Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa
File:                     0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa (raw, json)
Hash identifier:          lrKatnRBHlY2gXOxJscyOeU6dqdNbgg8Dn8N2Ivf+hk=
Subject key identifier:   78:21:CB:9F:77:21:29:EF:47:82:4C:6C:C8:43:5B:C0:82:42:2E:26
Certificate issuer:       /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial:       010D0C9F4328584AA42B9F5B2DA19C5393F589F0
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     376
IP address blocks:        198.73.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:9f:5b:2d:a1:9c:53:93:f5:89:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=1a6eff4d-16ed-4cfb-8da0-3e99d6ac0924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:8c:36:0b:73:67:b9:9d:a4:ad:f3:f4:70:
                    ea:01:b4:4a:94:c6:5c:3f:33:64:f2:f8:98:24:50:
                    5f:db:b7:ce:a8:87:a6:a1:f4:83:66:91:da:3a:8c:
                    ae:f3:59:1c:c8:51:c6:ce:15:09:b8:b7:1f:af:a2:
                    ad:89:8c:48:80:2c:8a:48:a9:0b:a4:c0:23:39:51:
                    46:7b:12:df:fe:48:95:b2:25:07:45:67:8a:98:b5:
                    0b:dc:2f:a5:c5:1c:4d:84:d7:74:fe:ef:b2:1e:f2:
                    9d:cd:8e:a1:21:4a:f3:a8:ab:15:0e:e6:ba:e5:32:
                    d1:14:f9:90:17:b8:e4:36:a9:41:23:82:b2:4f:1b:
                    63:67:31:fc:49:68:f8:f8:fa:17:0c:ee:d1:74:ca:
                    c9:34:2a:63:14:17:93:dd:a9:b8:a1:ea:c1:f4:71:
                    64:b5:6d:66:21:70:c3:a7:ce:8b:4e:89:a0:4b:33:
                    89:e3:25:6a:3f:9e:63:23:ee:db:1f:21:00:d0:3b:
                    5c:a3:44:66:d6:17:ab:2a:7f:5e:9d:a0:1b:14:ad:
                    5b:11:36:89:c9:a2:50:f0:ac:68:8a:7a:3c:75:85:
                    85:d4:f3:44:1d:5c:5f:be:39:d7:4e:f2:22:ed:11:
                    90:7c:9b:97:54:23:76:69:ea:1b:f7:1c:bf:09:10:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:21:CB:9F:77:21:29:EF:47:82:4C:6C:C8:43:5B:C0:82:42:2E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:a7:0c:a7:6f:2c:9b:85:7f:78:ec:fc:c4:04:47:13:bc:
         15:99:1a:56:f8:15:8e:52:bf:48:8c:b7:c9:6a:04:62:e3:fa:
         4d:d0:40:b2:11:0d:35:ef:48:34:47:36:ea:a2:e4:6e:1e:84:
         93:9d:21:7b:96:61:97:41:c1:e4:a6:c8:95:da:b7:96:01:0c:
         d2:c8:00:c7:62:94:ad:23:bd:1b:b6:10:70:18:64:60:66:a3:
         8a:e9:c4:24:1a:b8:70:6c:c0:70:56:d6:c7:6a:9d:9d:33:1d:
         d5:e9:e8:b4:b5:33:45:9a:6b:41:fd:a7:5e:7b:9f:67:a5:84:
         2c:ff:f6:37:b8:fc:08:59:6e:95:6e:41:a3:34:9b:cb:01:27:
         a6:c1:33:b3:b2:1f:69:0d:b3:d9:0f:43:56:d2:1c:5b:5d:32:
         c0:18:99:fb:a1:be:5a:8f:9d:1b:ea:87:7c:d8:ba:41:5b:4c:
         5b:32:d2:db:0e:ce:d3:67:21:42:b9:86:03:44:64:b7:94:0f:
         94:0d:ce:d9:21:d4:77:3b:c0:56:ee:c5:ad:a0:62:24:db:bf:
         1f:73:b0:fb:f8:4e:87:6b:77:fe:da:51:fe:40:be:1b:9d:34:
         90:6d:e4:82:28:ba:72:66:6c:c4:28:06:92:cf:9a:61:b2:01:
         e8:5e:ba:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK59bLaGcU5P1ifAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUxNTk4MjAtY2Y1Ni00MmViLWI5ZjAtMDE4N2IxMGJi
NzIxMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
MWE2ZWZmNGQtMTZlZC00Y2ZiLThkYTAtM2U5OWQ2YWMwOTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWmMNgtzZ7mdpK3z9HDqAbRKlMZcPzNk8viY
JFBf27fOqIemofSDZpHaOoyu81kcyFHGzhUJuLcfr6KtiYxIgCyKSKkLpMAjOVFG
exLf/kiVsiUHRWeKmLUL3C+lxRxNhNd0/u+yHvKdzY6hIUrzqKsVDua65TLRFPmQ
F7jkNqlBI4KyTxtjZzH8SWj4+PoXDO7RdMrJNCpjFBeT3am4oerB9HFktW1mIXDD
p86LTomgSzOJ4yVqP55jI+7bHyEA0Dtco0Rm1herKn9enaAbFK1bETaJyaJQ8Kxo
ino8dYWF1PNEHVxfvjnXTvIi7RGQfJuXVCN2aeob9xy/CRBTwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHghy593ISnvR4JMbMhDW8CCQi4mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1
OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3YjEwYmI3MjEvMDQ1NmFjMmItNGViYi0z
M2Q1LTk2YjAtYTUyMzRkZmY4N2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGUxNTk4MjAtY2Y1Ni00MmViLWI5
ZjAtMDE4N2IxMGJiNzIxLzhlMTU5ODIwLWNmNTYtNDJlYi1iOWYwLTAxODdiMTBi
YjcyMS5jcmwwHwYDVR0jBBgwFoAUP6asP+ah5UuMrQtDbx2HECUnhEQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3
YjEwYmI3MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkmkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEH1pwynbyybhX947PzEBEcTvBWZGlb4FY5Sv0iMt8lqBGLj+k3QQLIR
DTXvSDRHNuqi5G4ehJOdIXuWYZdBweSmyJXat5YBDNLIAMdilK0jvRu2EHAYZGBm
o4rpxCQauHBswHBW1sdqnZ0zHdXp6LS1M0Waa0H9p157n2elhCz/9je4/AhZbpVu
QaM0m8sBJ6bBM7OyH2kNs9kPQ1bSHFtdMsAYmfuhvlqPnRvqh3zYukFbTFsy0tsO
ztNnIUK5hgNEZLeUD5QNztkh1Hc7wFbuxa2gYiTbvx9zsPv4Todrd/7aUf5Avhud
NJBt5IIounJmbMQoBpLPmmGyAeheukQ=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:17 2025 by rpki-client