Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa
File:                     1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa (raw, json)
Hash identifier:          fBJINsXuL55rG2/oVEWRo01+e2kr0SqGDyomVy7xBjI=
Subject key identifier:   7F:D5:98:B9:0F:22:80:B1:AA:92:C1:C6:05:55:10:E6:C6:C6:2B:F2
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F4328584A8B0B619BA716C37AC3885F00
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        68.233.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:61:9b:a7:16:c3:7a:c3:88:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=9cf25a4b-ef20-4e8f-ad80-c22f0b757497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:3e:1e:94:55:88:bc:b3:bb:fd:f1:1c:ba:
                    c2:9b:c2:30:ce:5c:98:e3:fe:63:3a:a4:33:9c:42:
                    ef:3c:70:3e:23:33:7b:c2:12:8c:96:b6:fc:86:78:
                    be:80:d5:1a:ee:a5:b0:f8:e9:63:b9:70:4c:dd:2f:
                    98:c7:fa:60:90:53:26:bf:87:ac:a9:72:42:60:cb:
                    43:94:c2:42:50:bf:e3:7d:5d:89:32:ec:a2:03:ad:
                    76:e7:9d:c6:b0:d2:89:38:2d:0b:1c:fd:9d:db:8e:
                    c0:87:54:c9:43:2b:8e:21:18:97:19:07:a8:fc:ef:
                    5e:16:27:cd:af:be:9c:5d:e8:22:5c:fe:47:3a:cf:
                    9c:70:dc:12:ef:04:14:a9:8c:ba:96:1f:08:73:b3:
                    7f:4f:30:de:e1:fd:73:61:43:46:57:7a:07:47:e9:
                    ec:6a:45:22:0d:b6:62:0d:e0:0a:4f:82:ba:e7:77:
                    85:1d:09:52:f1:22:95:b2:db:dd:57:7e:bc:60:aa:
                    9b:4c:76:34:49:e8:bc:b9:95:9f:0c:0c:ed:c5:99:
                    f4:01:4e:37:5b:9a:de:a0:08:ad:ff:72:41:c7:bf:
                    ed:e7:85:47:80:f2:f1:03:b0:29:06:ae:08:93:c7:
                    ba:27:0d:05:42:a8:32:ff:50:d7:ef:74:c6:c3:74:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D5:98:B9:0F:22:80:B1:AA:92:C1:C6:05:55:10:E6:C6:C6:2B:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:aa:46:14:e7:a0:ef:b9:14:1c:c7:f4:ac:ea:6a:f1:6f:6d:
         3e:f8:65:63:f5:f2:41:38:fa:16:ae:0e:b6:f4:eb:e4:9d:a4:
         e8:b5:b2:70:59:d8:07:4d:15:f5:ee:28:91:e1:78:18:95:37:
         fa:05:e9:c0:66:bf:db:94:bf:a3:6e:85:4a:7d:c1:62:6e:c4:
         33:41:8b:97:4d:0e:a5:59:4b:59:ca:77:95:af:93:e6:29:d5:
         b8:ae:eb:21:09:91:41:68:73:05:0a:68:81:46:e9:c5:84:de:
         b7:c3:83:a0:50:a4:fa:75:5c:83:ff:93:1a:6a:d9:50:bc:e8:
         23:ad:2a:27:1c:e1:57:f3:df:06:46:cc:c0:ef:53:71:ad:dd:
         3a:b9:1b:84:53:f4:8a:90:24:13:17:90:36:7e:6d:e6:ca:72:
         c4:fa:77:42:8d:0e:30:e6:19:d8:25:96:c9:16:1f:b4:54:7b:
         9e:59:79:82:de:bd:07:49:3d:1c:04:74:a9:c7:ac:88:fc:86:
         ea:da:36:ae:1d:9f:0e:e0:a4:72:39:9b:38:1a:3e:1f:56:06:
         70:5c:a9:2a:5f:7b:20:e8:0c:13:cc:67:3c:a7:01:45:89:ed:
         08:58:6d:30:09:ad:96:33:4a:fc:9d:f5:e7:02:fc:e2:c1:71:
         de:86:97:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2GbpxbDesOIXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4
N2ZmMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk
OWNmMjVhNGItZWYyMC00ZThmLWFkODAtYzIyZjBiNzU3NDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDE+HpRViLyzu/3xHLrCm8IwzlyY4/5jOqQz
nELvPHA+IzN7whKMlrb8hni+gNUa7qWw+OljuXBM3S+Yx/pgkFMmv4esqXJCYMtD
lMJCUL/jfV2JMuyiA612553GsNKJOC0LHP2d247Ah1TJQyuOIRiXGQeo/O9eFifN
r76cXegiXP5HOs+ccNwS7wQUqYy6lh8Ic7N/TzDe4f1zYUNGV3oHR+nsakUiDbZi
DeAKT4K653eFHQlS8SKVstvdV368YKqbTHY0Sei8uZWfDAztxZn0AU43W5reoAit
/3JBx7/t54VHgPLxA7ApBq4Ik8e6Jw0FQqgy/1DX73TGw3RjkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/VmLkPIoCxqpLBxgVVEObGxivyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1
YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvMWIxOWY4YzUtM2NkMS0z
ZWNjLTgyYTQtMjA0NmUzOWY5NTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5
NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl
ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi
OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFeqRhTnoO+5FBzH9KzqavFvbT74ZWP18kE4+hauDrb06+SdpOi1snBZ
2AdNFfXuKJHheBiVN/oF6cBmv9uUv6NuhUp9wWJuxDNBi5dNDqVZS1nKd5Wvk+Yp
1biu6yEJkUFocwUKaIFG6cWE3rfDg6BQpPp1XIP/kxpq2VC86COtKicc4Vfz3wZG
zMDvU3Gt3Tq5G4RT9IqQJBMXkDZ+bebKcsT6d0KNDjDmGdgllskWH7RUe55ZeYLe
vQdJPRwEdKnHrIj8huraNq4dnw7gpHI5mzgaPh9WBnBcqSpfeyDoDBPMZzynAUWJ
7QhYbTAJrZYzSvyd9ecC/OLBcd6Glwg=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:09 2025 by rpki-client