0VAVRrZSX+bGRkioVglvQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNqgYBmdqcbuCFNagWkZGOQlp6eaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWEzNWQ0NmItNTIxNS0z
MTZiLWFiYzMtMGVkNmZhODhjOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA5xcndNExoKS6uuKmBmF1Nt7L00b6/5qVesNYMksB69CLDjXzQ3Ss9
Qly6vj0E69xvqX103yfjT7I8rPute38ir+sad0+Xws1e2HgvlBVVywwj28vmEzBb
DB+u6XxPDlTJcJzZP8jOAYGwQIAcmpzLKcQYFpg23O4sf5lkvZqHO3I4LifDBkvJ
yu6Pan7Ug6mygosAn3fLE+SnsNMj71IWPzEGJ529YebZeZ42BIT6w8/1XhgTA7p8
ef2KzD5+0zJ+2uXkUrBzfAsaylKVAoqixbiLISl50amNWHesASX6Au9Qn4tBUioF
20BpdliXI1iNB2WfbwHUrhT95oHdijdM
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:02 2025 by rpki-client