Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/8e308c21-96a9-3c5f-9236-af36b607b789.roa
File:                     8e308c21-96a9-3c5f-9236-af36b607b789.roa (raw, json)
Hash identifier:          uzS9awUi3LSAWLX5+edgHk/erToCtKWsVpjsbiNJ3Jg=
Subject key identifier:   E9:91:03:BA:A6:37:B2:FC:C0:9C:0C:94:5B:B3:C5:1E:CF:84:9D:AB
Certificate issuer:       /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
Certificate serial:       010D0C9F43285849E4EFB528F096C2B677FCEC80
Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/8e308c21-96a9-3c5f-9236-af36b607b789.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     7127
IP address blocks:        192.212.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:b5:28:f0:96:c2:b6:77:fc:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=c84ec5f1-d28b-42d0-aee9-fde02d13d7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:03:7c:03:ee:91:6d:c9:2e:0a:8b:8a:5c:a6:
                    09:82:af:d4:5c:59:89:ab:1f:7d:e5:8a:f6:cf:77:
                    bd:69:87:93:d6:43:83:76:51:95:54:6d:b4:21:35:
                    63:4f:96:c6:ab:54:48:b6:5e:2b:6c:db:d4:de:51:
                    e3:e5:f1:c9:2c:2e:ee:af:f5:34:c6:56:50:0e:5d:
                    f4:ac:d0:e2:b6:68:6f:9d:ba:71:15:f3:73:60:7a:
                    ed:94:d9:a3:8c:8f:ba:b3:a9:ff:82:84:8f:34:6e:
                    f8:6f:5b:5f:16:17:69:e9:db:04:3f:0f:36:35:49:
                    97:a6:35:c8:39:d8:61:26:b7:22:f6:6d:cc:38:e7:
                    5b:fb:c7:e4:d0:9f:70:55:6a:80:ce:06:b4:1e:d7:
                    a1:2b:56:de:be:4e:7c:4d:73:3a:e9:75:f5:8c:c3:
                    fa:9d:92:30:cf:e0:8b:b2:8a:5f:a3:cf:34:a7:e8:
                    a6:0a:72:19:e2:ca:b8:91:0c:1b:45:ca:a3:ac:6b:
                    26:99:f3:4c:f3:f5:55:49:00:59:b8:6f:9d:6a:b2:
                    aa:ca:2d:aa:9f:2a:1b:0b:95:4e:ef:d6:d4:94:c5:
                    5c:27:e2:09:c6:af:3d:d3:91:a3:d6:95:ef:00:9a:
                    49:05:7f:01:2c:d2:31:54:b3:bd:f9:88:22:df:5e:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:91:03:BA:A6:37:B2:FC:C0:9C:0C:94:5B:B3:C5:1E:CF:84:9D:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/8e308c21-96a9-3c5f-9236-af36b607b789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.212.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:db:c0:c9:d5:aa:a2:ba:66:ab:21:05:17:9a:bc:3d:53:4f:
         ad:93:37:46:fa:86:06:8e:2b:e7:77:72:fa:9d:65:6d:8b:6e:
         27:67:64:33:f1:5e:c5:4c:c2:10:b8:4d:87:97:dd:62:0a:8f:
         8e:e4:46:1d:69:59:da:64:ca:ea:33:20:7e:64:cd:68:2c:28:
         89:0e:0e:05:69:ba:e6:fb:53:93:3a:50:5a:f6:d4:22:14:0d:
         f7:bc:43:e7:9a:27:7f:49:ce:49:04:29:cc:24:78:d3:74:47:
         12:11:d3:ce:e9:f9:db:92:f5:38:64:92:8f:6f:54:e9:96:f9:
         a0:4c:b2:ef:ff:8b:60:cb:84:ab:9f:6b:db:3a:87:da:8d:65:
         bc:cc:87:95:e2:01:b3:36:a2:08:57:08:90:8a:e9:65:3d:d5:
         86:14:f9:3c:f2:dd:01:be:91:e7:09:6a:d3:d0:05:67:b0:f5:
         dd:fc:44:a0:a6:b9:20:04:83:9b:58:9d:5d:1c:2d:5b:5e:67:
         6f:85:eb:bd:b0:81:3b:2d:b3:a6:3a:10:05:f3:56:22:1e:0f:
         07:d7:a3:14:81:5b:b1:c8:a7:f0:9b:ad:1f:89:8b:d0:21:78:
         e1:a3:0d:4a:c3:b4:47:0d:97:1f:35:0d:52:a6:0e:63:6d:e0:
         5f:8c:ed:b3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnk77Uo8JbCtnf87IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFhOGMyOTktMDNjYS00YjgxLThiYWUtODNiNmQxYjNk
N2Q5MB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk
Yzg0ZWM1ZjEtZDI4Yi00MmQwLWFlZTktZmRlMDJkMTNkN2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gN8A+6RbckuCouKXKYJgq/UXFmJqx995Yr2
z3e9aYeT1kODdlGVVG20ITVjT5bGq1RItl4rbNvU3lHj5fHJLC7ur/U0xlZQDl30
rNDitmhvnbpxFfNzYHrtlNmjjI+6s6n/goSPNG74b1tfFhdp6dsEPw82NUmXpjXI
OdhhJrci9m3MOOdb+8fk0J9wVWqAzga0HtehK1bevk58TXM66XX1jMP6nZIwz+CL
sopfo880p+imCnIZ4sq4kQwbRcqjrGsmmfNM8/VVSQBZuG+darKqyi2qnyobC5VO
79bUlMVcJ+IJxq8905Gj1pXvAJpJBX8BLNIxVLO9+Ygi317cIwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOmRA7qmN7L8wJwMlFuzxR7PhJ2rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4
YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2ZDFiM2Q3ZDkvOGUzMDhjMjEtOTZhOS0z
YzVmLTkyMzYtYWYzNmI2MDdiNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGFhOGMyOTktMDNjYS00YjgxLThi
YWUtODNiNmQxYjNkN2Q5LzBhYThjMjk5LTAzY2EtNGI4MS04YmFlLTgzYjZkMWIz
ZDdkOS5jcmwwHwYDVR0jBBgwFoAUj/kPBmSwMq4GLXrC40vBjuR5TTwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2
ZDFiM2Q3ZDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBwNQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMdvAydWqorpmqyEFF5q8PVNPrZM3RvqGBo4r53dy+p1lbYtuJ2dkM/Fe
xUzCELhNh5fdYgqPjuRGHWlZ2mTK6jMgfmTNaCwoiQ4OBWm65vtTkzpQWvbUIhQN
97xD55onf0nOSQQpzCR403RHEhHTzun525L1OGSSj29U6Zb5oEyy7/+LYMuEq59r
2zqH2o1lvMyHleIBszaiCFcIkIrpZT3VhhT5PPLdAb6R5wlq09AFZ7D13fxEoKa5
IASDm1idXRwtW15nb4XrvbCBOy2zpjoQBfNWIh4PB9ejFIFbscin8JutH4mL0CF4
4aMNSsO0Rw2XHzUNUqYOY23gX4ztsw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:21:15 2025 by rpki-client