Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/d8569905-c89c-3355-8466-f3e7230a68f9.roa
File:                     d8569905-c89c-3355-8466-f3e7230a68f9.roa (raw, json)
Hash identifier:          kaOvslQ7Qx41AeTWzWfGkkd0MS4g+bT4G9VE4A4G7GM=
Subject key identifier:   D0:84:7F:C8:89:F5:F9:4C:17:D0:B7:68:EA:ED:AB:2C:12:0F:42:3A
Certificate issuer:       /CN=d5776a8f-6996-4275-a804-f1fb7cdf0d72
Certificate serial:       010D0C9F4328584A1F901DBC8A024B6976643729
Authority key identifier: DA:E4:16:F2:8B:3A:BB:A3:60:CE:08:55:96:C9:87:78:3F:C8:A6:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/d8569905-c89c-3355-8466-f3e7230a68f9.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     1037
IP address blocks:        172.83.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/d5776a8f-6996-4275-a804-f1fb7cdf0d72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/d5776a8f-6996-4275-a804-f1fb7cdf0d72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:1d:bc:8a:02:4b:69:76:64:37:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5776a8f-6996-4275-a804-f1fb7cdf0d72
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=334ca94b-42c9-4658-aa95-05528cca063d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c7:75:18:55:ab:31:7b:9e:82:e6:b3:c0:df:
                    14:d9:16:d8:90:34:4b:d2:17:a9:7c:a0:80:00:72:
                    3e:5f:d1:57:9a:05:58:6f:00:32:26:0d:62:20:ad:
                    f0:ed:b9:03:09:52:e8:ad:bc:72:f8:e5:5c:48:18:
                    ae:c5:02:0a:0e:00:b9:b9:06:93:d3:2d:a4:c4:1d:
                    71:a9:c1:87:c8:a3:5f:a8:9c:98:2f:16:75:7d:ea:
                    e3:bc:5a:b5:7e:23:04:99:f5:68:c7:ad:e6:20:d0:
                    37:1a:1c:5e:06:f3:f0:8c:9c:f0:b2:39:f8:67:e5:
                    32:0b:5f:8b:a3:3f:27:ae:a6:88:77:aa:ba:22:99:
                    61:0d:c6:82:e3:27:e2:f5:a9:6e:db:42:0d:18:e8:
                    0a:a6:1f:b2:f7:af:b5:43:9d:b6:a8:85:0c:4e:8d:
                    60:4e:a9:66:66:f6:67:3f:d8:bf:bd:d0:69:fe:45:
                    c6:77:08:8d:8c:9c:09:7a:e3:bd:63:00:04:cd:0e:
                    7b:a6:a0:1e:d5:ab:17:cb:03:1d:72:7c:64:71:b9:
                    58:67:0e:ca:3f:7c:0e:1c:7f:61:23:58:29:8f:c9:
                    d6:fc:7e:1a:e8:ae:84:7d:f1:ad:9f:5f:6c:96:ab:
                    cc:cf:f4:a8:d7:09:4e:56:5d:39:3f:66:16:19:6c:
                    25:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:84:7F:C8:89:F5:F9:4C:17:D0:B7:68:EA:ED:AB:2C:12:0F:42:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/d8569905-c89c-3355-8466-f3e7230a68f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/d5776a8f-6996-4275-a804-f1fb7cdf0d72.crl

            X509v3 Authority Key Identifier:
                keyid:DA:E4:16:F2:8B:3A:BB:A3:60:CE:08:55:96:C9:87:78:3F:C8:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:3a:2c:6f:82:26:d9:bc:c3:12:61:cf:f3:4a:5d:52:89:c3:
         25:f2:94:62:24:7a:e2:25:82:bf:5a:02:61:50:26:95:59:b9:
         20:d1:d7:f5:7d:d1:b2:5c:ef:fa:86:21:ca:d8:1d:62:77:c7:
         4e:57:95:2f:ac:4e:06:3e:e7:39:79:cd:ce:d7:78:e7:86:70:
         f6:89:e1:a6:08:91:b7:32:d1:21:96:0e:e9:1c:fb:d6:6b:46:
         13:f0:34:3e:95:0a:df:0c:78:0e:0a:3e:61:43:ec:37:dc:99:
         84:4e:67:f0:69:e6:e4:32:01:f7:40:c7:b5:ef:25:35:0c:23:
         6c:75:3e:f8:ef:9b:df:76:b9:5e:a2:2a:22:d2:df:ef:b5:6e:
         33:66:36:94:5f:e4:96:f2:00:50:39:e2:39:fd:be:27:c4:4c:
         0b:02:f9:e2:5b:7d:ac:61:78:c8:ff:3f:b5:5c:5b:eb:46:5d:
         6e:95:25:0d:74:12:8e:51:6e:03:80:ef:57:2e:95:37:ed:a4:
         9b:1f:d9:3c:19:e0:27:a7:47:b3:fa:98:0c:a0:70:97:f2:56:
         c2:23:39:20:01:79:a3:2b:cf:9f:8b:86:16:6b:0e:0a:f2:bb:
         66:e0:84:b2:34:72:fb:03:91:db:7c:05:eb:df:9f:27:78:76:
         15:78:5e:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkB28igJLaXZkNykwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDU3NzZhOGYtNjk5Ni00Mjc1LWE4MDQtZjFmYjdjZGYw
ZDcyMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk
MzM0Y2E5NGItNDJjOS00NjU4LWFhOTUtMDU1MjhjY2EwNjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMd1GFWrMXueguazwN8U2RbYkDRL0hepfKCA
AHI+X9FXmgVYbwAyJg1iIK3w7bkDCVLorbxy+OVcSBiuxQIKDgC5uQaT0y2kxB1x
qcGHyKNfqJyYLxZ1ferjvFq1fiMEmfVox63mINA3GhxeBvPwjJzwsjn4Z+UyC1+L
oz8nrqaId6q6IplhDcaC4yfi9alu20INGOgKph+y96+1Q522qIUMTo1gTqlmZvZn
P9i/vdBp/kXGdwiNjJwJeuO9YwAEzQ57pqAe1asXywMdcnxkcblYZw7KP3wOHH9h
I1gpj8nW/H4a6K6EffGtn19slqvMz/So1wlOVl05P2YWGWwlXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNCEf8iJ9flMF9C3aOrtqywSD0I6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNTc3
NmE4Zi02OTk2LTQyNzUtYTgwNC1mMWZiN2NkZjBkNzIvZDg1Njk5MDUtYzg5Yy0z
MzU1LTg0NjYtZjNlNzIzMGE2OGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDU3NzZhOGYtNjk5Ni00Mjc1LWE4
MDQtZjFmYjdjZGYwZDcyL2Q1Nzc2YThmLTY5OTYtNDI3NS1hODA0LWYxZmI3Y2Rm
MGQ3Mi5jcmwwHwYDVR0jBBgwFoAU2uQW8os6u6NgzghVlsmHeD/IpqcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNTc3NmE4Zi02OTk2LTQyNzUtYTgwNC1mMWZi
N2NkZjBkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFNTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABI6LG+CJtm8wxJhz/NKXVKJwyXylGIkeuIlgr9aAmFQJpVZuSDR1/V9
0bJc7/qGIcrYHWJ3x05XlS+sTgY+5zl5zc7XeOeGcPaJ4aYIkbcy0SGWDukc+9Zr
RhPwND6VCt8MeA4KPmFD7DfcmYROZ/Bp5uQyAfdAx7XvJTUMI2x1Pvjvm992uV6i
KiLS3++1bjNmNpRf5JbyAFA54jn9vifETAsC+eJbfaxheMj/P7VcW+tGXW6VJQ10
Eo5RbgOA71culTftpJsf2TwZ4CenR7P6mAygcJfyVsIjOSABeaMrz5+LhhZrDgry
u2bghLI0cvsDkdt8Bevfnyd4dhV4XoA=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:13:22 2025 by rpki-client