Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/f08439e1-3980-3bc6-847a-4d8c0935209e.roa
File:                     f08439e1-3980-3bc6-847a-4d8c0935209e.roa (raw, json)
Hash identifier:          fw2KQHBfiZ23x+2UVRCP+k8M8yGIAnTznm/TBbBt2Eo=
Subject key identifier:   8B:98:A9:20:E3:16:88:14:B4:BB:24:87:11:C7:49:C6:82:6D:60:53
Certificate issuer:       /CN=54ef2b12-4c16-4f8f-88fb-0070607e9754
Certificate serial:       010D0C9F4328584A8B0B5F3D02EA2D81A4163AC0
Authority key identifier: B5:EB:90:83:FB:F9:3B:9E:18:AF:9D:0D:3D:A1:19:5C:C8:C9:94:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/f08439e1-3980-3bc6-847a-4d8c0935209e.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     36222
IP address blocks:        136.143.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/54ef2b12-4c16-4f8f-88fb-0070607e9754.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/54ef2b12-4c16-4f8f-88fb-0070607e9754.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:5f:3d:02:ea:2d:81:a4:16:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ef2b12-4c16-4f8f-88fb-0070607e9754
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=9da8028c-86bc-4d9a-848c-c447887bff4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:cb:05:83:0d:2b:7e:01:d5:a8:5b:10:07:
                    56:66:48:9d:5a:76:05:dc:67:84:44:c9:7d:28:c2:
                    da:d0:cf:67:7a:5f:9f:ca:59:fb:51:c0:f5:f4:ee:
                    cb:b5:8d:e2:21:13:b1:f1:db:0b:4f:bb:b9:c5:09:
                    b4:16:1f:b2:53:ad:66:98:6c:14:82:f0:08:92:02:
                    9f:eb:4c:b2:a2:cc:5e:37:d4:a1:f5:ec:5f:09:e9:
                    8d:61:79:96:88:a7:55:ed:7a:03:ea:22:51:01:cb:
                    c6:d9:5f:a0:3e:e5:4e:a6:a1:c9:5c:90:76:35:33:
                    0a:57:62:ce:0f:43:34:53:8a:2b:e7:7a:51:a1:2b:
                    f4:c2:68:8f:f5:3b:c3:8a:91:5b:bf:f0:fc:40:5a:
                    2e:fd:db:20:1b:bf:f3:6c:a2:2d:12:d2:70:95:aa:
                    e2:32:3b:45:db:7c:c2:4d:b1:e1:a2:24:9f:6e:ef:
                    af:7c:6e:a9:00:06:90:c4:cb:f9:62:03:1d:e8:0e:
                    3b:af:14:d0:0f:eb:64:88:41:cd:72:76:c5:9e:c4:
                    e7:f4:e1:42:7e:d1:0f:3c:a4:18:62:07:f9:a0:8a:
                    ca:ea:8f:98:95:60:45:89:bd:9b:27:43:96:7e:bf:
                    13:29:5d:4a:64:e7:ee:a8:c9:9d:1d:14:88:6a:74:
                    b5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:98:A9:20:E3:16:88:14:B4:BB:24:87:11:C7:49:C6:82:6D:60:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/f08439e1-3980-3bc6-847a-4d8c0935209e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/54ef2b12-4c16-4f8f-88fb-0070607e9754.crl

            X509v3 Authority Key Identifier:
                keyid:B5:EB:90:83:FB:F9:3B:9E:18:AF:9D:0D:3D:A1:19:5C:C8:C9:94:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.143.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f2:2b:66:81:90:49:15:97:1a:db:ab:ff:89:dd:f0:7a:23:
         99:f2:ae:31:7e:e8:02:da:6b:b6:6d:56:27:92:6e:e6:63:fe:
         b1:c0:3b:7b:49:14:52:1f:75:8d:83:ba:d5:4d:54:84:b1:6b:
         4b:4f:f2:11:21:cd:42:c5:be:07:62:81:39:2d:f5:be:a4:bb:
         c7:7d:96:69:bc:42:7b:a9:b0:11:8a:c3:0f:95:58:94:f2:18:
         f4:d8:47:5d:04:1a:76:17:ce:98:c5:6b:f9:df:3d:32:a7:8d:
         4d:bc:04:02:f6:92:ad:8d:d6:86:5b:b6:7e:d1:25:ed:f1:2e:
         50:8f:9b:f8:0c:53:4a:9a:9d:a9:d9:03:1a:f4:57:c7:ad:1e:
         6c:3b:64:c2:71:5a:e6:18:52:c6:f8:52:c5:c7:65:2d:a1:43:
         ea:9f:15:37:fe:d7:e4:4b:87:aa:a6:86:24:40:d5:10:6e:8f:
         3f:ba:84:73:93:1d:76:69:6e:dd:ac:0b:d6:7a:7f:b2:21:f0:
         d7:a7:d5:65:e5:3b:75:cd:0d:a3:b3:ab:93:4e:76:30:d5:d0:
         16:75:63:71:94:26:05:8c:00:dc:e5:28:92:a1:bd:65:e4:f2:
         7a:18:66:71:fd:97:8c:93:15:be:28:4d:6b:64:34:d7:3d:da:
         c8:27:70:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC189AuotgaQWOsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTRlZjJiMTItNGMxNi00ZjhmLTg4ZmItMDA3MDYwN2U5
NzU0MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk
OWRhODAyOGMtODZiYy00ZDlhLTg0OGMtYzQ0Nzg4N2JmZjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTLLBYMNK34B1ahbEAdWZkidWnYF3GeERMl9
KMLa0M9nel+fyln7UcD19O7LtY3iIROx8dsLT7u5xQm0Fh+yU61mmGwUgvAIkgKf
60yyosxeN9Sh9exfCemNYXmWiKdV7XoD6iJRAcvG2V+gPuVOpqHJXJB2NTMKV2LO
D0M0U4or53pRoSv0wmiP9TvDipFbv/D8QFou/dsgG7/zbKItEtJwlariMjtF23zC
TbHhoiSfbu+vfG6pAAaQxMv5YgMd6A47rxTQD+tkiEHNcnbFnsTn9OFCftEPPKQY
Ygf5oIrK6o+YlWBFib2bJ0OWfr8TKV1KZOfuqMmdHRSIanS15QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIuYqSDjFogUtLskhxHHScaCbWBTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NGVm
MmIxMi00YzE2LTRmOGYtODhmYi0wMDcwNjA3ZTk3NTQvZjA4NDM5ZTEtMzk4MC0z
YmM2LTg0N2EtNGQ4YzA5MzUyMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTRlZjJiMTItNGMxNi00ZjhmLTg4
ZmItMDA3MDYwN2U5NzU0LzU0ZWYyYjEyLTRjMTYtNGY4Zi04OGZiLTAwNzA2MDdl
OTc1NC5jcmwwHwYDVR0jBBgwFoAUteuQg/v5O54Yr50NPaEZXMjJlKkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81NGVmMmIxMi00YzE2LTRmOGYtODhmYi0wMDcw
NjA3ZTk3NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiI+DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7yK2aBkEkVlxrbq/+J3fB6I5nyrjF+6ALaa7ZtVieSbuZj/rHAO3tJ
FFIfdY2DutVNVISxa0tP8hEhzULFvgdigTkt9b6ku8d9lmm8QnupsBGKww+VWJTy
GPTYR10EGnYXzpjFa/nfPTKnjU28BAL2kq2N1oZbtn7RJe3xLlCPm/gMU0qananZ
Axr0V8etHmw7ZMJxWuYYUsb4UsXHZS2hQ+qfFTf+1+RLh6qmhiRA1RBujz+6hHOT
HXZpbt2sC9Z6f7Ih8Nen1WXlO3XNDaOzq5NOdjDV0BZ1Y3GUJgWMANzlKJKhvWXk
8noYZnH9l4yTFb4oTWtkNNc92sgncH4=
-----END CERTIFICATE-----
Generated at Tue Aug 5 08:21:55 2025 by rpki-client