Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1ddb07cf-bcdb-3ab3-80d6-1a6fe9455f7d.roa
File:                     1ddb07cf-bcdb-3ab3-80d6-1a6fe9455f7d.roa (raw, json)
Hash identifier:          2B/1jsPQJ0KmT1OBXODQdIhdQWjv8vozGIv/h0zCgFY=
Subject key identifier:   1D:B1:89:CD:34:7C:6D:8A:E5:7A:34:53:6C:99:5A:86:23:61:F1:2E
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584AA6F63016F61588F6AE161710
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1ddb07cf-bcdb-3ab3-80d6-1a6fe9455f7d.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     376
IP address blocks:        132.219.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:30:16:f6:15:88:f6:ae:16:17:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=a219a368-2a04-4e3f-81ca-cb770d766399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:59:3a:4b:a9:84:88:2d:9c:37:c4:31:b6:15:
                    68:28:6c:00:ce:ef:b4:de:8d:12:16:f6:39:fb:ca:
                    6c:cc:61:e4:8c:9a:42:d0:d4:dd:c6:00:8b:d7:42:
                    1b:37:47:84:9d:c7:61:c4:c8:9a:aa:d8:10:58:c3:
                    26:ad:bd:ba:6a:0c:69:8d:b0:6b:4a:dc:02:69:b2:
                    9b:02:d4:74:8e:37:f0:dc:37:c7:3c:22:d6:bd:b7:
                    2a:af:ee:00:28:c6:84:ad:83:fd:13:b7:06:88:f2:
                    47:68:1b:aa:29:d0:f1:48:ec:f7:0d:23:8f:d5:54:
                    bd:d0:99:04:b3:fa:bd:45:cc:e0:91:ff:2b:ba:0a:
                    a0:31:06:0a:3e:8b:6c:33:8b:51:b0:25:01:ac:a2:
                    69:e8:13:59:98:e7:8a:f0:c1:40:9e:2f:9b:9e:dd:
                    ce:d1:7a:d7:e6:f2:5e:f5:70:47:bc:e1:be:92:10:
                    89:0f:52:64:c5:8d:49:91:1b:a7:c0:ce:78:35:ee:
                    61:26:cd:a9:91:6e:ae:fc:54:ab:03:21:c4:97:5a:
                    cb:96:1a:66:ef:18:84:e1:a0:ed:81:51:28:7d:69:
                    2c:03:01:04:35:d9:9f:5f:fd:d1:fd:e7:da:74:b0:
                    17:2b:04:16:2f:16:3d:2b:ad:60:a6:43:0a:c2:e6:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B1:89:CD:34:7C:6D:8A:E5:7A:34:53:6C:99:5A:86:23:61:F1:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1ddb07cf-bcdb-3ab3-80d6-1a6fe9455f7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ba:95:89:53:87:a1:89:66:cc:af:0e:56:5f:08:19:d1:3d:
         7e:f2:8f:47:bf:77:aa:29:77:16:a9:a7:55:87:42:94:d8:3d:
         21:11:bf:78:6d:62:c8:d2:be:15:b1:69:76:e6:6e:da:be:0b:
         ff:8b:49:d2:5c:95:a8:84:21:cc:f1:c6:f3:a5:07:bd:4a:91:
         fe:b4:00:7f:c3:49:9a:8b:0b:68:a1:b1:9c:a3:2a:81:c6:81:
         b1:e8:5c:e6:92:6e:d1:87:cf:89:97:38:61:7a:ed:8f:be:1e:
         68:64:04:5a:ca:ec:38:58:0c:7d:ac:5f:2c:89:2d:40:42:13:
         4e:76:90:09:03:01:07:e0:24:37:a7:a1:1c:d2:de:8e:9f:1c:
         46:bd:4a:69:16:4f:4a:60:3d:36:14:66:f3:16:ea:5f:21:78:
         48:3b:4b:4c:09:22:71:02:fd:44:4a:9b:0d:f6:58:86:dd:dc:
         70:69:8e:a0:b3:3f:cc:44:41:aa:7a:4f:85:f4:51:79:3c:ea:
         ab:60:30:12:4d:1d:ba:cc:bc:2b:dd:4f:88:64:ba:f4:4e:19:
         99:cb:6d:a1:0c:20:7b:8b:fe:3f:22:ac:cc:b8:b4:91:09:40:
         95:e8:28:b1:95:3e:18:41:67:14:3f:1d:62:a8:2c:c8:21:c4:
         58:50:51:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9jAW9hWI9q4WFxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
YTIxOWEzNjgtMmEwNC00ZTNmLTgxY2EtY2I3NzBkNzY2Mzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlk6S6mEiC2cN8QxthVoKGwAzu+03o0SFvY5
+8pszGHkjJpC0NTdxgCL10IbN0eEncdhxMiaqtgQWMMmrb26agxpjbBrStwCabKb
AtR0jjfw3DfHPCLWvbcqr+4AKMaErYP9E7cGiPJHaBuqKdDxSOz3DSOP1VS90JkE
s/q9Rczgkf8rugqgMQYKPotsM4tRsCUBrKJp6BNZmOeK8MFAni+bnt3O0XrX5vJe
9XBHvOG+khCJD1JkxY1JkRunwM54Ne5hJs2pkW6u/FSrAyHEl1rLlhpm7xiE4aDt
gVEofWksAwEENdmfX/3R/efadLAXKwQWLxY9K61gpkMKwuZvGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB2xic00fG2K5Xo0U2yZWoYjYfEuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvMWRkYjA3Y2YtYmNkYi0z
YWIzLTgwZDYtMWE2ZmU5NDU1ZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhNuWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADG6lYlTh6GJZsyvDlZfCBnRPX7yj0e/d6opdxapp1WHQpTYPSERv3ht
YsjSvhWxaXbmbtq+C/+LSdJclaiEIczxxvOlB71Kkf60AH/DSZqLC2ihsZyjKoHG
gbHoXOaSbtGHz4mXOGF67Y++HmhkBFrK7DhYDH2sXyyJLUBCE052kAkDAQfgJDen
oRzS3o6fHEa9SmkWT0pgPTYUZvMW6l8heEg7S0wJInEC/URKmw32WIbd3HBpjqCz
P8xEQap6T4X0UXk86qtgMBJNHbrMvCvdT4hkuvROGZnLbaEMIHuL/j8irMy4tJEJ
QJXoKLGVPhhBZxQ/HWKoLMghxFhQUR0=
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:38:08 2025 by rpki-client