Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/e5c08dc1-62f6-3f2e-954e-8d36648fbf97.roa
File:                     e5c08dc1-62f6-3f2e-954e-8d36648fbf97.roa (raw, json)
Hash identifier:          xHFfK7kWl848hp6XpOGrLej19kRczDUAnMJb9PBFPLc=
Subject key identifier:   1F:67:B7:BE:7B:A3:5B:90:66:75:F5:5C:F6:20:65:20:15:1A:9F:E9
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584ABEB0DE791C166FBADF8E4B00
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/e5c08dc1-62f6-3f2e-954e-8d36648fbf97.roa
Signing time:             Mon 04 Aug 2025 13:00:36 +0000
ROA not before:           Mon 04 Aug 2025 13:00:36 +0000
ROA not after:            Sun 02 Nov 2025 14:00:36 +0000
asID:                     393611
IP address blocks:        169.145.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:b0:de:79:1c:16:6f:ba:df:8e:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Aug  4 13:00:36 2025 GMT
            Not After : Nov  2 14:00:36 2025 GMT
        Subject: CN=2bb86e65-384c-42c5-a208-bc4c1952e18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:37:0c:d9:7a:46:57:98:ad:fd:a5:bc:51:
                    13:63:d2:16:f5:05:ae:b9:56:dc:93:2b:90:51:2c:
                    a3:cb:7d:03:f2:59:03:31:49:5d:85:17:68:b3:cc:
                    11:a2:6b:33:55:80:34:55:5d:c9:82:f3:cd:29:14:
                    b8:72:6d:30:d7:58:a3:61:b3:57:66:44:df:9e:08:
                    65:0d:d6:95:c5:63:33:50:c4:fd:cf:b5:94:88:6a:
                    3a:3d:6f:1c:d4:17:25:2d:e3:0d:f0:0d:18:95:f0:
                    0e:f0:80:b1:38:58:6e:cc:2b:fa:ab:6f:a0:7b:b0:
                    bf:7d:1d:2a:94:49:7f:b4:88:1f:39:9e:19:85:f0:
                    ed:61:c7:6f:90:ae:2b:df:6d:e9:e4:5f:66:e3:09:
                    e2:2f:e0:e5:d6:4a:97:68:9b:5e:4c:3d:c3:82:5a:
                    64:49:8b:10:0b:e1:ca:0d:f4:42:7e:b1:1d:ea:df:
                    52:0d:43:f5:01:cf:8b:10:87:33:d3:8d:1f:03:bc:
                    6a:ef:6e:c8:33:65:c3:9d:03:1a:02:ca:33:b2:42:
                    97:70:69:7f:da:a5:60:cc:30:a2:44:2d:73:23:63:
                    78:6f:bb:67:34:6d:7f:13:82:cf:fe:41:72:3c:92:
                    fc:56:86:9b:b0:f7:f9:e1:d0:19:d7:f3:f4:a4:eb:
                    90:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:67:B7:BE:7B:A3:5B:90:66:75:F5:5C:F6:20:65:20:15:1A:9F:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/e5c08dc1-62f6-3f2e-954e-8d36648fbf97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:f5:44:90:49:04:2b:20:94:9c:05:96:f4:17:70:43:07:61:
         72:77:30:8f:24:b6:98:31:1e:5b:97:97:9a:b5:3f:fb:d0:fc:
         a6:6c:b4:dc:b1:eb:a0:3c:23:23:d4:7d:86:80:bd:29:c4:49:
         9f:a4:ad:1b:73:69:16:74:5f:7f:77:3c:82:40:b1:47:1a:45:
         c7:dc:2c:7d:06:91:78:b4:4e:86:31:89:43:bf:c6:88:27:51:
         63:d6:37:fb:cd:0f:77:b6:96:4e:25:d6:e0:a6:79:ed:bc:3d:
         4d:7f:9f:85:8c:85:b9:ed:1e:e4:46:20:dd:fe:35:22:11:50:
         e6:85:fb:35:93:eb:71:8f:e2:30:c2:70:90:55:07:2b:99:ac:
         c2:17:13:26:95:19:23:5a:ca:b5:c9:55:56:d5:d3:25:b1:a1:
         37:c8:62:42:d9:ab:d7:92:4b:e8:b9:67:83:06:45:c6:94:dd:
         71:fb:75:e3:bf:82:b7:4e:12:e5:23:ca:e2:74:76:37:9d:e6:
         b4:d1:6e:cc:78:38:d9:68:46:a3:0f:8d:e0:45:38:77:d0:f1:
         76:47:22:a0:f5:fe:d2:b5:55:60:de:c1:0e:e1:de:22:5f:74:
         ba:fe:f7:4f:8a:3b:1b:29:de:59:e8:9b:28:f9:ca:d1:77:45:
         20:97:3c:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq+sN55HBZvut+OSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzgzNzk5NWItY2M4MC00ZTIzLWFmMDctY2Q0MjJkMGQz
N2E5MB4XDTI1MDgwNDEzMDAzNloXDTI1MTEwMjE0MDAzNlowLzEtMCsGA1UEAxMk
MmJiODZlNjUtMzg0Yy00MmM1LWEyMDgtYmM0YzE5NTJlMThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBE3DNl6RleYrf2lvFETY9IW9QWuuVbckyuQ
USyjy30D8lkDMUldhRdos8wRomszVYA0VV3JgvPNKRS4cm0w11ijYbNXZkTfnghl
DdaVxWMzUMT9z7WUiGo6PW8c1BclLeMN8A0YlfAO8ICxOFhuzCv6q2+ge7C/fR0q
lEl/tIgfOZ4ZhfDtYcdvkK4r323p5F9m4wniL+Dl1kqXaJteTD3DglpkSYsQC+HK
DfRCfrEd6t9SDUP1Ac+LEIcz040fA7xq727IM2XDnQMaAsozskKXcGl/2qVgzDCi
RC1zI2N4b7tnNG1/E4LP/kFyPJL8VoabsPf54dAZ1/P0pOuQcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB9nt757o1uQZnX1XPYgZSAVGp/pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3
OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQyMmQwZDM3YTkvZTVjMDhkYzEtNjJmNi0z
ZjJlLTk1NGUtOGQzNjY0OGZiZjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzgzNzk5NWItY2M4MC00ZTIzLWFm
MDctY2Q0MjJkMGQzN2E5LzM4Mzc5OTViLWNjODAtNGUyMy1hZjA3LWNkNDIyZDBk
MzdhOS5jcmwwHwYDVR0jBBgwFoAUTaXny8du945GEkC7oBxE2P5AZ0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQy
MmQwZDM3YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqZGOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHX1RJBJBCsglJwFlvQXcEMHYXJ3MI8ktpgxHluXl5q1P/vQ/KZstNyx
66A8IyPUfYaAvSnESZ+krRtzaRZ0X393PIJAsUcaRcfcLH0GkXi0ToYxiUO/xogn
UWPWN/vND3e2lk4l1uCmee28PU1/n4WMhbntHuRGIN3+NSIRUOaF+zWT63GP4jDC
cJBVByuZrMIXEyaVGSNayrXJVVbV0yWxoTfIYkLZq9eSS+i5Z4MGRcaU3XH7deO/
grdOEuUjyuJ0djed5rTRbsx4ONloRqMPjeBFOHfQ8XZHIqD1/tK1VWDewQ7h3iJf
dLr+90+KOxsp3lnomyj5ytF3RSCXPAs=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:20:32 2025 by rpki-client