Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/d892b856-8973-3b3e-9c3a-b2156288988e.roa
File:                     d892b856-8973-3b3e-9c3a-b2156288988e.roa (raw, json)
Hash identifier:          tspzuHLFRp/opvlKCaTmjq5MvtN/mPK7lZRpGgnu7XA=
Subject key identifier:   EA:E7:74:FB:38:99:4E:DF:D8:C8:8E:5C:3C:95:07:12:AF:09:8A:CA
Certificate issuer:       /CN=b7f47051-24e9-4c6d-a7f1-2165292c5530
Certificate serial:       010D0C9F43285849CC70333F508F4C33547ED880
Authority key identifier: 6F:67:21:58:89:0F:9A:09:B1:72:56:0B:79:3A:B9:D7:1D:DD:3C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/d892b856-8973-3b3e-9c3a-b2156288988e.roa
Signing time:             Fri 09 May 2025 18:24:48 +0000
ROA not before:           Fri 09 May 2025 18:24:48 +0000
ROA not after:            Thu 07 Aug 2025 18:24:48 +0000
asID:                     19050
IP address blocks:        156.40.93.0/24 maxlen: 24
                          156.40.94.0/23 maxlen: 23
                          156.40.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cc:70:33:3f:50:8f:4c:33:54:7e:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f47051-24e9-4c6d-a7f1-2165292c5530
        Validity
            Not Before: May  9 18:24:48 2025 GMT
            Not After : Aug  7 18:24:48 2025 GMT
        Subject: CN=7149b775-3836-4a5b-bcae-16ec9be75d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:49:34:09:9b:4b:fa:1d:81:d9:65:87:71:
                    27:7d:00:f2:1e:1c:16:d4:b9:2d:99:58:7e:a5:f1:
                    87:dc:00:5d:db:61:79:12:4a:bb:fa:c1:e5:40:fa:
                    37:d0:27:aa:ea:85:ac:01:fe:0f:ef:33:45:67:ba:
                    52:bf:af:99:90:ef:e8:4a:4f:ae:85:e2:07:e9:42:
                    b4:36:c7:20:9f:71:84:c4:ac:b4:78:4a:74:a7:f5:
                    99:cb:a5:80:b5:db:48:45:65:5e:a1:ec:09:aa:4a:
                    74:dc:c4:25:86:f8:76:0a:f6:28:db:ba:b8:d0:73:
                    aa:2c:c3:a3:c2:6b:84:b3:e4:89:62:ed:c8:c1:9d:
                    f9:72:a1:10:a5:55:a2:d7:ab:2f:a5:b3:ef:8f:fd:
                    e2:8b:9c:b5:f8:d9:de:e3:d3:82:89:1f:f5:f4:98:
                    f7:3d:76:4c:84:48:60:2e:ca:81:62:5a:de:53:d1:
                    e1:ca:c3:ec:5e:cb:8d:3e:aa:e9:8e:f3:02:00:e3:
                    8b:d2:9c:57:e8:af:fb:d7:47:ce:bd:af:71:e0:2b:
                    c4:a1:94:2d:ff:0d:c3:e2:78:65:62:e7:43:76:7a:
                    12:c1:ab:6b:d3:5e:f3:d6:ac:db:6f:a2:84:14:98:
                    ad:fc:79:6a:f5:c6:2b:07:ff:d4:43:b5:c9:c3:04:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E7:74:FB:38:99:4E:DF:D8:C8:8E:5C:3C:95:07:12:AF:09:8A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/d892b856-8973-3b3e-9c3a-b2156288988e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.crl

            X509v3 Authority Key Identifier:
                keyid:6F:67:21:58:89:0F:9A:09:B1:72:56:0B:79:3A:B9:D7:1D:DD:3C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.40.93.0-156.40.95.255
                  156.40.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:cf:c5:45:92:56:aa:f8:be:c4:34:ad:df:77:fe:23:b9:bb:
         cb:29:05:10:05:34:d2:b3:a5:fb:c6:a1:bd:c9:bf:74:8e:61:
         08:f4:d0:85:62:87:0b:8a:3a:32:6e:45:96:7e:3e:e8:de:7a:
         60:a8:cf:48:ec:b4:b4:23:a2:c4:93:48:f7:51:4c:9b:1e:e8:
         e8:95:70:12:3e:cd:ec:3e:ff:81:f9:d0:dd:00:a6:59:2f:9a:
         72:38:86:52:b4:4c:3b:85:f1:bd:4f:fe:bb:a2:18:53:d3:91:
         3d:a6:3b:f8:52:e2:af:6d:d0:53:f6:95:66:e7:19:d6:74:6c:
         d0:1b:2f:95:af:d2:28:50:5e:10:4f:69:ae:62:21:06:95:b5:
         0a:72:a9:50:9a:3c:c2:9b:92:d8:db:9e:c2:6a:da:7f:e8:51:
         b7:66:9b:d5:82:56:d1:8d:fa:c3:1e:0e:84:dd:7b:b9:f1:09:
         15:87:dd:e3:8c:ee:31:75:a3:35:81:8e:b0:d8:f2:b1:5a:dd:
         5c:f9:69:62:c9:44:fe:82:21:4a:45:7f:75:07:74:7b:6c:c0:
         a6:6c:9b:ae:2a:f7:95:7e:0c:64:2c:48:15:06:88:16:a9:42:
         fc:16:b1:99:50:e7:81:2d:7a:c0:31:d5:45:54:07:61:d7:14:
         9e:54:ef:2b
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEnMcDM/UI9MM1R+2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjdmNDcwNTEtMjRlOS00YzZkLWE3ZjEtMjE2NTI5MmM1
NTMwMB4XDTI1MDUwOTE4MjQ0OFoXDTI1MDgwNzE4MjQ0OFowLzEtMCsGA1UEAxMk
NzE0OWI3NzUtMzgzNi00YTViLWJjYWUtMTZlYzliZTc1ZDNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeJJNAmbS/odgdllh3EnfQDyHhwW1LktmVh+
pfGH3ABd22F5Ekq7+sHlQPo30Ceq6oWsAf4P7zNFZ7pSv6+ZkO/oSk+uheIH6UK0
Nscgn3GExKy0eEp0p/WZy6WAtdtIRWVeoewJqkp03MQlhvh2CvYo27q40HOqLMOj
wmuEs+SJYu3IwZ35cqEQpVWi16svpbPvj/3ii5y1+Nne49OCiR/19Jj3PXZMhEhg
LsqBYlreU9HhysPsXsuNPqrpjvMCAOOL0pxX6K/710fOva9x4CvEoZQt/w3D4nhl
YudDdnoSwatr017z1qzbb6KEFJit/Hlq9cYrB//UQ7XJwwTs4wIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFOrndPs4mU7f2MiOXDyVBxKvCYrKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iN2Y0
NzA1MS0yNGU5LTRjNmQtYTdmMS0yMTY1MjkyYzU1MzAvZDg5MmI4NTYtODk3My0z
YjNlLTljM2EtYjIxNTYyODg5ODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjdmNDcwNTEtMjRlOS00YzZkLWE3
ZjEtMjE2NTI5MmM1NTMwL2I3ZjQ3MDUxLTI0ZTktNGM2ZC1hN2YxLTIxNjUyOTJj
NTUzMC5jcmwwHwYDVR0jBBgwFoAUb2chWIkPmgmxclYLeTq51x3dPP0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9iN2Y0NzA1MS0yNGU5LTRjNmQtYTdmMS0yMTY1
MjkyYzU1MzAuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACcKF0D
BAWcKEADBACcKMUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAj8/FRZJWqvi+xDSt33f+I7m7yykFEAU00rOl
+8ahvcm/dI5hCPTQhWKHC4o6Mm5Fln4+6N56YKjPSOy0tCOixJNI91FMmx7o6JVw
Ej7N7D7/gfnQ3QCmWS+acjiGUrRMO4XxvU/+u6IYU9ORPaY7+FLir23QU/aVZucZ
1nRs0Bsvla/SKFBeEE9prmIhBpW1CnKpUJo8wpuS2Nuewmraf+hRt2ab1YJW0Y36
wx4OhN17ufEJFYfd44zuMXWjNYGOsNjysVrdXPlpYslE/oIhSkV/dQd0e2zApmyb
rir3lX4MZCxIFQaIFqlC/BaxmVDngS16wDHVRVQHYdcUnlTvKw==
-----END CERTIFICATE-----
Generated at Thu Jun 19 11:33:54 2025 by rpki-client