Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/3e8b7889-e23e-3034-ab41-de81b60a5710.roa
File:                     3e8b7889-e23e-3034-ab41-de81b60a5710.roa (raw, json)
Hash identifier:          vZzjycLEYCUJzZ4HULjNIDsUEA1tI1BqV5/Bif2kWWY=
Subject key identifier:   2E:2E:2B:68:37:6C:85:FE:36:FE:91:72:BF:D1:F3:D3:87:E9:5B:0E
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285849D165019C29A63249C17E3A20
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/3e8b7889-e23e-3034-ab41-de81b60a5710.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     14080
IP address blocks:        64.86.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:01:9c:29:a6:32:49:c1:7e:3a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=c4a5a1c8-363c-434a-b2bd-8e52097e624c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3f:8d:43:5c:16:b8:e1:26:90:b8:70:83:5e:
                    eb:6f:be:29:b1:8f:d5:87:49:e7:01:44:0c:82:ab:
                    8d:39:d3:d2:e1:5b:d3:5e:30:4b:71:0e:13:64:b8:
                    34:7e:2c:15:90:c7:f9:cd:4b:9b:8a:39:80:fa:c5:
                    52:e3:cc:19:8c:c7:25:d8:83:b6:73:02:b7:85:76:
                    da:74:22:40:d2:e7:9d:d0:6b:5c:79:2f:41:3b:7e:
                    5f:3f:a1:5f:32:89:f5:81:b4:d3:e2:cd:1f:53:fb:
                    c5:94:e7:29:1d:88:b7:4d:e4:31:34:53:64:11:2d:
                    70:17:45:bc:51:f6:a0:57:20:14:51:cd:c0:70:05:
                    c2:36:e2:e4:0b:d2:86:96:de:96:4e:57:21:e5:66:
                    85:39:d3:6a:95:01:73:3e:f1:1b:a8:a0:a9:6b:94:
                    61:e7:18:0d:c2:3c:be:8c:28:7f:8d:10:79:17:bb:
                    d4:36:4c:6c:31:8f:67:7e:71:46:c5:16:dc:e2:c8:
                    c5:53:53:a8:b0:ef:8e:24:68:7c:c7:d2:6f:e1:69:
                    c0:24:c3:92:b6:23:d8:56:8e:a6:62:44:22:51:1d:
                    32:98:b0:78:ee:d1:7c:b5:73:fd:4e:3c:51:07:76:
                    99:57:20:3f:d8:fa:7c:20:7b:aa:5a:36:8b:da:62:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2E:2B:68:37:6C:85:FE:36:FE:91:72:BF:D1:F3:D3:87:E9:5B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/3e8b7889-e23e-3034-ab41-de81b60a5710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0d:58:d0:c6:f3:72:1a:ed:d9:6c:b6:1f:74:37:f9:0d:0f:
         1d:44:f7:3d:ee:85:cf:ae:ab:43:31:36:eb:e1:1a:5a:36:74:
         a7:bc:76:ab:6c:9f:bb:ce:0d:e2:0d:3d:21:e7:6d:68:d7:1b:
         b3:e8:6d:98:a0:52:3a:f1:19:06:98:46:9b:07:6f:12:70:30:
         cb:3b:3b:b8:ef:d7:8c:ec:4a:1f:bb:eb:af:ab:30:72:5e:d9:
         93:92:06:c5:4d:58:a6:ee:81:52:7f:bd:a6:9c:8f:4a:26:f9:
         ab:b4:e2:c2:43:f4:43:7d:09:6e:6c:ba:fb:79:65:30:41:df:
         5e:d1:23:13:8d:a3:35:6f:70:bb:6a:d1:93:00:9d:15:73:4c:
         b7:59:b8:78:5b:e3:3b:12:0c:38:b7:44:0a:7a:fa:b7:c0:fb:
         74:69:eb:28:e7:d3:07:9c:48:0c:8b:fa:5f:d6:65:0e:bf:65:
         57:0e:b6:d8:78:1d:f9:26:4a:ff:49:cd:cd:ca:c0:2e:4e:f4:
         80:7c:92:01:1c:88:e7:76:fb:86:f4:cc:37:47:55:35:88:71:
         16:de:f7:97:24:45:a1:68:d0:7b:a2:eb:fa:45:11:0a:33:fc:
         ff:5a:d5:35:ef:72:c4:5a:55:28:45:a1:47:f9:c7:93:f3:83:
         bc:9b:8f:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQGcKaYyScF+OiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
YzRhNWExYzgtMzYzYy00MzRhLWIyYmQtOGU1MjA5N2U2MjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D+NQ1wWuOEmkLhwg17rb74psY/Vh0nnAUQM
gquNOdPS4VvTXjBLcQ4TZLg0fiwVkMf5zUubijmA+sVS48wZjMcl2IO2cwK3hXba
dCJA0ued0GtceS9BO35fP6FfMon1gbTT4s0fU/vFlOcpHYi3TeQxNFNkES1wF0W8
UfagVyAUUc3AcAXCNuLkC9KGlt6WTlch5WaFOdNqlQFzPvEbqKCpa5Rh5xgNwjy+
jCh/jRB5F7vUNkxsMY9nfnFGxRbc4sjFU1OosO+OJGh8x9Jv4WnAJMOStiPYVo6m
YkQiUR0ymLB47tF8tXP9TjxRB3aZVyA/2Pp8IHuqWjaL2mLlkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC4uK2g3bIX+Nv6Rcr/R89OH6VsOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvM2U4Yjc4ODktZTIzZS0z
MDM0LWFiNDEtZGU4MWI2MGE1NzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQFbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkNWNDG83Ia7dlsth90N/kNDx1E9z3uhc+uq0MxNuvhGlo2dKe8dqts
n7vODeINPSHnbWjXG7PobZigUjrxGQaYRpsHbxJwMMs7O7jv14zsSh+766+rMHJe
2ZOSBsVNWKbugVJ/vaacj0om+au04sJD9EN9CW5suvt5ZTBB317RIxONozVvcLtq
0ZMAnRVzTLdZuHhb4zsSDDi3RAp6+rfA+3Rp6yjn0wecSAyL+l/WZQ6/ZVcOtth4
HfkmSv9Jzc3KwC5O9IB8kgEciOd2+4b0zDdHVTWIcRbe95ckRaFo0Hui6/pFEQoz
/P9a1TXvcsRaVShFoUf5x5Pzg7ybj7M=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:21:09 2025 by rpki-client