Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/9441ac5d-8038-3804-a070-de79dbd3c348.roa
File:                     9441ac5d-8038-3804-a070-de79dbd3c348.roa (raw, json)
Hash identifier:          3k2StBqhG8DYzwat4hp0//7k55RN4RbvpEcriyHHjxw=
Subject key identifier:   08:1F:18:19:8B:2D:34:A0:F7:EF:B0:96:B6:2B:14:77:43:44:95:C6
Certificate issuer:       /CN=2a604bed-acbd-4708-aa13-73f700eaabf6
Certificate serial:       010D0C9F4328584AA42B8373EC78F40EEB57E040
Authority key identifier: 6C:57:E2:66:32:44:4A:B5:CE:A5:FA:DF:68:97:DC:BB:59:81:95:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/9441ac5d-8038-3804-a070-de79dbd3c348.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     3801
IP address blocks:        143.55.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:83:73:ec:78:f4:0e:eb:57:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a604bed-acbd-4708-aa13-73f700eaabf6
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=afb97486-bc89-4b6e-88e4-345aaaa7ca9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:8f:bc:4f:58:76:31:ec:4b:0c:e6:12:3a:
                    8c:41:7f:8f:4f:64:47:9b:c7:3b:da:80:ee:31:b8:
                    f4:09:03:87:fc:75:22:40:7d:90:db:85:5f:47:4f:
                    44:4a:5d:04:34:f6:da:c9:f3:d7:fc:ce:c9:c8:ec:
                    95:ca:9e:8d:96:ae:27:07:a6:7b:b2:61:af:99:69:
                    b0:f9:81:80:20:e8:2c:ff:f8:b3:26:83:7b:ff:8f:
                    97:3f:54:f3:55:19:0b:c1:16:86:eb:60:58:8c:7c:
                    a9:5b:e0:6d:b8:13:1e:65:80:80:bc:37:dc:49:0e:
                    21:9e:4e:7b:24:7f:f9:55:fe:7a:9b:d2:2f:3e:b5:
                    23:d9:92:cd:48:16:99:3a:9a:2b:d5:f9:42:08:40:
                    32:53:f6:16:09:ee:8c:79:91:f4:c4:55:37:2b:a7:
                    44:7e:48:ea:32:38:8b:25:5b:f9:29:4e:6c:ed:cd:
                    1f:11:5c:77:ca:84:d1:ae:b3:78:e6:b6:22:dc:96:
                    8a:12:64:eb:d7:38:83:d5:81:f9:35:e9:b4:dc:66:
                    04:de:a1:a4:75:59:78:0b:6e:e3:97:f7:ff:de:a8:
                    ed:6a:bf:a8:2d:a6:a4:5e:3d:b3:ec:09:f3:d2:20:
                    35:1b:ab:c4:c5:f0:86:07:90:ee:5a:f3:c1:10:7f:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1F:18:19:8B:2D:34:A0:F7:EF:B0:96:B6:2B:14:77:43:44:95:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/9441ac5d-8038-3804-a070-de79dbd3c348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.crl

            X509v3 Authority Key Identifier:
                keyid:6C:57:E2:66:32:44:4A:B5:CE:A5:FA:DF:68:97:DC:BB:59:81:95:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:82:46:05:cc:95:de:0c:c6:a8:c4:d7:3c:ce:6a:80:a6:27:
         b3:23:eb:e0:90:f2:65:f8:5a:24:78:50:45:3d:05:c7:78:0d:
         26:14:b1:77:f0:47:72:2d:c7:50:83:e9:bb:8b:f1:c7:08:e0:
         77:7e:16:0b:74:e1:2f:72:3b:be:2a:24:7f:aa:d3:ef:8d:ec:
         33:55:d7:71:f4:b4:3d:20:30:52:3b:82:42:5a:4d:36:2b:a3:
         2f:0f:89:45:b8:d4:6e:d2:bc:38:80:b4:ce:e4:ca:44:36:8b:
         fd:93:48:60:bb:52:ca:b6:67:7d:91:fc:2d:2c:53:c1:77:ed:
         96:51:d7:e5:04:7d:77:78:b2:06:5a:a6:c1:05:a1:6c:ee:f3:
         52:37:ec:f5:88:3f:21:57:87:74:e6:9c:4a:2f:4e:c6:f8:cc:
         f1:d6:2c:03:9c:2c:77:02:4b:f2:6b:d4:71:9d:ca:fc:55:e6:
         2d:51:08:0b:f0:b1:a8:70:72:e6:4c:43:86:27:49:d0:83:56:
         c1:3c:b8:d3:34:d7:43:e7:6c:57:54:ce:25:1f:49:2c:c8:de:
         d0:5e:32:33:b1:1c:9e:3a:fd:58:c2:42:df:1c:86:64:67:02:
         17:28:9d:0d:be:f4:fa:b8:db:d1:22:96:2a:3e:f5:9c:be:0f:
         2a:94:40:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4Nz7Hj0DutX4EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE2MDRiZWQtYWNiZC00NzA4LWFhMTMtNzNmNzAwZWFh
YmY2MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
YWZiOTc0ODYtYmM4OS00YjZlLTg4ZTQtMzQ1YWFhYTdjYTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MKPvE9YdjHsSwzmEjqMQX+PT2RHm8c72oDu
Mbj0CQOH/HUiQH2Q24VfR09ESl0ENPbayfPX/M7JyOyVyp6Nlq4nB6Z7smGvmWmw
+YGAIOgs//izJoN7/4+XP1TzVRkLwRaG62BYjHypW+BtuBMeZYCAvDfcSQ4hnk57
JH/5Vf56m9IvPrUj2ZLNSBaZOpor1flCCEAyU/YWCe6MeZH0xFU3K6dEfkjqMjiL
JVv5KU5s7c0fEVx3yoTRrrN45rYi3JaKEmTr1ziD1YH5Nem03GYE3qGkdVl4C27j
l/f/3qjtar+oLaakXj2z7Anz0iA1G6vExfCGB5DuWvPBEH/RRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAgfGBmLLTSg9++wlrYrFHdDRJXGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTYw
NGJlZC1hY2JkLTQ3MDgtYWExMy03M2Y3MDBlYWFiZjYvOTQ0MWFjNWQtODAzOC0z
ODA0LWEwNzAtZGU3OWRiZDNjMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE2MDRiZWQtYWNiZC00NzA4LWFh
MTMtNzNmNzAwZWFhYmY2LzJhNjA0YmVkLWFjYmQtNDcwOC1hYTEzLTczZjcwMGVh
YWJmNi5jcmwwHwYDVR0jBBgwFoAUbFfiZjJESrXOpfrfaJfcu1mBlWMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTYwNGJlZC1hY2JkLTQ3MDgtYWExMy03M2Y3
MDBlYWFiZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjzcQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK6CRgXMld4MxqjE1zzOaoCmJ7Mj6+CQ8mX4WiR4UEU9Bcd4DSYUsXfw
R3Itx1CD6buL8ccI4Hd+Fgt04S9yO74qJH+q0++N7DNV13H0tD0gMFI7gkJaTTYr
oy8PiUW41G7SvDiAtM7kykQ2i/2TSGC7Usq2Z32R/C0sU8F37ZZR1+UEfXd4sgZa
psEFoWzu81I37PWIPyFXh3TmnEovTsb4zPHWLAOcLHcCS/Jr1HGdyvxV5i1RCAvw
sahwcuZMQ4YnSdCDVsE8uNM010PnbFdUziUfSSzI3tBeMjOxHJ46/VjCQt8chmRn
AhconQ2+9Pq429Eilio+9Zy+DyqUQBU=
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:45:39 2025 by rpki-client