Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/05ce43ff-ab24-3b50-ae65-c77439766681.roa
File:                     05ce43ff-ab24-3b50-ae65-c77439766681.roa (raw, json)
Hash identifier:          Yf5x1AHSsvapR2GlwMBY9XHujUf4B2tP0Qc9adnLxC0=
Subject key identifier:   27:05:82:15:5B:59:57:DD:76:55:E8:CE:A8:59:A8:37:12:06:34:3C
Certificate issuer:       /CN=bb678ebe-0d8f-4513-aec9-decdadbd1e1c
Certificate serial:       010D0C9F4328584AAB26647C402D03F7589C62E0
Authority key identifier: 54:31:AB:87:54:53:F8:07:D0:F3:F2:DF:90:AE:C7:CD:C7:96:04:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/05ce43ff-ab24-3b50-ae65-c77439766681.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     32212
IP address blocks:        165.140.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:64:7c:40:2d:03:f7:58:9c:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb678ebe-0d8f-4513-aec9-decdadbd1e1c
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=761dac2e-42cf-47f9-afca-4268f8faefab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:91:dc:df:0a:10:28:5a:92:f5:b4:c2:b6:c7:
                    59:e1:9a:a9:51:90:19:5b:68:d9:e5:92:09:a1:b0:
                    43:07:57:52:0f:2d:45:5b:55:c8:71:2c:d8:c7:cf:
                    27:77:3e:de:2a:1b:3b:88:f1:2a:91:a5:54:0d:1c:
                    b5:94:bb:a5:14:87:ff:21:ef:fa:81:61:51:d5:37:
                    4b:41:23:0f:12:a3:9f:1e:d3:06:2d:ab:6d:d7:b4:
                    a0:51:20:43:a1:3a:91:5c:ef:83:a5:45:61:06:3c:
                    19:9d:78:55:3e:a2:c4:10:1c:ab:ef:3f:c9:b3:54:
                    50:aa:fa:ec:d9:26:cd:03:53:ab:6f:2e:3c:52:7c:
                    9b:76:af:22:09:ba:4e:4b:60:42:2b:9a:fd:a4:83:
                    46:b1:6f:aa:f5:81:7f:65:4d:13:5b:f3:5c:85:62:
                    8c:17:5c:4a:82:43:ff:71:e9:e7:27:b2:96:33:49:
                    99:d3:1a:db:80:99:b8:16:58:ea:a2:6d:f0:33:58:
                    bd:0d:34:be:54:50:80:e8:e9:d3:40:5e:f1:4f:29:
                    43:f0:00:bf:28:41:f9:22:af:37:56:93:61:ea:69:
                    a0:38:9c:11:b4:8a:b8:59:2c:31:c8:c8:b8:98:08:
                    d9:68:89:89:c4:96:d9:7f:34:88:e7:2b:f6:7b:e4:
                    39:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:05:82:15:5B:59:57:DD:76:55:E8:CE:A8:59:A8:37:12:06:34:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/05ce43ff-ab24-3b50-ae65-c77439766681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.crl

            X509v3 Authority Key Identifier:
                keyid:54:31:AB:87:54:53:F8:07:D0:F3:F2:DF:90:AE:C7:CD:C7:96:04:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:67:1f:8b:f0:86:a0:08:7f:11:3a:da:13:b2:59:63:db:d1:
         06:45:3a:20:4b:cd:e0:87:9c:bc:5c:89:6e:b2:f8:e8:25:15:
         ab:b3:d6:14:b7:8a:b0:b6:50:53:6b:45:21:f9:a7:ef:72:80:
         6e:27:94:db:e3:79:ac:a9:87:3d:39:ef:64:90:6b:e6:a0:d8:
         f5:b2:7b:17:d3:27:00:e7:f6:d9:5e:a9:ed:3e:56:ae:27:fb:
         92:ab:88:fa:98:d3:21:e9:86:91:17:15:e5:e0:89:00:5a:c4:
         44:ba:81:1a:3b:62:73:db:ec:30:dc:2c:e0:f9:7f:6b:e0:55:
         ce:8b:cd:7e:f6:bc:0c:b1:4b:fb:c0:8f:2f:c3:2a:f8:b8:15:
         46:d0:3e:b0:70:28:41:f1:ca:5c:a1:40:2c:05:b8:7d:93:a5:
         ae:93:e2:1b:a2:ff:44:1d:00:0a:12:43:5b:a8:32:b0:c5:28:
         e9:09:87:50:e7:e8:c8:88:c4:68:45:e1:16:78:75:25:dc:c7:
         bb:5c:2f:e0:33:48:88:61:2a:e5:14:2e:d0:83:38:ce:2e:9a:
         77:db:bd:a9:fa:3e:1c:89:19:47:66:e1:cc:de:ec:2f:42:ad:
         b1:9a:5a:73:2e:c2:fa:ef:5b:c0:f7:99:bd:22:9c:06:3b:23:
         3b:5f:cc:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJmR8QC0D91icYuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmI2NzhlYmUtMGQ4Zi00NTEzLWFlYzktZGVjZGFkYmQx
ZTFjMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NzYxZGFjMmUtNDJjZi00N2Y5LWFmY2EtNDI2OGY4ZmFlZmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55Hc3woQKFqS9bTCtsdZ4ZqpUZAZW2jZ5ZIJ
obBDB1dSDy1FW1XIcSzYx88ndz7eKhs7iPEqkaVUDRy1lLulFIf/Ie/6gWFR1TdL
QSMPEqOfHtMGLatt17SgUSBDoTqRXO+DpUVhBjwZnXhVPqLEEByr7z/Js1RQqvrs
2SbNA1Orby48Unybdq8iCbpOS2BCK5r9pINGsW+q9YF/ZU0TW/NchWKMF1xKgkP/
cennJ7KWM0mZ0xrbgJm4Fljqom3wM1i9DTS+VFCA6OnTQF7xTylD8AC/KEH5Iq83
VpNh6mmgOJwRtIq4WSwxyMi4mAjZaImJxJbZfzSI5yv2e+Q5mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCcFghVbWVfddlXozqhZqDcSBjQ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYjY3
OGViZS0wZDhmLTQ1MTMtYWVjOS1kZWNkYWRiZDFlMWMvMDVjZTQzZmYtYWIyNC0z
YjUwLWFlNjUtYzc3NDM5NzY2NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmI2NzhlYmUtMGQ4Zi00NTEzLWFl
YzktZGVjZGFkYmQxZTFjL2JiNjc4ZWJlLTBkOGYtNDUxMy1hZWM5LWRlY2RhZGJk
MWUxYy5jcmwwHwYDVR0jBBgwFoAUVDGrh1RT+AfQ8/LfkK7HzceWBFswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYjY3OGViZS0wZDhmLTQ1MTMtYWVjOS1kZWNk
YWRiZDFlMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYx4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhnH4vwhqAIfxE62hOyWWPb0QZFOiBLzeCHnLxciW6y+OglFauz1hS3
irC2UFNrRSH5p+9ygG4nlNvjeayphz0572SQa+ag2PWyexfTJwDn9tleqe0+Vq4n
+5KriPqY0yHphpEXFeXgiQBaxES6gRo7YnPb7DDcLOD5f2vgVc6LzX72vAyxS/vA
jy/DKvi4FUbQPrBwKEHxylyhQCwFuH2Tpa6T4hui/0QdAAoSQ1uoMrDFKOkJh1Dn
6MiIxGhF4RZ4dSXcx7tcL+AzSIhhKuUULtCDOM4umnfbvan6PhyJGUdm4cze7C9C
rbGaWnMuwvrvW8D3mb0inAY7IztfzJ8=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:16:13 2025 by rpki-client