Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa
File:                     8462c1ed-9529-306f-9950-18fd383eb4c7.roa (raw, json)
Hash identifier:          G56IgQYuZjz+JVSLyiccOVlW9Ifg9rIBtZ29wwcn2lA=
Subject key identifier:   ED:CA:9F:B5:9C:05:F9:9C:19:20:01:5E:32:AD:8B:89:48:C3:9F:D8
Certificate issuer:       /CN=291f5e6d-adaa-43d5-93a3-f96c4b72f3c8
Certificate serial:       010D0C9F4328584AA42B7BD11D22FAB7AD17D680
Authority key identifier: 37:55:82:67:68:90:62:3F:A3:B2:67:E3:53:85:66:F2:16:A2:1E:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     64223
IP address blocks:        192.251.56.0/24 maxlen: 24
                          209.94.85.0/24 maxlen: 24
                          2620:70:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7b:d1:1d:22:fa:b7:ad:17:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291f5e6d-adaa-43d5-93a3-f96c4b72f3c8
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=92dc10ce-082b-4b8e-82b4-9c9ee5ced63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:02:a3:95:3c:5b:9c:93:69:c8:18:59:9f:
                    3f:14:1c:2f:71:a4:a9:dd:3e:0f:78:7d:4a:5b:ee:
                    c5:ad:8b:8e:d6:fe:cc:2b:74:35:12:b8:f0:69:3b:
                    a6:28:89:92:c5:78:de:13:80:6c:e4:62:a1:d4:62:
                    0b:d6:6c:1c:4e:7f:57:4c:e1:58:31:a7:81:51:80:
                    37:d1:e3:0a:e3:99:e9:f6:b8:fb:6b:fe:fb:d0:ca:
                    89:d1:03:d7:a1:94:e6:92:3d:47:4c:c5:4f:7c:8c:
                    fc:33:65:9e:09:14:9e:2e:24:bc:de:2c:53:74:88:
                    40:f1:45:6e:12:b5:5b:10:2b:d3:a5:09:40:13:a7:
                    bd:4f:64:aa:1c:8d:32:69:a8:be:72:5d:7d:c3:5e:
                    07:81:6d:e3:0a:a5:37:09:c0:fd:a3:b1:48:6b:be:
                    37:24:21:56:a5:42:e6:0e:4d:21:f3:e1:9e:f5:4d:
                    c1:4b:28:3a:47:a2:84:dc:02:d9:5d:08:48:6c:d0:
                    b4:13:ef:64:ce:4b:ac:c9:fd:d0:c6:90:aa:62:52:
                    fd:be:61:52:ee:e5:6b:83:a7:f4:2f:82:83:51:a8:
                    9d:94:8d:94:b0:e9:cb:6d:7f:c4:87:6a:9b:e0:6f:
                    49:84:c4:66:b9:f5:c7:1a:99:55:c8:00:ac:66:4c:
                    76:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CA:9F:B5:9C:05:F9:9C:19:20:01:5E:32:AD:8B:89:48:C3:9F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/8462c1ed-9529-306f-9950-18fd383eb4c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.crl

            X509v3 Authority Key Identifier:
                keyid:37:55:82:67:68:90:62:3F:A3:B2:67:E3:53:85:66:F2:16:A2:1E:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.251.56.0/24
                  209.94.85.0/24
                IPv6:
                  2620:70:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ac:b6:89:9e:41:1d:39:9c:e2:92:1b:c7:97:fa:7d:70:84:
         5c:d3:58:45:55:c5:37:a2:1b:89:5a:ac:b0:39:b4:86:4c:78:
         c5:b6:00:76:b2:b0:59:d6:3b:f3:18:ed:40:45:20:10:c4:1c:
         d6:a8:87:ac:24:95:f7:90:30:9a:0f:fb:81:88:8d:ed:0b:c1:
         09:f5:8a:42:78:30:94:67:8c:9c:ee:5d:c8:47:38:76:0e:27:
         4e:20:e1:33:c5:35:b5:5e:ce:e6:69:aa:6f:46:2e:e8:03:53:
         22:c1:a5:12:6f:7d:14:a4:a2:b3:bd:53:7d:82:ec:8f:c5:39:
         05:d5:9f:ef:a1:36:bf:5a:a3:49:24:98:36:f9:ec:3d:30:87:
         30:3b:01:4c:21:92:97:76:01:58:b7:0d:7c:4c:04:26:ef:53:
         b5:a5:fc:7f:e8:a1:61:b5:e1:3e:1c:44:12:d9:83:30:c5:5e:
         e3:cb:fd:61:b1:a1:6b:ae:e5:12:5b:51:1f:b2:76:16:a7:fe:
         fb:c4:e7:d6:5a:8d:68:43:61:fb:39:1d:8e:a5:61:50:09:ca:
         ef:09:fe:7c:57:9d:52:2d:a0:41:08:22:6f:33:be:7e:4a:b8:
         10:eb:ba:d3:f9:5a:81:44:bf:b7:5e:c0:70:d2:91:ba:8b:38:
         45:43:f2:82
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEqkK3vRHSL6t60X1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjkxZjVlNmQtYWRhYS00M2Q1LTkzYTMtZjk2YzRiNzJm
M2M4MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
OTJkYzEwY2UtMDgyYi00YjhlLTgyYjQtOWM5ZWU1Y2VkNjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhACo5U8W5yTacgYWZ8/FBwvcaSp3T4PeH1K
W+7FrYuO1v7MK3Q1ErjwaTumKImSxXjeE4Bs5GKh1GIL1mwcTn9XTOFYMaeBUYA3
0eMK45np9rj7a/770MqJ0QPXoZTmkj1HTMVPfIz8M2WeCRSeLiS83ixTdIhA8UVu
ErVbECvTpQlAE6e9T2SqHI0yaai+cl19w14HgW3jCqU3CcD9o7FIa743JCFWpULm
Dk0h8+Ge9U3BSyg6R6KE3ALZXQhIbNC0E+9kzkusyf3QxpCqYlL9vmFS7uVrg6f0
L4KDUaidlI2UsOnLbX/Eh2qb4G9JhMRmufXHGplVyACsZkx2PwIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFO3Kn7WcBfmcGSABXjKti4lIw5/YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTFm
NWU2ZC1hZGFhLTQzZDUtOTNhMy1mOTZjNGI3MmYzYzgvODQ2MmMxZWQtOTUyOS0z
MDZmLTk5NTAtMThmZDM4M2ViNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxZjVlNmQtYWRhYS00M2Q1LTkz
YTMtZjk2YzRiNzJmM2M4LzI5MWY1ZTZkLWFkYWEtNDNkNS05M2EzLWY5NmM0Yjcy
ZjNjOC5jcmwwHwYDVR0jBBgwFoAUN1WCZ2iQYj+jsmfjU4Vm8haiHgQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTFmNWU2ZC1hZGFhLTQzZDUtOTNhMy1mOTZj
NGI3MmYzYzguY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwPs4AwQA
0V5VMA8EAgACMAkDBwAmIABwQAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQqy2iZ5BHTmc4pIbx5f6fXCE
XNNYRVXFN6IbiVqssDm0hkx4xbYAdrKwWdY78xjtQEUgEMQc1qiHrCSV95Awmg/7
gYiN7QvBCfWKQngwlGeMnO5dyEc4dg4nTiDhM8U1tV7O5mmqb0Yu6ANTIsGlEm99
FKSis71TfYLsj8U5BdWf76E2v1qjSSSYNvnsPTCHMDsBTCGSl3YBWLcNfEwEJu9T
taX8f+ihYbXhPhxEEtmDMMVe48v9YbGha67lEltRH7J2Fqf++8Tn1lqNaENh+zkd
jqVhUAnK7wn+fFedUi2gQQgibzO+fkq4EOu60/lagUS/t17AcNKRuos4RUPygg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:04:21 2025 by rpki-client