Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa
File:                     42c8111b-72eb-368e-a605-4f13d00564aa.roa (raw, json)
Hash identifier:          riJZhsm6kXiiJETieRzsud6RU4BDb7o/CHgyDSw/T/o=
Subject key identifier:   9B:03:1A:DA:B5:43:98:07:DB:A1:B0:9C:BA:3D:CF:7B:59:51:DB:F7
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584AB4EB6B70D334252CC6B42B80
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     14618
IP address blocks:        208.95.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:6b:70:d3:34:25:2c:c6:b4:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=61599c5d-0a23-41b1-8ade-05d3b0f6caa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:03:12:5e:df:a0:4a:7c:7a:08:53:5d:e7:
                    09:fb:15:90:ba:a7:9f:50:a8:35:99:f0:3f:be:4b:
                    19:4e:29:0d:df:d7:ae:a4:46:31:f2:94:3d:23:f7:
                    f0:d5:7e:28:00:bc:54:3b:d2:f8:2d:e3:a9:e7:52:
                    8f:cb:71:9c:a2:0d:72:16:bf:49:eb:a9:17:f1:52:
                    39:3f:3d:32:ad:b4:8f:f8:0f:ec:4e:b6:97:ff:91:
                    aa:ed:a1:18:ab:d7:6d:85:58:a0:dc:47:1e:92:2b:
                    e6:bc:55:d9:12:1c:e0:ae:62:d6:fd:b7:f4:2e:15:
                    8b:3e:70:65:89:de:51:ba:c4:91:bb:bf:a3:9f:51:
                    15:d7:ab:1e:f0:e4:78:e2:3a:96:0b:fd:9b:27:ba:
                    d8:92:72:87:20:e8:e1:83:e6:9d:92:23:b2:ab:19:
                    a7:b1:bb:67:fd:a8:22:60:ec:1f:96:e2:27:28:78:
                    c5:22:9d:6e:64:f3:11:3e:c3:da:70:cd:0f:32:95:
                    70:95:60:80:35:bf:db:0e:99:06:8a:f9:71:f2:8d:
                    50:15:79:73:e8:59:c2:56:53:db:78:3e:cc:85:ca:
                    3a:89:a2:c9:cf:8d:89:46:87:ba:c7:6a:29:18:ac:
                    99:db:ac:8e:e7:0d:d6:49:f8:10:38:02:d3:45:8d:
                    fd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:03:1A:DA:B5:43:98:07:DB:A1:B0:9C:BA:3D:CF:7B:59:51:DB:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:2d:3a:2f:08:d0:56:03:e7:01:a7:75:29:dd:63:41:73:
         93:64:de:29:11:f7:d4:53:9f:7a:ef:10:45:eb:f1:6b:6d:bb:
         47:d9:50:22:f9:fb:ab:53:95:4f:ac:ee:47:65:8c:69:9b:e7:
         ce:10:e2:a7:80:75:b9:c2:01:38:64:0c:63:df:fe:66:3f:59:
         1f:af:d9:e8:a7:0e:0f:3a:c5:e5:ee:d4:02:5b:e9:ee:4b:06:
         92:e3:18:93:d1:fe:d8:c7:d5:aa:32:d9:da:fa:5b:9c:bc:de:
         f1:32:d2:38:26:8f:22:45:5d:3a:62:93:86:46:28:31:9b:6c:
         8a:e6:2a:a5:58:01:c5:c2:d6:db:54:23:79:54:12:7b:f4:94:
         ff:14:f8:da:de:11:f0:bf:e2:e5:b6:b8:05:2d:d7:f6:6a:95:
         48:28:57:c5:26:a3:b3:81:24:ee:89:68:5b:72:93:3c:1c:88:
         28:f0:72:23:66:be:e3:d6:46:31:d4:b9:eb:e2:e1:a7:6b:45:
         c6:4e:eb:72:cd:84:5e:13:0e:21:8c:d4:62:f4:33:3d:8b:7e:
         59:e7:af:fe:2a:a4:bf:6a:18:66:45:58:3f:24:14:20:29:d5:
         41:c8:70:74:65:33:12:5c:3a:31:61:d1:94:30:cd:e0:d7:4d:
         d3:10:ce:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq062tw0zQlLMa0K4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5
OTNkMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
NjE1OTljNWQtMGEyMy00MWIxLThhZGUtMDVkM2IwZjZjYWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIsDEl7foEp8eghTXecJ+xWQuqefUKg1mfA/
vksZTikN39eupEYx8pQ9I/fw1X4oALxUO9L4LeOp51KPy3Gcog1yFr9J66kX8VI5
Pz0yrbSP+A/sTraX/5Gq7aEYq9dthVig3EcekivmvFXZEhzgrmLW/bf0LhWLPnBl
id5RusSRu7+jn1EV16se8OR44jqWC/2bJ7rYknKHIOjhg+adkiOyqxmnsbtn/agi
YOwfluInKHjFIp1uZPMRPsPacM0PMpVwlWCANb/bDpkGivlx8o1QFXlz6FnCVlPb
eD7Mhco6iaLJz42JRoe6x2opGKyZ26yO5w3WSfgQOALTRY39VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJsDGtq1Q5gH26GwnLo9z3tZUdv3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi
OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvNDJjODExMWItNzJlYi0z
NjhlLWE2MDUtNGYxM2QwMDU2NGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky
NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk
OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy
NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F82MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIThLTovCNBWA+cBp3Up3WNBc5Nk3ikR99RTn3rvEEXr8Wttu0fZUCL5
+6tTlU+s7kdljGmb584Q4qeAdbnCAThkDGPf/mY/WR+v2einDg86xeXu1AJb6e5L
BpLjGJPR/tjH1aoy2dr6W5y83vEy0jgmjyJFXTpik4ZGKDGbbIrmKqVYAcXC1ttU
I3lUEnv0lP8U+NreEfC/4uW2uAUt1/ZqlUgoV8Umo7OBJO6JaFtykzwciCjwciNm
vuPWRjHUuevi4adrRcZO63LNhF4TDiGM1GL0Mz2Lflnnr/4qpL9qGGZFWD8kFCAp
1UHIcHRlMxJcOjFh0ZQwzeDXTdMQzus=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:36 2025 by rpki-client