Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/52bc4f9a-55b9-3b9b-925f-bf1a4fba9926.roa
File:                     52bc4f9a-55b9-3b9b-925f-bf1a4fba9926.roa (raw, json)
Hash identifier:          CQzNa2075w0Tuc7am4RTQxq22WjCP/rLaa8oS+P5RCY=
Subject key identifier:   E8:2A:7D:DD:71:84:A8:DC:75:F4:BB:0A:03:4A:5B:E7:56:13:9E:FA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1618D34962F8CA5FC394940
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/52bc4f9a-55b9-3b9b-925f-bf1a4fba9926.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        65.31.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:8d:34:96:2f:8c:a5:fc:39:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=c0f17db2-db2f-4348-ad50-a43f8da05325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:9e:35:e5:23:ad:bf:02:3f:f9:b6:1e:33:
                    68:c9:b0:3d:eb:fa:06:7e:62:79:2c:e7:10:9c:70:
                    a2:e9:11:c0:73:68:a2:f5:1c:c8:26:90:c1:c3:62:
                    c0:f0:86:6b:c1:ed:52:d2:93:23:39:84:69:3b:2a:
                    75:85:15:94:3b:72:b6:e5:3f:a3:b6:21:14:fa:aa:
                    bc:04:5c:23:98:18:13:cb:ae:a1:e0:f1:7a:0c:e2:
                    9e:da:ec:a6:f8:14:69:9f:3b:47:fa:ff:08:23:a4:
                    a7:15:46:11:79:38:25:29:74:48:10:d9:a7:37:49:
                    22:ac:7d:12:34:a6:a1:59:5e:33:46:2a:d8:35:52:
                    fe:bf:ed:76:9f:d1:70:d3:86:20:d5:35:06:08:d7:
                    a6:f8:9f:4a:e0:f3:64:f1:b9:e4:11:24:c8:f8:68:
                    dc:2a:64:e4:46:0d:97:bb:9e:2f:64:97:88:ab:2c:
                    94:98:e5:6d:ad:a9:84:4e:75:0b:ab:8e:b9:66:9b:
                    85:c4:ac:4c:b9:5b:f2:50:f5:3c:2b:c2:36:e2:26:
                    45:09:bc:5f:51:f9:c7:25:bd:9f:0b:12:de:6a:fd:
                    a2:74:41:89:cd:30:da:d1:aa:3c:2c:02:12:f3:d7:
                    c6:a4:1e:37:d5:c6:d3:ee:40:90:04:ae:61:c5:fc:
                    8d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2A:7D:DD:71:84:A8:DC:75:F4:BB:0A:03:4A:5B:E7:56:13:9E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/52bc4f9a-55b9-3b9b-925f-bf1a4fba9926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.31.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:40:b6:f4:fb:1a:57:14:3f:44:c6:31:41:b0:5a:42:89:80:
         e0:9d:c0:9a:a2:59:11:40:38:16:4a:67:ca:c2:a8:a3:7d:26:
         b0:bb:8b:bf:90:33:6e:f9:2b:97:eb:33:7b:52:db:e9:dd:0a:
         07:0f:d7:5e:0c:bf:9e:34:f9:a0:81:15:21:5e:82:4c:d5:4f:
         0f:c3:f1:82:78:09:ea:84:32:09:b2:40:61:95:79:5d:9b:51:
         a5:12:77:8d:20:c4:5e:3b:63:2f:f9:49:50:fe:60:56:7b:27:
         91:96:82:56:27:90:c5:38:5b:8e:21:82:1f:c3:ae:f5:6a:90:
         7a:57:a9:57:3f:9f:5a:09:1b:92:39:c4:85:24:e6:41:71:8e:
         22:1b:53:c9:53:dd:3e:b0:94:7a:32:5a:11:4b:4e:fd:26:b8:
         69:a6:fd:1b:7a:68:4c:0f:74:c5:7c:87:fb:0f:22:3f:4b:9a:
         0f:b3:1f:9c:ab:4b:ce:ca:8f:fb:c0:e4:d0:72:0c:9c:de:2f:
         db:07:0c:78:b7:7e:0e:b8:8f:65:6d:86:37:8c:da:3e:0a:d2:
         f7:fb:d1:b6:7a:82:f6:79:26:e2:c4:9d:70:c9:c6:24:3c:79:
         15:74:88:e6:cb:76:05:08:fd:c3:da:ac:b4:7a:4c:a7:bd:07:
         e9:1f:9b:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYY00li+Mpfw5SUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
YzBmMTdkYjItZGIyZi00MzQ4LWFkNTAtYTQzZjhkYTA1MzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWmeNeUjrb8CP/m2HjNoybA96/oGfmJ5LOcQ
nHCi6RHAc2ii9RzIJpDBw2LA8IZrwe1S0pMjOYRpOyp1hRWUO3K25T+jtiEU+qq8
BFwjmBgTy66h4PF6DOKe2uym+BRpnztH+v8II6SnFUYReTglKXRIENmnN0kirH0S
NKahWV4zRirYNVL+v+12n9Fw04Yg1TUGCNem+J9K4PNk8bnkESTI+GjcKmTkRg2X
u54vZJeIqyyUmOVtramETnULq465ZpuFxKxMuVvyUPU8K8I24iZFCbxfUfnHJb2f
CxLeav2idEGJzTDa0ao8LAIS89fGpB431cbT7kCQBK5hxfyNaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOgqfd1xhKjcdfS7CgNKW+dWE576MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNTJiYzRmOWEtNTViOS0z
YjliLTkyNWYtYmYxYTRmYmE5OTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQR+QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9AtvT7GlcUP0TGMUGwWkKJgOCdwJqiWRFAOBZKZ8rCqKN9JrC7i7+Q
M275K5frM3tS2+ndCgcP114Mv540+aCBFSFegkzVTw/D8YJ4CeqEMgmyQGGVeV2b
UaUSd40gxF47Yy/5SVD+YFZ7J5GWglYnkMU4W44hgh/DrvVqkHpXqVc/n1oJG5I5
xIUk5kFxjiIbU8lT3T6wlHoyWhFLTv0muGmm/Rt6aEwPdMV8h/sPIj9Lmg+zH5yr
S87Kj/vA5NByDJzeL9sHDHi3fg64j2VthjeM2j4K0vf70bZ6gvZ5JuLEnXDJxiQ8
eRV0iObLdgUI/cParLR6TKe9B+kfmxM=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:13:08 2025 by rpki-client