Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/860e28cf-fb11-3efd-8cea-335ea7024d99.roa
File:                     860e28cf-fb11-3efd-8cea-335ea7024d99.roa (raw, json)
Hash identifier:          r9GmKhFMWPgsUaMVK59uGwBXQY6W6XZ685tuPXgnrLI=
Subject key identifier:   1D:32:1A:AA:27:4C:A8:42:58:AA:87:B3:3D:0C:6C:9A:BB:5B:EC:FB
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F4328584AB220D5D0372144A29C5D0040
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/860e28cf-fb11-3efd-8cea-335ea7024d99.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     1299
IP address blocks:        204.156.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d5:d0:37:21:44:a2:9c:5d:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=115e4ca6-da99-4610-a69e-764e65fc43bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:eb:2f:eb:cf:03:b5:f5:c4:cd:71:da:f1:48:
                    e9:f9:89:9f:e7:6b:6e:fb:72:ca:27:cf:56:1d:38:
                    bf:42:71:d4:a9:48:2d:b8:52:29:41:ff:58:30:a1:
                    74:1c:aa:1a:d0:e5:b3:e6:8e:38:41:bb:e9:82:69:
                    d9:87:ab:43:4b:7a:8b:83:b8:05:6f:88:c9:da:52:
                    74:70:ba:65:9c:7d:3d:12:a1:0e:50:73:30:42:0b:
                    de:fb:a5:cc:99:5c:43:d5:18:a3:72:7b:a3:1c:52:
                    c6:5e:11:cd:05:4f:88:19:0a:51:f6:b2:b7:4f:01:
                    a0:f0:7f:78:d3:f4:f1:66:ab:ac:7c:d8:a7:c1:af:
                    00:65:f8:e0:e8:e4:0c:ad:ca:3a:7c:d1:b3:dc:5a:
                    34:ac:ba:2e:17:2a:11:ca:5d:c7:fd:f0:b6:17:5b:
                    14:b5:de:cf:10:71:2d:7b:d4:8c:63:3d:fc:ca:29:
                    a7:94:8e:24:7a:9d:f9:bc:fd:43:0c:82:dd:36:49:
                    ed:1e:b2:af:47:4d:b7:e8:7a:cf:da:e6:a9:a3:88:
                    61:f8:4d:65:fd:bc:16:a1:b7:8d:1c:dc:67:22:40:
                    bb:e3:c1:c4:b8:aa:76:80:1c:61:6d:04:b7:58:75:
                    bb:d0:b4:f3:42:7e:01:2b:60:c6:18:50:59:6c:b3:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:32:1A:AA:27:4C:A8:42:58:AA:87:B3:3D:0C:6C:9A:BB:5B:EC:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/860e28cf-fb11-3efd-8cea-335ea7024d99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:07:50:48:e3:96:64:55:af:39:fd:49:e6:ad:c1:d4:cb:a0:
         a1:f3:cf:fe:5e:1a:2e:7b:8b:bb:97:c0:93:c3:f4:e6:bd:01:
         39:5d:c7:a9:1d:8f:c3:ab:49:c6:ac:e6:e0:64:e8:b7:e2:c2:
         d6:7a:30:34:a0:d4:a4:fd:ac:1b:e2:0a:1e:e3:b6:9a:48:05:
         0e:5a:d6:6e:a8:61:bc:85:df:c7:f3:25:f7:92:72:ed:b6:33:
         5a:d3:2b:2e:12:93:17:42:5c:60:59:a8:5e:2f:b7:5c:62:f2:
         77:6d:ba:07:34:30:3b:01:39:e6:8f:a0:c6:8c:6f:c0:96:a5:
         76:c7:85:70:53:6f:95:8f:13:78:d8:70:6a:40:f9:45:4e:79:
         63:00:f1:33:85:e0:ca:14:2a:5a:76:40:ac:e1:9e:be:d7:92:
         7d:b5:61:6f:6b:c4:41:86:85:d9:55:e5:43:3c:31:41:cd:8a:
         7a:8f:29:bb:12:39:af:44:ab:c4:58:6a:70:c3:25:6a:4e:25:
         3f:84:64:8d:c6:a0:9f:9d:8e:ff:2d:e2:64:b0:3f:19:56:ed:
         6c:0b:20:8c:bf:2f:d1:42:85:44:5f:92:34:8a:05:51:47:01:
         e4:4c:0e:2f:05:4e:2c:61:71:45:ff:6f:4e:85:13:a9:6e:95:
         0e:79:38:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyINXQNyFEopxdAEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JjNzM0ODMtNjAzNC00ZGMwLWJiZjUtZTRkODJiZjI4
YWY5MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MTE1ZTRjYTYtZGE5OS00NjEwLWE2OWUtNzY0ZTY1ZmM0M2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+sv688DtfXEzXHa8Ujp+Ymf52tu+3LKJ89W
HTi/QnHUqUgtuFIpQf9YMKF0HKoa0OWz5o44QbvpgmnZh6tDS3qLg7gFb4jJ2lJ0
cLplnH09EqEOUHMwQgve+6XMmVxD1RijcnujHFLGXhHNBU+IGQpR9rK3TwGg8H94
0/TxZqusfNinwa8AZfjg6OQMrco6fNGz3Fo0rLouFyoRyl3H/fC2F1sUtd7PEHEt
e9SMYz38yimnlI4kep35vP1DDILdNkntHrKvR0236HrP2uapo4hh+E1l/bwWobeN
HNxnIkC748HEuKp2gBxhbQS3WHW70LTzQn4BK2DGGFBZbLPP+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0yGqonTKhCWKqHsz0MbJq7W+z7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYmM3
MzQ4My02MDM0LTRkYzAtYmJmNS1lNGQ4MmJmMjhhZjkvODYwZTI4Y2YtZmIxMS0z
ZWZkLThjZWEtMzM1ZWE3MDI0ZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2JjNzM0ODMtNjAzNC00ZGMwLWJi
ZjUtZTRkODJiZjI4YWY5L2NiYzczNDgzLTYwMzQtNGRjMC1iYmY1LWU0ZDgyYmYy
OGFmOS5jcmwwHwYDVR0jBBgwFoAUXtsNbM5NizgqaOXw+ekRwi1IZsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYmM3MzQ4My02MDM0LTRkYzAtYmJmNS1lNGQ4
MmJmMjhhZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJxWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH4HUEjjlmRVrzn9SeatwdTLoKHzz/5eGi57i7uXwJPD9Oa9ATldx6kd
j8OrScas5uBk6LfiwtZ6MDSg1KT9rBviCh7jtppIBQ5a1m6oYbyF38fzJfeScu22
M1rTKy4SkxdCXGBZqF4vt1xi8ndtugc0MDsBOeaPoMaMb8CWpXbHhXBTb5WPE3jY
cGpA+UVOeWMA8TOF4MoUKlp2QKzhnr7Xkn21YW9rxEGGhdlV5UM8MUHNinqPKbsS
Oa9Eq8RYanDDJWpOJT+EZI3GoJ+djv8t4mSwPxlW7WwLIIy/L9FChURfkjSKBVFH
AeRMDi8FTixhcUX/b06FE6lulQ55OGE=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:39:43 2025 by rpki-client