Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa
File:                     0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa (raw, json)
Hash identifier:          krlVPVKOC6kn50fBg1GN7q9NUBi7Ys6wI0ZG8Huwwos=
Subject key identifier:   F7:F2:D0:3C:C3:36:62:5D:6A:AF:6C:6C:59:F5:C3:C1:33:50:BB:B7
Certificate issuer:       /CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb
Certificate serial:       010D0C9F4328584AA42B729CA06BFB453617E100
Authority key identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     19684
IP address blocks:        23.174.152.0/24 maxlen: 24
                          23.174.153.0/24 maxlen: 24
                          69.67.164.0/22 maxlen: 22
                          69.67.164.0/23 maxlen: 23
                          69.67.166.0/23 maxlen: 23
                          162.254.224.0/21 maxlen: 21
                          207.29.192.0/21 maxlen: 21
                          207.29.192.0/23 maxlen: 23
                          207.29.194.0/23 maxlen: 23
                          207.29.196.0/23 maxlen: 23
                          207.29.198.0/23 maxlen: 23
                          2607:9540::/32 maxlen: 32
                          2607:9540::/44 maxlen: 44
                          2607:9540:10::/44 maxlen: 44
                          2607:9540:20::/44 maxlen: 44
                          2607:9540:30::/44 maxlen: 44
                          2607:9540:40::/44 maxlen: 44
                          2607:9540:50::/44 maxlen: 44
                          2607:9540:60::/44 maxlen: 44
                          2607:9540:70::/44 maxlen: 44
                          2607:9540:40f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:72:9c:a0:6b:fb:45:36:17:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=905f6aa3-9f7d-4342-8ad6-fb9dc058d349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:22:3f:8c:72:09:5c:2b:7b:e9:ed:4e:34:
                    22:8e:7d:69:50:fa:95:d5:f2:32:60:2e:e5:83:05:
                    cc:13:27:8d:25:7e:85:74:d1:1c:0d:66:f2:f5:a4:
                    c6:fb:00:ed:de:da:7f:e5:60:9a:57:21:1f:61:ae:
                    d1:ed:78:09:01:c9:7a:d7:bb:06:45:33:34:04:c9:
                    8f:13:1d:1c:0a:f3:57:d9:8f:dc:d7:ec:7f:41:9d:
                    3f:39:08:f4:60:8e:a1:7a:33:64:e5:70:86:1e:ac:
                    c5:4f:a7:a5:cb:ec:73:6e:60:6c:84:3a:c2:29:1c:
                    dd:41:44:b2:7e:58:c5:10:a3:b9:45:88:80:5d:4f:
                    f9:d0:b6:43:42:50:3c:ba:13:1f:ce:3a:40:f7:6e:
                    b8:ad:00:b6:56:56:4c:da:73:a3:05:48:37:9d:f0:
                    7a:cf:f9:03:4f:98:9c:a6:f0:33:6a:84:a6:e3:6f:
                    d9:62:94:ac:fd:80:16:0f:29:15:3d:fb:83:28:01:
                    c5:08:22:60:13:67:8a:ac:e8:1a:19:fe:5e:c9:41:
                    21:86:79:b4:94:b4:3e:3e:b3:2c:1d:56:65:74:b3:
                    df:9f:b1:6e:15:b3:41:5e:45:37:36:98:f9:26:a5:
                    64:7a:e0:fc:7a:5e:58:31:03:bd:13:30:d0:a7:75:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F2:D0:3C:C3:36:62:5D:6A:AF:6C:6C:59:F5:C3:C1:33:50:BB:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl

            X509v3 Authority Key Identifier:
                keyid:49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.152.0/23
                  69.67.164.0/22
                  162.254.224.0/21
                  207.29.192.0/21
                IPv6:
                  2607:9540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f4:6a:ca:e6:4f:d9:fe:b0:31:eb:b8:01:f5:2a:8c:59:e4:
         9b:35:0a:30:9b:93:45:c1:8d:fc:c3:83:0e:44:ad:00:c3:41:
         70:58:3b:f8:85:29:12:c0:aa:6e:c0:a7:23:d4:2b:59:ce:39:
         9e:4b:96:75:83:ff:4f:be:05:58:24:e7:07:cf:10:d4:1c:bd:
         11:ab:bc:e7:08:5d:c5:9f:ac:82:54:38:5a:e3:17:b6:b7:32:
         4b:37:77:34:7c:73:af:cb:dd:db:22:ab:14:fa:f0:0b:a4:c6:
         e4:64:89:ba:62:8c:26:2f:47:ea:64:c9:87:95:43:37:27:28:
         4e:dc:01:f6:f7:e7:3d:1f:79:fe:71:a0:2f:25:b6:e8:4d:f6:
         c3:fb:5e:68:81:51:eb:59:8a:d7:10:67:39:dc:23:3f:b5:6b:
         09:b0:4c:15:42:fe:a8:fb:c5:32:e5:a1:93:7a:3a:33:9b:e6:
         1d:18:db:9b:93:21:67:7a:8c:5a:82:94:28:a2:3c:3c:ed:81:
         d1:7d:46:35:51:d4:90:07:f4:c4:a1:4e:f8:5e:3d:61:50:cf:
         a8:e5:62:f3:b4:6b:80:91:be:04:a8:9b:30:8b:9c:5f:54:d8:
         70:0d:0b:25:d2:2f:e0:7e:39:b5:57:6d:2a:5a:11:3b:60:3d:
         6a:90:e4:6b
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEqkK3KcoGv7RTYX4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWYzZmJhZTAtYWQ2Zi00ZDI3LWJhYmMtZDJjNmFlMTFh
MmNiMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
OTA1ZjZhYTMtOWY3ZC00MzQyLThhZDYtZmI5ZGMwNThkMzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIQiP4xyCVwre+ntTjQijn1pUPqV1fIyYC7l
gwXMEyeNJX6FdNEcDWby9aTG+wDt3tp/5WCaVyEfYa7R7XgJAcl617sGRTM0BMmP
Ex0cCvNX2Y/c1+x/QZ0/OQj0YI6hejNk5XCGHqzFT6ely+xzbmBshDrCKRzdQUSy
fljFEKO5RYiAXU/50LZDQlA8uhMfzjpA9264rQC2VlZM2nOjBUg3nfB6z/kDT5ic
pvAzaoSm42/ZYpSs/YAWDykVPfuDKAHFCCJgE2eKrOgaGf5eyUEhhnm0lLQ+PrMs
HVZldLPfn7FuFbNBXkU3Npj5JqVkeuD8el5YMQO9EzDQp3WUQwIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFPfy0DzDNmJdaq9sbFn1w8EzULu3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNm
YmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2YWUxMWEyY2IvMGMxZmVmYjEtNTZjZS0z
NmVkLTk2NjAtN2Y2OTZlYWFkMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWYzZmJhZTAtYWQ2Zi00ZDI3LWJh
YmMtZDJjNmFlMTFhMmNiLzVmM2ZiYWUwLWFkNmYtNGQyNy1iYWJjLWQyYzZhZTEx
YTJjYi5jcmwwHwYDVR0jBBgwFoAUSbDUUzV5ZOgQDYjaiPi3ItJX42MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNmYmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2
YWUxMWEyY2IuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBF66YAwQC
RUOkAwQDov7gAwQDzx3AMA0EAgACMAcDBQAmB5VAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADT0asrmT9n+
sDHruAH1KoxZ5Js1CjCbk0XBjfzDgw5ErQDDQXBYO/iFKRLAqm7ApyPUK1nOOZ5L
lnWD/0++BVgk5wfPENQcvRGrvOcIXcWfrIJUOFrjF7a3Mks3dzR8c6/L3dsiqxT6
8AukxuRkibpijCYvR+pkyYeVQzcnKE7cAfb35z0fef5xoC8ltuhN9sP7XmiBUetZ
itcQZzncIz+1awmwTBVC/qj7xTLloZN6OjOb5h0Y25uTIWd6jFqClCiiPDztgdF9
RjVR1JAH9MShTvhePWFQz6jlYvO0a4CRvgSomzCLnF9U2HANCyXSL+B+ObVXbSpa
ETtgPWqQ5Gs=
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:30 2025 by rpki-client