Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/81b444a7-e2f8-3532-9231-a3a0dbf76f11.roa
File:                     81b444a7-e2f8-3532-9231-a3a0dbf76f11.roa (raw, json)
Hash identifier:          ksiVWkDF7YjeTTix/5upZhMe1bhbXbOnzULRdBjgbDI=
Subject key identifier:   91:C7:93:12:DA:21:CA:23:95:71:53:5B:43:8C:98:C1:16:34:62:7C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB220D13EE68B038C420C1CE0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/81b444a7-e2f8-3532-9231-a3a0dbf76f11.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     13767
IP address blocks:        64.125.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d1:3e:e6:8b:03:8c:42:0c:1c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=ffdbc260-d22a-4834-9617-43848980eb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:a5:42:3b:e0:e2:32:c7:0e:78:29:cb:bf:
                    52:e9:6a:c6:10:88:ed:4b:1f:e1:cb:67:27:80:24:
                    be:4c:be:70:58:0f:13:96:d2:42:55:05:cf:3d:1c:
                    c4:ec:75:cb:05:4a:1e:76:b7:1d:68:ab:4b:3c:ac:
                    ec:0c:28:67:51:b9:6f:c2:0e:89:20:94:21:84:e9:
                    3f:e8:5a:68:03:b2:28:1c:47:06:b1:5a:61:66:d7:
                    5c:0d:13:66:c7:cb:5a:83:a9:bf:fa:48:79:6d:dc:
                    5d:0b:68:4d:67:dc:52:20:7a:73:d2:8a:02:e6:78:
                    ff:18:18:5c:60:68:c2:af:7c:fc:a7:b0:16:cd:5d:
                    7c:88:33:78:84:2d:c7:0d:b3:16:c8:dd:45:8e:c1:
                    1b:1c:02:cc:8c:5a:1c:1d:4f:c1:c5:09:1c:30:c7:
                    e7:c2:72:65:77:2b:4c:1e:a9:2d:40:5c:85:58:b6:
                    e1:3d:c7:a2:0a:a7:3b:5b:e6:21:fe:df:42:6c:a5:
                    c3:26:7b:20:2f:c9:e4:d3:a2:96:01:24:55:c1:8a:
                    86:fb:5d:ee:12:3c:26:b7:70:59:32:04:1d:78:d1:
                    80:05:54:5d:38:e8:e7:04:64:7f:65:4d:ee:92:aa:
                    98:20:3f:ca:41:f5:4e:5f:0e:b2:83:29:cc:87:ef:
                    28:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C7:93:12:DA:21:CA:23:95:71:53:5B:43:8C:98:C1:16:34:62:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/81b444a7-e2f8-3532-9231-a3a0dbf76f11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:8c:f9:f8:5f:83:12:1d:dd:3a:09:25:95:04:10:ba:dc:2b:
         fe:73:a5:64:01:9b:13:ef:40:c2:8e:47:0b:22:01:4a:ae:a7:
         d3:96:16:5b:fe:7d:59:32:6f:0f:2f:ec:5a:42:7c:11:67:99:
         6b:12:36:23:90:c6:60:73:4b:85:72:08:37:9d:e7:02:30:61:
         5a:85:78:7e:eb:00:49:7d:45:8b:1e:e2:bf:5e:27:4e:f9:d3:
         a7:98:3b:1b:ac:ae:7d:db:82:aa:ad:4c:18:43:f9:7c:e7:80:
         86:66:71:98:34:cf:37:d6:0a:57:58:57:48:60:4a:aa:ee:89:
         d7:c2:fc:3f:33:90:8a:e9:57:db:04:60:11:81:d0:27:86:a9:
         9a:e2:28:62:e8:ef:45:85:26:d7:f3:d3:69:79:64:f5:30:e3:
         d1:1f:a2:5c:31:70:3f:8f:3c:55:bd:19:4f:9f:6e:50:f4:90:
         91:77:c1:5d:0f:bc:5d:d9:7b:9f:54:b8:9b:86:81:11:11:bd:
         33:81:3f:dc:b5:bb:a8:40:66:e3:60:b1:32:f8:96:ef:4d:12:
         fd:00:36:33:28:e5:43:d3:c1:85:3e:97:e5:06:bc:91:a9:f3:
         bd:d9:1f:2f:b6:f4:c7:20:bd:63:f9:3c:dd:7c:3d:6c:c5:dd:
         97:24:0d:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyINE+5osDjEIMHOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZmZkYmMyNjAtZDIyYS00ODM0LTk2MTctNDM4NDg5ODBlYjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb6lQjvg4jLHDngpy79S6WrGEIjtSx/hy2cn
gCS+TL5wWA8TltJCVQXPPRzE7HXLBUoedrcdaKtLPKzsDChnUblvwg6JIJQhhOk/
6FpoA7IoHEcGsVphZtdcDRNmx8tag6m/+kh5bdxdC2hNZ9xSIHpz0ooC5nj/GBhc
YGjCr3z8p7AWzV18iDN4hC3HDbMWyN1FjsEbHALMjFocHU/BxQkcMMfnwnJldytM
HqktQFyFWLbhPceiCqc7W+Yh/t9CbKXDJnsgL8nk06KWASRVwYqG+13uEjwmt3BZ
MgQdeNGABVRdOOjnBGR/ZU3ukqqYID/KQfVOXw6ygynMh+8oVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJHHkxLaIcojlXFTW0OMmMEWNGJ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvODFiNDQ0YTctZTJmOC0z
NTMyLTkyMzEtYTNhMGRiZjc2ZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQH3mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGuM+fhfgxId3ToJJZUEELrcK/5zpWQBmxPvQMKORwsiAUqup9OWFlv+
fVkybw8v7FpCfBFnmWsSNiOQxmBzS4VyCDed5wIwYVqFeH7rAEl9RYse4r9eJ075
06eYOxusrn3bgqqtTBhD+XzngIZmcZg0zzfWCldYV0hgSqruidfC/D8zkIrpV9sE
YBGB0CeGqZriKGLo70WFJtfz02l5ZPUw49EfolwxcD+PPFW9GU+fblD0kJF3wV0P
vF3Ze59UuJuGgRERvTOBP9y1u6hAZuNgsTL4lu9NEv0ANjMo5UPTwYU+l+UGvJGp
873ZHy+29McgvWP5PN18PWzF3ZckDdM=
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:52:27 2025 by rpki-client