Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa
File:                     3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa (raw, json)
Hash identifier:          Apxm4VhXKSwy/yraFQfSA3Xt0d5rwpk4v6u/E+y2ZpI=
Subject key identifier:   13:98:4B:31:94:00:C0:EF:D6:1D:31:F5:99:2B:BE:30:DC:93:B4:42
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584AB650D1C348D3675B82E04500
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     16904
IP address blocks:        207.191.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d1:c3:48:d3:67:5b:82:e0:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=286f33e3-45d9-4cba-943e-a1f4d3c05831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:59:ee:91:f0:14:ee:f2:c7:d2:e5:3c:e0:77:
                    2c:e3:a4:50:7b:8c:b7:3a:f4:a0:4a:dd:82:86:88:
                    32:74:7a:44:9b:c9:3c:4f:9a:eb:17:37:8a:2a:3a:
                    9c:70:cf:3f:64:ad:0f:15:ea:c3:14:3d:57:3b:1c:
                    8f:d8:cc:69:71:7b:10:b6:8e:24:ca:07:32:bb:8f:
                    f5:f8:55:5f:d5:bb:de:68:d0:b9:d6:1f:1e:72:bd:
                    e7:ec:b8:36:77:9e:5d:25:65:fa:bb:e6:47:98:75:
                    c6:c3:a4:ca:26:ae:a4:ff:9b:45:d5:cb:10:d8:02:
                    74:45:6d:22:bb:d2:09:06:b4:e2:d2:18:b1:32:b2:
                    bb:07:8d:db:5c:da:d4:17:59:8c:91:09:ef:15:47:
                    08:cf:de:0d:9b:19:6a:bc:9a:99:b1:b5:7c:a8:90:
                    d3:1b:1e:04:17:20:46:cd:a2:bf:74:0a:d5:23:34:
                    0f:2d:c9:13:b0:fa:bc:52:83:23:d2:91:52:77:45:
                    55:fa:a9:84:84:3e:ee:84:b8:30:a2:2f:f5:dc:6c:
                    81:45:29:e0:4d:b3:c6:35:19:f8:d4:9b:86:9e:01:
                    88:c2:2a:97:2e:99:c8:ef:ec:8a:d7:2e:7b:8b:b3:
                    5d:59:c9:55:52:c1:72:62:23:94:f7:c5:64:7e:48:
                    aa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:98:4B:31:94:00:C0:EF:D6:1D:31:F5:99:2B:BE:30:DC:93:B4:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:87:da:c4:ea:ba:b0:5b:fe:ea:c3:01:b4:0f:0e:68:23:02:
         ff:99:07:51:93:dc:5a:f6:53:f7:28:58:ab:5e:b5:00:47:b5:
         69:c9:e2:ff:0b:95:56:7e:21:c5:60:53:36:30:e6:0f:4e:9a:
         b0:53:bd:d4:c3:86:64:30:51:8d:85:27:00:87:a2:56:e3:ae:
         b9:3d:10:00:f8:88:bc:54:b0:63:68:2f:97:bc:57:c6:65:a9:
         3b:c8:83:77:06:08:0d:d5:4d:f7:4f:82:e5:a6:93:64:4d:1b:
         1e:51:86:47:dc:0c:e8:8d:8d:ac:4d:7d:dc:09:26:ce:e4:b8:
         c2:2a:31:6b:4d:ef:b1:66:c2:29:a3:63:09:d8:1b:7f:10:cc:
         c8:07:6e:c9:be:b2:78:4c:fa:2f:e3:2d:91:a1:ef:4f:65:de:
         d2:03:b2:9a:1a:fd:b5:a5:cf:4d:9c:5c:55:aa:78:71:6e:e8:
         b2:f1:a5:2c:45:f2:31:f8:e1:10:40:7c:99:45:76:f9:ca:a7:
         6c:b9:38:df:ed:46:ad:cf:ce:8b:4b:f2:ec:73:85:bb:6d:e3:
         34:74:4b:79:21:27:0b:09:39:69:89:37:74:44:5c:b4:1b:9d:
         2d:35:aa:f8:88:2f:d5:33:7a:7f:4f:3e:26:29:1c:d5:35:bc:
         46:0f:91:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UNHDSNNnW4LgRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk
Mjg2ZjMzZTMtNDVkOS00Y2JhLTk0M2UtYTFmNGQzYzA1ODMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31nukfAU7vLH0uU84Hcs46RQe4y3OvSgSt2C
hogydHpEm8k8T5rrFzeKKjqccM8/ZK0PFerDFD1XOxyP2MxpcXsQto4kygcyu4/1
+FVf1bveaNC51h8ecr3n7Lg2d55dJWX6u+ZHmHXGw6TKJq6k/5tF1csQ2AJ0RW0i
u9IJBrTi0hixMrK7B43bXNrUF1mMkQnvFUcIz94NmxlqvJqZsbV8qJDTGx4EFyBG
zaK/dArVIzQPLckTsPq8UoMj0pFSd0VV+qmEhD7uhLgwoi/13GyBRSngTbPGNRn4
1JuGngGIwiqXLpnI7+yK1y57i7NdWclVUsFyYiOU98VkfkiqywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBOYSzGUAMDv1h0x9ZkrvjDck7RCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvMzYyOGM5ZGQtOGVlMy0z
M2YwLTgwZjItZTBiOTc5ODQzMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz7+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGH2sTqurBb/urDAbQPDmgjAv+ZB1GT3Fr2U/coWKtetQBHtWnJ4v8L
lVZ+IcVgUzYw5g9OmrBTvdTDhmQwUY2FJwCHolbjrrk9EAD4iLxUsGNoL5e8V8Zl
qTvIg3cGCA3VTfdPguWmk2RNGx5RhkfcDOiNjaxNfdwJJs7kuMIqMWtN77Fmwimj
YwnYG38QzMgHbsm+snhM+i/jLZGh709l3tIDspoa/bWlz02cXFWqeHFu6LLxpSxF
8jH44RBAfJlFdvnKp2y5ON/tRq3PzotL8uxzhbtt4zR0S3khJwsJOWmJN3REXLQb
nS01qviIL9Uzen9PPiYpHNU1vEYPkUY=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:44 2025 by rpki-client