Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa
File:                     7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa (raw, json)
Hash identifier:          LhG1eIg1C8TCc9UgWNh0oxZgo59IoF440zbHOd+3kBI=
Subject key identifier:   47:8C:AD:E4:57:3B:C8:1A:2F:99:C4:8A:FB:C4:85:EA:60:DC:69:33
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584A8C70C2DAAF1FD63DD8793080
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     18934
IP address blocks:        162.208.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c2:da:af:1f:d6:3d:d8:79:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=e239e24f-a9d5-4edb-98c0-ab7b05978d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:dc:2d:01:5e:bf:49:d6:06:d9:62:cd:cc:
                    91:be:05:03:ee:9b:02:47:79:33:c2:5a:5d:42:f1:
                    10:64:81:96:f1:55:24:d2:5f:4c:25:f7:b7:a2:7a:
                    8f:bd:96:47:27:06:3a:f5:20:7e:e3:b7:02:bf:73:
                    94:61:15:21:06:42:78:3a:9d:65:30:e2:a1:b9:aa:
                    6f:8d:7d:d7:3c:b2:4c:30:1e:34:3b:bb:d5:1c:38:
                    f6:4c:4e:68:96:6f:67:7b:65:23:4a:1b:99:d3:87:
                    de:ae:7a:93:bd:68:6b:2d:d4:a9:69:7c:44:fb:8e:
                    0e:b0:c9:72:ae:68:4c:d7:7b:cd:55:ba:4e:1e:59:
                    c6:7d:c2:9c:e1:b6:3f:d5:38:85:dc:fb:46:11:ce:
                    77:1b:ed:ed:2a:be:13:47:31:1b:62:23:8b:ab:71:
                    12:52:1b:87:5d:7f:c6:db:ce:37:7b:ba:ca:34:3e:
                    31:44:49:36:65:d3:93:9e:42:6c:af:cc:53:1d:1c:
                    ec:57:3d:b4:f0:6e:42:14:7a:67:ef:8c:0e:a8:b9:
                    27:c6:49:cd:3e:c8:45:bb:7d:fd:de:5d:1b:ec:c5:
                    d9:d5:55:6a:21:6f:e1:8e:1f:cf:e0:46:59:00:be:
                    2f:5e:11:e9:01:f9:4b:04:e8:17:7c:26:9a:c5:95:
                    ed:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8C:AD:E4:57:3B:C8:1A:2F:99:C4:8A:FB:C4:85:EA:60:DC:69:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:5c:4f:31:b4:0b:cd:7c:e3:1a:5e:a1:63:11:5c:27:2b:3a:
         9a:23:13:0b:db:12:31:13:f0:bc:be:e7:c3:f1:52:ed:a9:a1:
         c7:2c:c0:47:6b:1f:22:22:a6:98:bf:63:e1:b6:cd:b5:08:10:
         c9:9b:ae:18:6f:2a:16:87:21:ce:5e:da:8d:90:ce:62:59:2d:
         d3:26:17:bc:8a:11:91:a0:0a:4e:31:f5:0e:b0:85:f8:85:77:
         6a:4d:06:d0:57:21:a6:d4:1e:61:ba:fb:10:57:2f:3b:fe:88:
         e1:45:8c:61:d3:33:f7:7a:4c:e6:fd:ff:bb:27:a6:9f:98:4f:
         9a:cc:66:c7:25:e4:a1:b2:4e:be:5c:6d:7a:c1:23:42:c4:f4:
         67:91:ce:7e:4f:b2:59:fa:41:e7:89:39:4a:4d:3c:e9:c9:b5:
         6d:84:dd:89:31:dd:d6:90:ed:de:22:76:59:fb:b8:1e:30:a5:
         17:a6:c4:b2:76:50:52:2e:37:c0:23:8b:83:b8:5d:91:ce:42:
         ba:de:43:0c:33:af:33:f7:c3:94:d3:3f:d2:19:aa:ec:18:3a:
         de:3c:32:54:71:46:40:5a:92:2a:22:3e:6e:73:0c:41:dd:63:
         29:8d:e7:b2:2b:6d:e8:e9:70:9c:ba:8b:cf:bd:b2:aa:1b:e8:
         f3:ca:e0:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcMLarx/WPdh5MIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ5MjEzZjctMjhlMi00ZmExLTg0OTEtNzhlMzU4MGNk
YjdmMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk
ZTIzOWUyNGYtYTlkNS00ZWRiLTk4YzAtYWI3YjA1OTc4ZDZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuXcLQFev0nWBtlizcyRvgUD7psCR3kzwlpd
QvEQZIGW8VUk0l9MJfe3onqPvZZHJwY69SB+47cCv3OUYRUhBkJ4Op1lMOKhuapv
jX3XPLJMMB40O7vVHDj2TE5olm9ne2UjShuZ04fernqTvWhrLdSpaXxE+44OsMly
rmhM13vNVbpOHlnGfcKc4bY/1TiF3PtGEc53G+3tKr4TRzEbYiOLq3ESUhuHXX/G
2843e7rKND4xREk2ZdOTnkJsr8xTHRzsVz208G5CFHpn74wOqLknxknNPshFu339
3l0b7MXZ1VVqIW/hjh/P4EZZAL4vXhHpAflLBOgXfCaaxZXtNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEeMreRXO8gaL5nEivvEhepg3GkzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNDky
MTNmNy0yOGUyLTRmYTEtODQ5MS03OGUzNTgwY2RiN2YvN2M4YTRiOTktMjgzYi0z
MjM0LWI4MTYtYjRiNTQwOWY4YTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzQ5MjEzZjctMjhlMi00ZmExLTg0
OTEtNzhlMzU4MGNkYjdmLzM0OTIxM2Y3LTI4ZTItNGZhMS04NDkxLTc4ZTM1ODBj
ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUl16fqcxh1Y3cB+3gRH1f3Ykt9AMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNDkyMTNmNy0yOGUyLTRmYTEtODQ5MS03OGUz
NTgwY2RiN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotBpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERcTzG0C8184xpeoWMRXCcrOpojEwvbEjET8Ly+58PxUu2poccswEdr
HyIippi/Y+G2zbUIEMmbrhhvKhaHIc5e2o2QzmJZLdMmF7yKEZGgCk4x9Q6whfiF
d2pNBtBXIabUHmG6+xBXLzv+iOFFjGHTM/d6TOb9/7snpp+YT5rMZscl5KGyTr5c
bXrBI0LE9GeRzn5Psln6QeeJOUpNPOnJtW2E3Ykx3daQ7d4idln7uB4wpRemxLJ2
UFIuN8Aji4O4XZHOQrreQwwzrzP3w5TTP9IZquwYOt48MlRxRkBakioiPm5zDEHd
YymN57IrbejpcJy6i8+9sqob6PPK4IY=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:25:21 2025 by rpki-client