Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/8812d0ab-a5fd-3d87-9288-fa172ea55fe5.roa
File:                     8812d0ab-a5fd-3d87-9288-fa172ea55fe5.roa (raw, json)
Hash identifier:          2ov9y6n3t9SrfWewQfUwafWpU6qxAnKGid6O/D18v/w=
Subject key identifier:   F9:A6:BA:A3:E8:EC:01:CF:D6:6B:CA:BA:37:5B:F6:1F:21:AB:AB:04
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F4328584A0C0553B33DDF6662698DD000
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/8812d0ab-a5fd-3d87-9288-fa172ea55fe5.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        192.80.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:53:b3:3d:df:66:62:69:8d:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=776b9b78-259b-4be1-8abb-a55392833ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:4a:75:2b:6a:24:b4:41:fc:a5:d1:3a:d1:
                    da:6e:52:a3:97:f4:99:14:06:91:89:3c:62:99:56:
                    1c:32:e8:34:4b:a3:44:c3:49:bc:4d:00:b5:ed:7f:
                    28:91:0c:7b:4e:9d:55:47:14:ca:2c:71:83:6a:f7:
                    68:13:a5:10:31:5d:af:9a:92:20:aa:22:bc:71:73:
                    b4:f7:d3:ad:7f:85:57:69:ee:69:ac:3a:4b:4b:8d:
                    d0:09:c8:65:2d:a6:94:f7:2a:5c:a6:89:52:64:f3:
                    98:3e:30:09:99:83:59:36:1c:8a:93:a6:80:ec:66:
                    c0:9d:b0:1a:28:6a:dd:4c:5a:8b:c9:ad:a2:e5:52:
                    e0:da:84:b3:28:9c:c5:71:a4:7d:d0:25:a9:66:76:
                    de:0e:6f:89:66:31:37:44:ff:3e:e7:7f:91:59:e5:
                    54:69:aa:0d:72:0c:c7:92:e2:88:69:9c:2d:b1:2e:
                    08:1c:2e:db:10:9f:54:7d:12:a8:82:21:45:c6:5c:
                    59:0f:93:d2:31:50:61:26:4d:d2:3d:ad:ed:e7:d0:
                    75:cf:64:3c:6b:e2:67:5f:8c:ac:69:57:fe:cf:6c:
                    a7:ce:c1:d7:da:83:b5:6f:d6:98:c6:b4:d2:df:c2:
                    74:43:7d:e7:77:ff:b8:a2:9f:16:b3:4d:77:19:d2:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A6:BA:A3:E8:EC:01:CF:D6:6B:CA:BA:37:5B:F6:1F:21:AB:AB:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/8812d0ab-a5fd-3d87-9288-fa172ea55fe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:85:90:30:f1:d0:ca:84:26:d6:f3:a0:9e:14:e0:83:81:
         7d:e2:0a:88:db:96:4f:90:97:42:72:2d:23:ac:70:1b:33:4e:
         b1:4e:84:81:0a:5e:cb:58:f3:10:e6:c9:fb:93:84:f4:ed:1d:
         1c:e4:3c:4b:58:31:7e:dd:55:5d:53:79:7c:89:64:53:ed:b3:
         c1:69:27:99:30:49:65:fe:87:89:3f:d0:42:9d:88:5f:61:14:
         ff:dc:c9:0e:0b:72:0d:35:98:3e:88:12:e9:c3:ab:ac:0b:b6:
         0e:f6:24:c9:03:b2:88:4a:f0:2e:84:56:d3:fa:1f:5c:08:de:
         3f:94:e7:71:7d:b2:e4:e3:e6:00:e4:6e:d9:16:21:e6:76:e7:
         e3:c9:39:08:56:0a:f7:e5:64:db:79:0a:a2:9d:f2:d0:32:27:
         b6:41:34:bf:93:b7:99:e1:40:cd:fa:3b:ac:f4:fc:83:17:9e:
         1a:9a:c1:48:35:ba:b0:c7:b1:c5:3d:e6:be:b4:bc:f8:01:68:
         37:0d:5c:07:c6:1b:47:e1:5b:0b:38:3f:e7:2d:23:0f:54:9d:
         17:03:91:62:1f:c6:a1:da:1a:59:18:3c:65:7f:22:d2:18:f0:
         e2:02:a3:d6:03:29:ec:6e:34:60:47:89:0e:42:54:1b:70:bb:
         b1:d6:ed:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVOzPd9mYmmN0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzQ3Y2UtOWE0ZC00NzBjLWIzYTEtZGZjMzZmOWM3
OGRkMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
Nzc2YjliNzgtMjU5Yi00YmUxLThhYmItYTU1MzkyODMzZWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRBKdStqJLRB/KXROtHablKjl/SZFAaRiTxi
mVYcMug0S6NEw0m8TQC17X8okQx7Tp1VRxTKLHGDavdoE6UQMV2vmpIgqiK8cXO0
99Otf4VXae5prDpLS43QCchlLaaU9ypcpolSZPOYPjAJmYNZNhyKk6aA7GbAnbAa
KGrdTFqLya2i5VLg2oSzKJzFcaR90CWpZnbeDm+JZjE3RP8+53+RWeVUaaoNcgzH
kuKIaZwtsS4IHC7bEJ9UfRKogiFFxlxZD5PSMVBhJk3SPa3t59B1z2Q8a+JnX4ys
aVf+z2ynzsHX2oO1b9aYxrTS38J0Q33nd/+4op8Ws013GdIlYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPmmuqPo7AHP1mvKujdb9h8hq6sEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3
NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMzNmY5Yzc4ZGQvODgxMmQwYWItYTVmZC0z
ZDg3LTkyODgtZmExNzJlYTU1ZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JhNzQ3Y2UtOWE0ZC00NzBjLWIz
YTEtZGZjMzZmOWM3OGRkLzdiYTc0N2NlLTlhNGQtNDcwYy1iM2ExLWRmYzM2Zjlj
NzhkZC5jcmwwHwYDVR0jBBgwFoAU2cENbez66cRVgdY1AR7AbdZwSqowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMz
NmY5Yzc4ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFDzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdshZAw8dDKhCbW86CeFOCDgX3iCojblk+Ql0JyLSOscBszTrFOhIEK
XstY8xDmyfuThPTtHRzkPEtYMX7dVV1TeXyJZFPts8FpJ5kwSWX+h4k/0EKdiF9h
FP/cyQ4Lcg01mD6IEunDq6wLtg72JMkDsohK8C6EVtP6H1wI3j+U53F9suTj5gDk
btkWIeZ25+PJOQhWCvflZNt5CqKd8tAyJ7ZBNL+Tt5nhQM36O6z0/IMXnhqawUg1
urDHscU95r60vPgBaDcNXAfGG0fhWws4P+ctIw9UnRcDkWIfxqHaGlkYPGV/ItIY
8OICo9YDKexuNGBHiQ5CVBtwu7HW7eY=
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:31:00 2025 by rpki-client