Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/7c7c8c00-60b2-3fec-a28c-18e32d2c73b2.roa
File:                     7c7c8c00-60b2-3fec-a28c-18e32d2c73b2.roa (raw, json)
Hash identifier:          r2ZKs5dwKIERdb4cQW+HR/n12bYi1h8Ddl6CCVfg/0c=
Subject key identifier:   B6:E1:AC:E1:4D:23:E2:2A:B9:D7:CB:DF:0D:5A:40:B4:8E:B5:9F:D0
Certificate issuer:       /CN=385196b1-542e-428c-8866-0efd1362fdc0
Certificate serial:       010D0C9F43285849CE9A48DC4EE2689B1B306B80
Authority key identifier: 5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/7c7c8c00-60b2-3fec-a28c-18e32d2c73b2.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        64.35.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:48:dc:4e:e2:68:9b:1b:30:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385196b1-542e-428c-8866-0efd1362fdc0
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=e90958e5-bc9b-4f32-ab25-cc159945444d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a5:03:50:38:ed:61:26:5b:46:7a:a9:2c:09:
                    0f:c2:63:7d:bd:2c:ca:0f:50:76:cd:c4:cc:7c:df:
                    ff:5c:b3:99:77:a0:62:cc:db:b9:3e:50:9a:ac:bb:
                    32:3b:43:48:9f:ec:39:15:e2:2c:98:59:62:6a:a1:
                    fb:29:3b:73:7a:fd:55:34:3a:cd:36:09:8a:2b:1e:
                    ff:85:0f:5c:63:18:fe:85:28:1b:ba:50:c3:99:0e:
                    5e:72:2d:d4:86:68:84:b7:87:49:5c:ad:6a:e7:0e:
                    97:89:20:51:09:21:7a:80:bb:8f:fa:c8:44:9b:49:
                    47:9d:ee:e6:50:26:2d:97:0f:1b:e6:e1:b9:c8:01:
                    e1:45:40:89:eb:f0:87:15:74:b6:bb:13:fc:5e:12:
                    44:bf:c9:96:68:04:c5:b8:a2:0f:7e:aa:ee:3d:28:
                    f1:09:88:ee:93:76:41:b1:34:49:9e:72:59:6c:cd:
                    50:d2:be:f3:83:ec:2c:e8:4e:b4:44:69:1f:39:b6:
                    76:c6:60:45:03:2f:37:ab:f9:9d:1a:02:32:3c:5a:
                    96:79:06:21:88:c5:ab:f9:c8:a9:91:0e:99:7b:2e:
                    ee:e1:6f:de:43:70:58:99:6f:2e:b8:1a:dd:a0:9a:
                    98:4d:9e:fb:ab:2e:17:41:c2:e6:30:fb:0f:f7:0a:
                    c5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E1:AC:E1:4D:23:E2:2A:B9:D7:CB:DF:0D:5A:40:B4:8E:B5:9F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/7c7c8c00-60b2-3fec-a28c-18e32d2c73b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:5a:da:d0:8b:3b:d9:68:37:5e:d8:7e:0d:ef:17:a3:4b:e2:
         fd:1d:c8:39:05:6d:5e:ba:83:35:18:60:cc:81:b7:37:1c:7a:
         67:10:f5:f7:fc:23:37:c0:91:22:b8:ef:2f:eb:38:0b:db:fc:
         63:66:50:83:03:fe:bd:ea:f2:d9:e6:f9:05:dc:fc:c7:db:e3:
         ea:bd:6f:07:9d:4e:08:57:44:c9:f7:b8:8a:66:30:5c:47:ac:
         9f:49:b1:0c:59:2f:75:55:78:bf:27:8e:8e:7d:e6:d7:72:7d:
         55:52:52:9e:63:ce:d3:07:b1:1a:9e:35:98:a6:6b:97:fa:69:
         c7:81:a1:59:7e:7b:11:be:a9:f0:0f:73:a1:31:61:d6:46:46:
         66:a5:a5:28:b9:58:82:e7:f3:7c:aa:18:89:b1:3f:92:72:a2:
         b8:b5:76:fb:12:ac:48:21:1c:50:f7:79:ec:b9:68:50:fa:c3:
         5b:66:33:50:a2:52:c7:96:f5:76:94:25:6a:9f:e5:d1:a3:06:
         49:aa:b3:91:9e:bd:53:0c:12:ec:38:7f:87:58:ba:b0:37:5a:
         1a:c5:21:aa:fd:90:9d:90:15:01:7d:59:df:ee:49:20:59:b7:
         e5:3d:3b:05:56:73:a5:8f:0e:68:75:35:5b:0c:29:ce:b9:75:
         78:70:87:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkjcTuJomxswa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg1MTk2YjEtNTQyZS00MjhjLTg4NjYtMGVmZDEzNjJm
ZGMwMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
ZTkwOTU4ZTUtYmM5Yi00ZjMyLWFiMjUtY2MxNTk5NDU0NDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aUDUDjtYSZbRnqpLAkPwmN9vSzKD1B2zcTM
fN//XLOZd6BizNu5PlCarLsyO0NIn+w5FeIsmFliaqH7KTtzev1VNDrNNgmKKx7/
hQ9cYxj+hSgbulDDmQ5eci3UhmiEt4dJXK1q5w6XiSBRCSF6gLuP+shEm0lHne7m
UCYtlw8b5uG5yAHhRUCJ6/CHFXS2uxP8XhJEv8mWaATFuKIPfqruPSjxCYjuk3ZB
sTRJnnJZbM1Q0r7zg+ws6E60RGkfObZ2xmBFAy83q/mdGgIyPFqWeQYhiMWr+cip
kQ6Zey7u4W/eQ3BYmW8uuBrdoJqYTZ77qy4XQcLmMPsP9wrFzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLbhrOFNI+IqudfL3w1aQLSOtZ/QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zODUx
OTZiMS01NDJlLTQyOGMtODg2Ni0wZWZkMTM2MmZkYzAvN2M3YzhjMDAtNjBiMi0z
ZmVjLWEyOGMtMThlMzJkMmM3M2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzg1MTk2YjEtNTQyZS00MjhjLTg4
NjYtMGVmZDEzNjJmZGMwLzM4NTE5NmIxLTU0MmUtNDI4Yy04ODY2LTBlZmQxMzYy
ZmRjMC5jcmwwHwYDVR0jBBgwFoAUW+y7fz1tdX5uVIOJ8tVve8Z4/Q0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zODUxOTZiMS01NDJlLTQyOGMtODg2Ni0wZWZk
MTM2MmZkYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCOqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxa2tCLO9loN17Yfg3vF6NL4v0dyDkFbV66gzUYYMyBtzccemcQ9ff8
IzfAkSK47y/rOAvb/GNmUIMD/r3q8tnm+QXc/Mfb4+q9bwedTghXRMn3uIpmMFxH
rJ9JsQxZL3VVeL8njo595tdyfVVSUp5jztMHsRqeNZima5f6aceBoVl+exG+qfAP
c6ExYdZGRmalpSi5WILn83yqGImxP5Jyori1dvsSrEghHFD3eey5aFD6w1tmM1Ci
UseW9XaUJWqf5dGjBkmqs5GevVMMEuw4f4dYurA3WhrFIar9kJ2QFQF9Wd/uSSBZ
t+U9OwVWc6WPDmh1NVsMKc65dXhwhy8=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:24:11 2025 by rpki-client