Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/47947b8c-0d15-33e4-8dcf-2ccb10ac333e.roa
File:                     47947b8c-0d15-33e4-8dcf-2ccb10ac333e.roa (raw, json)
Hash identifier:          ixufyvjbljnbdJnW0cy0qMDYSXeihvDQmGp1TQgpy3Q=
Subject key identifier:   A1:F1:23:EE:F4:D1:B5:A6:C9:42:8B:F4:F5:F6:71:14:C8:0C:C7:E0
Certificate issuer:       /CN=4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73
Certificate serial:       010D0C9F4328584A936B5949DC469D3B3D401AC0
Authority key identifier: 19:94:C6:7E:FD:67:B6:20:09:17:94:97:D8:B5:37:C8:BB:8B:D3:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/47947b8c-0d15-33e4-8dcf-2ccb10ac333e.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     11753
IP address blocks:        204.11.240.0/22 maxlen: 24
                          216.220.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:59:49:dc:46:9d:3b:3d:40:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=2b04af78-3d1d-473a-a567-094e919b8ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c1:85:65:2d:ab:b1:2f:6d:77:17:3b:c6:26:
                    73:c2:09:ab:f4:59:ee:11:ff:3d:53:b5:01:75:31:
                    bf:70:0d:72:7a:4e:6b:09:a5:dd:b1:a8:f5:a3:56:
                    61:b5:24:9c:f4:4c:20:cf:08:4d:5b:ea:d2:fc:ef:
                    5b:f3:e9:30:a3:35:8d:3f:bd:cc:2d:41:5e:3c:18:
                    9e:81:3c:f8:60:17:c2:4c:ed:5b:a4:87:1d:5a:90:
                    93:7d:91:0b:e8:87:ff:d7:5a:a5:e7:8a:89:2e:cd:
                    0c:85:6d:3b:a4:85:c1:8c:7e:af:b1:c7:b0:3c:85:
                    d3:aa:86:23:c2:84:b8:64:46:c8:9d:01:c7:32:93:
                    dc:a2:10:31:0a:32:99:9f:90:1c:85:89:e5:b8:28:
                    c9:49:1a:7d:50:ed:bf:f2:7b:c2:b9:f8:67:1f:c7:
                    61:f6:35:04:f5:c7:93:db:5b:ee:3e:aa:ab:fd:20:
                    e7:90:10:11:2b:cc:36:37:be:20:15:21:a2:2e:59:
                    9f:b5:11:a7:07:7d:0c:4c:27:2f:0e:d4:0b:af:f9:
                    c9:2f:99:ae:92:cc:c5:b0:28:b1:7c:0a:63:94:bf:
                    a6:5b:d0:7c:ba:48:8f:42:cc:ed:75:14:2b:25:de:
                    1a:5d:f2:93:6b:13:84:bc:3a:4e:e4:4b:14:7a:c6:
                    3f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F1:23:EE:F4:D1:B5:A6:C9:42:8B:F4:F5:F6:71:14:C8:0C:C7:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/47947b8c-0d15-33e4-8dcf-2ccb10ac333e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.crl

            X509v3 Authority Key Identifier:
                keyid:19:94:C6:7E:FD:67:B6:20:09:17:94:97:D8:B5:37:C8:BB:8B:D3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4aa3e9dc-ad5e-4beb-bca1-9a2102ebcf73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.240.0/22
                  216.220.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:40:00:b8:5a:bf:ac:b5:76:76:56:c1:0b:2e:e4:17:f4:1c:
         18:f0:16:45:fb:27:e5:d6:2a:fc:c6:3b:f0:a4:5a:b9:bd:45:
         5d:0f:7b:39:81:58:a2:07:33:0f:a4:13:dd:bb:62:23:f3:31:
         df:7e:e6:c9:d0:40:21:cb:93:58:cc:8b:60:8d:aa:54:e6:47:
         4a:58:24:b3:06:8d:83:22:eb:7b:a9:5c:8c:21:86:76:cd:05:
         74:06:45:cc:a9:29:5f:50:ef:bf:c0:63:12:1d:a0:c8:e9:d4:
         4c:55:0c:56:f2:cd:bb:09:82:cd:5f:0e:7c:64:79:ae:51:e0:
         a1:e8:eb:92:54:12:45:85:8e:ab:3d:fc:65:67:27:19:4b:4a:
         66:23:ed:bd:f3:da:f5:5f:8c:fa:5d:c7:0c:ac:ad:87:51:ab:
         21:8b:87:70:76:e9:49:47:ea:1b:dd:c1:cb:4f:f7:67:56:2f:
         04:96:f1:2b:1e:c9:bc:20:8f:34:22:52:74:12:29:67:97:ac:
         42:d1:ce:48:c8:b9:5b:ef:7c:fb:19:d0:64:0e:00:e8:9c:e3:
         55:16:49:04:8c:94:6c:89:e7:28:71:53:6d:6f:6d:76:03:e9:
         a2:c8:fd:ce:71:fb:6e:d2:ba:7d:7b:ad:48:61:21:3a:d6:24:
         ae:85:26:98
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqTa1lJ3EadOz1AGsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFhM2U5ZGMtYWQ1ZS00YmViLWJjYTEtOWEyMTAyZWJj
ZjczMB4XDTI1MDcyMDAxMDA1MFoXDTI1MTAxODAxMDA1MFowLzEtMCsGA1UEAxMk
MmIwNGFmNzgtM2QxZC00NzNhLWE1NjctMDk0ZTkxOWI4ZWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMGFZS2rsS9tdxc7xiZzwgmr9FnuEf89U7UB
dTG/cA1yek5rCaXdsaj1o1ZhtSSc9EwgzwhNW+rS/O9b8+kwozWNP73MLUFePBie
gTz4YBfCTO1bpIcdWpCTfZEL6If/11ql54qJLs0MhW07pIXBjH6vscewPIXTqoYj
woS4ZEbInQHHMpPcohAxCjKZn5AchYnluCjJSRp9UO2/8nvCufhnH8dh9jUE9ceT
21vuPqqr/SDnkBARK8w2N74gFSGiLlmftRGnB30MTCcvDtQLr/nJL5mukszFsCix
fApjlL+mW9B8ukiPQsztdRQrJd4aXfKTaxOEvDpO5EsUesY/GwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFKHxI+700bWmyUKL9PX2cRTIDMfgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80YWEz
ZTlkYy1hZDVlLTRiZWItYmNhMS05YTIxMDJlYmNmNzMvNDc5NDdiOGMtMGQxNS0z
M2U0LThkY2YtMmNjYjEwYWMzMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGFhM2U5ZGMtYWQ1ZS00YmViLWJj
YTEtOWEyMTAyZWJjZjczLzRhYTNlOWRjLWFkNWUtNGJlYi1iY2ExLTlhMjEwMmVi
Y2Y3My5jcmwwHwYDVR0jBBgwFoAUGZTGfv1ntiAJF5SX2LU3yLuL0wMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80YWEzZTlkYy1hZDVlLTRiZWItYmNhMS05YTIx
MDJlYmNmNzMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCzAvwAwQE
2NygMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFtAALhav6y1dnZWwQsu5Bf0HBjwFkX7J+XWKvzGO/CkWrm9
RV0PezmBWKIHMw+kE927YiPzMd9+5snQQCHLk1jMi2CNqlTmR0pYJLMGjYMi63up
XIwhhnbNBXQGRcypKV9Q77/AYxIdoMjp1ExVDFbyzbsJgs1fDnxkea5R4KHo65JU
EkWFjqs9/GVnJxlLSmYj7b3z2vVfjPpdxwysrYdRqyGLh3B26UlH6hvdwctP92dW
LwSW8SseybwgjzQiUnQSKWeXrELRzkjIuVvvfPsZ0GQOAOic41UWSQSMlGyJ5yhx
U21vbXYD6aLI/c5x+27Sun17rUhhITrWJK6FJpg=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:27:17 2025 by rpki-client