Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/947e85fe-bc11-386a-81b7-47e5c6c08791.roa
File:                     947e85fe-bc11-386a-81b7-47e5c6c08791.roa (raw, json)
Hash identifier:          cmvryxF7b0JzNk8qrIYebHHgauw2ryGedUxNimuxjzA=
Subject key identifier:   A7:B8:B9:02:55:32:D8:EC:23:7B:57:36:DC:79:24:FB:41:FF:D1:9E
Certificate issuer:       /CN=9206a173-a090-480c-96c4-8eb781fd02a7
Certificate serial:       010D0C9F4328584A268AC774B1AF227DF1FF4800
Authority key identifier: 30:1F:D4:18:B3:BB:23:2F:A2:07:D4:1C:D9:59:D6:CD:4D:C0:6F:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/947e85fe-bc11-386a-81b7-47e5c6c08791.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     397972
IP address blocks:        216.181.104.0/24 maxlen: 24
                          216.181.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/9206a173-a090-480c-96c4-8eb781fd02a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/9206a173-a090-480c-96c4-8eb781fd02a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c7:74:b1:af:22:7d:f1:ff:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9206a173-a090-480c-96c4-8eb781fd02a7
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=4d3875e0-7832-443d-9c1e-fbc5aac57016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:9c:1f:90:17:0f:03:d1:c3:a3:50:b6:84:
                    9f:a1:2f:02:1f:d8:13:e7:85:49:0c:e1:b4:e0:6c:
                    77:bf:b1:6a:1e:4d:4a:b6:c1:b7:67:3d:18:1c:07:
                    47:6d:1f:09:35:85:a0:fe:59:e7:01:cc:3d:c4:7f:
                    b5:57:9a:24:06:29:06:64:5a:3b:40:a0:fb:8d:db:
                    b6:70:d9:3a:f4:ce:dc:21:9a:65:a4:e3:07:c4:1d:
                    77:72:6c:e3:9e:bf:62:43:42:bc:72:08:9d:0c:8c:
                    cd:35:df:a7:56:06:50:5b:12:d7:e7:1d:47:5b:bc:
                    f9:f5:11:2b:08:7d:21:4e:c7:dc:c1:d2:7f:af:3e:
                    a9:7a:63:c4:84:30:a3:63:d2:37:38:77:ce:a8:62:
                    5b:26:55:9c:36:83:fb:89:aa:16:42:51:b4:64:24:
                    a0:de:d2:9d:af:67:9c:b8:32:b7:45:43:13:31:c6:
                    fa:20:26:43:c8:93:d0:d8:12:bf:10:60:7f:78:c1:
                    a7:ed:22:00:28:13:73:43:fb:91:3d:c5:b4:4f:fb:
                    c8:f2:37:4b:15:a6:0d:5f:f6:20:bf:5c:64:4c:c3:
                    09:4b:28:97:ff:eb:1f:d3:2b:ce:47:5f:92:89:4e:
                    f1:31:91:c8:b0:8f:cb:f4:89:12:87:06:5f:d0:37:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B8:B9:02:55:32:D8:EC:23:7B:57:36:DC:79:24:FB:41:FF:D1:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/947e85fe-bc11-386a-81b7-47e5c6c08791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7/9206a173-a090-480c-96c4-8eb781fd02a7.crl

            X509v3 Authority Key Identifier:
                keyid:30:1F:D4:18:B3:BB:23:2F:A2:07:D4:1C:D9:59:D6:CD:4D:C0:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9206a173-a090-480c-96c4-8eb781fd02a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:da:b3:c4:46:53:be:a3:ff:bc:fb:f0:57:cb:43:a1:b4:5e:
         77:1f:02:81:c9:f3:1e:5b:8d:2b:3b:8b:0d:8b:5b:92:3c:2a:
         87:46:29:6f:e8:50:44:c5:88:23:1b:21:9a:73:77:ca:8a:ab:
         a9:0d:95:63:66:65:3b:ed:7d:e4:68:1b:7f:7c:2d:ed:26:7f:
         3a:94:6b:62:2c:06:28:51:bb:05:d1:3b:77:a9:98:30:c1:38:
         df:c6:5c:c0:27:94:1c:6f:30:96:69:b6:99:ca:fb:0d:15:96:
         85:ab:a1:64:d7:2c:4d:26:52:14:85:72:b5:57:53:40:ff:37:
         b7:18:92:b6:ca:0a:75:b5:d0:a4:15:46:1c:b8:7e:f0:8a:d0:
         51:64:33:f1:15:2c:2e:17:8c:28:44:c2:8e:ea:ad:6e:f7:a7:
         38:6f:2b:f0:3f:b2:64:20:ea:3b:26:f3:6c:1d:15:cc:d2:c5:
         14:78:e0:14:f8:b4:35:d6:a4:a2:d7:0e:f3:d7:3d:91:c7:5b:
         d3:c6:c2:49:49:cb:cb:57:f1:9a:ce:b2:fd:12:33:58:fc:86:
         f5:d9:de:5e:93:cb:bd:74:1b:4f:b5:a0:87:79:34:b1:b9:37:
         01:41:d7:88:34:2a:67:05:06:9b:d8:d9:a1:4c:b1:2c:52:ff:
         dc:9c:7b:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisd0sa8iffH/SAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTIwNmExNzMtYTA5MC00ODBjLTk2YzQtOGViNzgxZmQw
MmE3MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk
NGQzODc1ZTAtNzgzMi00NDNkLTljMWUtZmJjNWFhYzU3MDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwWcH5AXDwPRw6NQtoSfoS8CH9gT54VJDOG0
4Gx3v7FqHk1KtsG3Zz0YHAdHbR8JNYWg/lnnAcw9xH+1V5okBikGZFo7QKD7jdu2
cNk69M7cIZplpOMHxB13cmzjnr9iQ0K8cgidDIzNNd+nVgZQWxLX5x1HW7z59REr
CH0hTsfcwdJ/rz6pemPEhDCjY9I3OHfOqGJbJlWcNoP7iaoWQlG0ZCSg3tKdr2ec
uDK3RUMTMcb6ICZDyJPQ2BK/EGB/eMGn7SIAKBNzQ/uRPcW0T/vI8jdLFaYNX/Yg
v1xkTMMJSyiX/+sf0yvOR1+SiU7xMZHIsI/L9IkShwZf0DeWnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKe4uQJVMtjsI3tXNtx5JPtB/9GeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MjA2
YTE3My1hMDkwLTQ4MGMtOTZjNC04ZWI3ODFmZDAyYTcvOTQ3ZTg1ZmUtYmMxMS0z
ODZhLTgxYjctNDdlNWM2YzA4NzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTIwNmExNzMtYTA5MC00ODBjLTk2
YzQtOGViNzgxZmQwMmE3LzkyMDZhMTczLWEwOTAtNDgwYy05NmM0LThlYjc4MWZk
MDJhNy5jcmwwHwYDVR0jBBgwFoAUMB/UGLO7Iy+iB9Qc2VnWzU3AbxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85MjA2YTE3My1hMDkwLTQ4MGMtOTZjNC04ZWI3
ODFmZDAyYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2LVoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPas8RGU76j/7z78FfLQ6G0XncfAoHJ8x5bjSs7iw2LW5I8KodGKW/o
UETFiCMbIZpzd8qKq6kNlWNmZTvtfeRoG398Le0mfzqUa2IsBihRuwXRO3epmDDB
ON/GXMAnlBxvMJZptpnK+w0VloWroWTXLE0mUhSFcrVXU0D/N7cYkrbKCnW10KQV
Rhy4fvCK0FFkM/EVLC4XjChEwo7qrW73pzhvK/A/smQg6jsm82wdFczSxRR44BT4
tDXWpKLXDvPXPZHHW9PGwklJy8tX8ZrOsv0SM1j8hvXZ3l6Ty710G0+1oId5NLG5
NwFB14g0KmcFBpvY2aFMsSxS/9ycey8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:34 2025 by rpki-client