Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/90cdea1d-241d-3a2b-9550-c761d3069e7b.roa
File:                     90cdea1d-241d-3a2b-9550-c761d3069e7b.roa (raw, json)
Hash identifier:          AVscyP2iuyrzFU24M2F2izNMunRjpbjxlB/qAJWaVUQ=
Subject key identifier:   C5:2D:73:97:D9:70:75:94:78:F3:8A:F4:14:C5:86:79:DE:D1:9A:B4
Certificate issuer:       /CN=7894adcb-3be5-42b8-a76f-913809582611
Certificate serial:       010D0C9F4328584AA85BB4CC0F9CC067807A8700
Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/90cdea1d-241d-3a2b-9550-c761d3069e7b.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     8075
IP address blocks:        129.35.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b4:cc:0f:9c:c0:67:80:7a:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=8e8cea51-2717-4560-85ef-964881f123b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ae:cf:a4:1b:c0:81:01:db:1d:30:c0:20:ac:
                    08:bf:44:54:d9:18:29:a6:07:93:ac:de:ce:2f:f7:
                    0b:88:7d:7c:53:33:ed:66:58:20:6f:c4:90:3c:7e:
                    c6:24:c1:3d:0a:f8:b5:72:0e:71:f0:f5:fa:69:d1:
                    e0:4c:98:a4:cd:f0:f2:03:a7:f4:2c:b7:af:36:63:
                    ff:10:7d:bc:95:49:eb:c4:56:0f:99:7f:fa:5e:07:
                    d4:97:eb:6c:31:fd:f8:0f:3e:f1:0a:ed:4d:b9:00:
                    d5:49:cd:49:7b:29:b4:bc:17:42:e9:03:9f:26:87:
                    03:da:6b:40:72:b4:25:71:22:2e:7a:9c:7d:bc:6d:
                    47:08:52:19:ce:a3:f6:2f:0e:85:b6:e1:ad:f2:d9:
                    1c:e7:a1:65:06:d9:cb:4f:70:e9:b3:da:ca:1f:73:
                    c5:c3:fb:bc:f2:69:f0:f5:a4:eb:97:d8:51:11:25:
                    3b:d4:aa:48:6d:7c:ed:36:7a:57:c8:95:77:24:4d:
                    51:37:ae:01:00:73:f1:c4:ca:9f:f8:eb:7a:e0:c9:
                    d3:93:3b:f5:62:e9:05:13:c2:33:d0:37:4b:8f:72:
                    10:36:7e:47:ae:98:35:5b:b9:e3:35:0a:91:5b:7a:
                    56:83:f9:36:00:39:a9:74:59:5f:79:1d:bc:6a:8a:
                    ae:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2D:73:97:D9:70:75:94:78:F3:8A:F4:14:C5:86:79:DE:D1:9A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/90cdea1d-241d-3a2b-9550-c761d3069e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl

            X509v3 Authority Key Identifier:
                keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.35.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b7:c4:04:68:93:9f:b1:b3:78:bd:44:21:67:2b:33:35:52:
         f2:2a:d6:ae:e5:df:50:5b:34:e3:0b:87:25:23:c1:7b:4c:f4:
         b6:99:b6:3b:a2:aa:0b:4d:83:0c:7d:ba:6a:fb:f6:91:cd:49:
         31:ca:8a:3e:ab:f9:cb:f9:0c:87:89:60:38:41:78:60:94:4a:
         8b:76:ab:30:24:8e:20:99:a6:a7:61:93:4b:7b:a0:2a:12:4b:
         c0:66:39:e6:60:c4:2a:80:a1:13:f7:8b:d7:6e:48:e6:47:e4:
         a4:ae:c0:52:9e:fa:0d:83:d3:e4:06:af:14:0a:b4:87:67:fa:
         9d:1d:65:96:53:06:72:af:cf:c5:25:f5:28:d0:83:df:b4:bb:
         71:33:59:b2:50:41:d2:42:4b:df:0c:80:9a:4e:82:60:68:68:
         8b:52:b2:b5:b9:03:e2:61:1a:1a:7f:24:1f:ef:91:1b:ca:2d:
         51:05:c5:c8:56:93:25:7f:15:40:76:2e:62:22:ae:c4:08:90:
         7a:cb:5b:74:ed:fd:00:d5:49:78:5f:4f:31:49:52:b5:69:84:
         35:fc:39:da:55:d5:bb:1e:68:6e:6c:e4:31:13:5e:98:44:ae:
         af:e8:03:94:a0:18:15:49:31:7b:a3:dd:4e:69:24:59:fe:2b:
         04:a0:1d:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7TMD5zAZ4B6hwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg5NGFkY2ItM2JlNS00MmI4LWE3NmYtOTEzODA5NTgy
NjExMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk
OGU4Y2VhNTEtMjcxNy00NTYwLTg1ZWYtOTY0ODgxZjEyM2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA267PpBvAgQHbHTDAIKwIv0RU2RgppgeTrN7O
L/cLiH18UzPtZlggb8SQPH7GJME9Cvi1cg5x8PX6adHgTJikzfDyA6f0LLevNmP/
EH28lUnrxFYPmX/6XgfUl+tsMf34Dz7xCu1NuQDVSc1Jeym0vBdC6QOfJocD2mtA
crQlcSIuepx9vG1HCFIZzqP2Lw6FtuGt8tkc56FlBtnLT3Dps9rKH3PFw/u88mnw
9aTrl9hRESU71KpIbXztNnpXyJV3JE1RN64BAHPxxMqf+Ot64MnTkzv1YukFE8Iz
0DdLj3IQNn5Hrpg1W7njNQqRW3pWg/k2ADmpdFlfeR28aoqu+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMUtc5fZcHWUePOK9BTFhnne0Zq0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ODk0
YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4MDk1ODI2MTEvOTBjZGVhMWQtMjQxZC0z
YTJiLTk1NTAtYzc2MWQzMDY5ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzg5NGFkY2ItM2JlNS00MmI4LWE3
NmYtOTEzODA5NTgyNjExLzc4OTRhZGNiLTNiZTUtNDJiOC1hNzZmLTkxMzgwOTU4
MjYxMS5jcmwwHwYDVR0jBBgwFoAUWvdinr+EQ4aDO8W+YDZZ1na7Y8owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83ODk0YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4
MDk1ODI2MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSMTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHG3xARok5+xs3i9RCFnKzM1UvIq1q7l31BbNOMLhyUjwXtM9LaZtjui
qgtNgwx9umr79pHNSTHKij6r+cv5DIeJYDhBeGCUSot2qzAkjiCZpqdhk0t7oCoS
S8BmOeZgxCqAoRP3i9duSOZH5KSuwFKe+g2D0+QGrxQKtIdn+p0dZZZTBnKvz8Ul
9SjQg9+0u3EzWbJQQdJCS98MgJpOgmBoaItSsrW5A+JhGhp/JB/vkRvKLVEFxchW
kyV/FUB2LmIirsQIkHrLW3Tt/QDVSXhfTzFJUrVphDX8OdpV1bseaG5s5DETXphE
rq/oA5SgGBVJMXuj3U5pJFn+KwSgHTA=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:02 2025 by rpki-client