Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa
File:                     28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa (raw, json)
Hash identifier:          Cgi0j2JPrUTU/1g7WWFXshI9yUkuCSHjJZBkHUc0dQk=
Subject key identifier:   32:B6:E7:99:97:3C:9E:F8:31:AF:CC:19:0C:B0:07:B0:3F:99:3B:A9
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584AB4EB7F7CE3E9F70A9FA39F80
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     53508
IP address blocks:        142.79.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7f:7c:e3:e9:f7:0a:9f:a3:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=380a4f06-f151-4f08-9156-b9cd52554441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:43:5a:4c:0d:58:92:49:21:e8:c0:d6:84:de:
                    74:0d:84:58:4d:92:2e:41:b3:ed:f5:60:48:89:83:
                    6f:eb:dc:d8:d9:15:f6:77:a3:4e:78:dc:66:a6:e4:
                    0c:fa:c0:d5:6c:ed:ee:75:22:34:56:d1:eb:6e:e1:
                    f2:ad:61:9f:2a:40:75:54:1c:e3:41:90:45:36:04:
                    67:ba:c2:e0:d0:4b:68:95:08:4d:a6:bb:31:6b:a3:
                    2d:07:40:c1:e5:c7:0a:99:c1:ea:92:fa:83:32:a3:
                    e4:a4:db:47:96:05:6b:b1:69:47:04:4a:d7:72:49:
                    be:73:19:e9:e9:f2:d7:ee:0f:06:57:61:53:b8:be:
                    07:84:8e:ef:f7:c5:a1:27:c5:d5:00:d8:dd:fe:f5:
                    7c:d5:bd:b2:d9:0b:39:9c:a1:64:b9:84:e6:54:e6:
                    4f:a1:d3:8d:97:a9:08:6f:66:77:71:12:d3:64:e4:
                    d9:30:2c:aa:1f:c3:3a:63:3a:6d:a8:9e:16:57:13:
                    bb:ab:2b:cf:48:da:ec:77:8c:db:a4:6e:be:1f:ad:
                    0d:ea:cd:3f:94:85:8d:61:d6:9d:df:2f:22:9c:7c:
                    f2:1f:1e:5c:84:69:a9:46:33:f1:96:c1:aa:e7:b2:
                    31:96:82:90:dc:6d:c6:b1:34:44:f5:44:1f:f8:ea:
                    8e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B6:E7:99:97:3C:9E:F8:31:AF:CC:19:0C:B0:07:B0:3F:99:3B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/28541db6-1f82-3e14-8a7c-c8eeeeac631e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a5:f9:8f:0d:de:55:3c:04:a4:96:b0:b9:60:e7:75:02:df:
         05:96:ba:ec:8f:07:c0:da:01:86:71:81:03:51:96:c5:18:7d:
         3e:ae:6c:ec:0b:3e:7c:43:4a:3e:1f:0b:bf:56:26:f9:9b:f9:
         3f:72:b3:c4:1c:d6:e4:60:07:1a:c1:0e:b5:30:49:21:b2:e4:
         b7:32:84:85:a1:52:d3:39:32:e3:c5:ca:9d:99:a8:64:81:f2:
         ad:cc:fd:8a:57:04:bf:89:c3:00:9f:20:5c:63:33:29:5c:6e:
         45:66:eb:ec:46:49:5f:79:95:59:27:ff:84:38:66:db:43:59:
         e2:d4:08:11:5c:62:1e:2f:1e:4c:5c:43:ce:4f:0e:76:81:6b:
         69:d3:23:db:95:1f:4f:1e:73:f1:09:7c:a0:83:87:9e:96:ad:
         93:85:f0:3e:5d:42:27:d3:13:69:2b:1c:a4:e3:50:e7:0f:7a:
         ac:bb:84:98:65:09:b5:65:af:26:77:ba:08:98:b5:25:cc:d3:
         79:c0:d7:a7:89:0d:35:0c:32:4c:47:2e:7b:36:7b:9d:a3:26:
         95:cf:a1:3d:43:f7:75:bb:4d:a5:fe:14:de:ff:27:2f:d0:25:
         fc:2a:85:4a:7c:d0:55:fa:ba:3f:3e:29:c0:13:e6:93:67:e5:
         9b:ee:bc:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063984+n3Cp+jn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
MzgwYTRmMDYtZjE1MS00ZjA4LTkxNTYtYjljZDUyNTU0NDQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUNaTA1Ykkkh6MDWhN50DYRYTZIuQbPt9WBI
iYNv69zY2RX2d6NOeNxmpuQM+sDVbO3udSI0VtHrbuHyrWGfKkB1VBzjQZBFNgRn
usLg0EtolQhNprsxa6MtB0DB5ccKmcHqkvqDMqPkpNtHlgVrsWlHBErXckm+cxnp
6fLX7g8GV2FTuL4HhI7v98WhJ8XVANjd/vV81b2y2Qs5nKFkuYTmVOZPodONl6kI
b2Z3cRLTZOTZMCyqH8M6YzptqJ4WVxO7qyvPSNrsd4zbpG6+H60N6s0/lIWNYdad
3y8inHzyHx5chGmpRjPxlsGq57IxloKQ3G3GsTRE9UQf+OqOMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDK255mXPJ74Ma/MGQywB7A/mTupMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMjg1NDFkYjYtMWY4Mi0z
ZTE0LThhN2MtYzhlZWVlYWM2MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjk9qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEil+Y8N3lU8BKSWsLlg53UC3wWWuuyPB8DaAYZxgQNRlsUYfT6ubOwL
PnxDSj4fC79WJvmb+T9ys8Qc1uRgBxrBDrUwSSGy5LcyhIWhUtM5MuPFyp2ZqGSB
8q3M/YpXBL+JwwCfIFxjMylcbkVm6+xGSV95lVkn/4Q4ZttDWeLUCBFcYh4vHkxc
Q85PDnaBa2nTI9uVH08ec/EJfKCDh56WrZOF8D5dQifTE2krHKTjUOcPeqy7hJhl
CbVlryZ3ugiYtSXM03nA16eJDTUMMkxHLns2e52jJpXPoT1D93W7TaX+FN7/Jy/Q
JfwqhUp80FX6uj8+KcAT5pNn5ZvuvO4=
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:34:45 2025 by rpki-client