Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e6ffc483-72dc-3b86-9f89-d980ddcbe56a.roa
File:                     e6ffc483-72dc-3b86-9f89-d980ddcbe56a.roa (raw, json)
Hash identifier:          awQ1AaIItsQpOdnSCQGelHnlZWYGmFGVZYI1LAs+6ms=
Subject key identifier:   4C:E9:57:C7:09:62:6E:48:00:E3:83:D1:19:DA:16:6D:B8:2B:02:03
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584A7780A7AE12779B27F5F5BE80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e6ffc483-72dc-3b86-9f89-d980ddcbe56a.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     18785
IP address blocks:        216.249.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:a7:ae:12:77:9b:27:f5:f5:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=35f23ff5-8ab2-4b38-ae6a-20f6f8fc7c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a4:06:33:3f:db:b5:83:89:87:3a:6f:03:64:
                    12:2e:f5:49:ed:74:33:df:0a:06:48:60:5e:c7:c7:
                    43:90:04:5c:35:87:34:b0:a3:42:a5:6c:83:1d:c2:
                    a2:93:b4:df:a7:11:eb:a8:03:93:18:6f:2d:f8:73:
                    2e:2f:b7:15:64:94:97:91:74:28:8a:19:16:c9:ae:
                    3f:04:ba:50:23:76:02:28:01:cb:0a:24:bb:46:72:
                    20:ad:65:f3:88:b7:bc:25:78:e8:2f:e9:4f:b6:16:
                    90:e6:4c:ac:74:d4:47:5c:ae:51:2f:ea:5f:7b:74:
                    9e:c2:f5:fd:23:80:60:0e:5d:4b:2e:f4:8a:1d:c7:
                    7e:88:9f:0f:b8:88:7c:ba:a2:6e:59:70:9f:06:b7:
                    6b:9f:b1:ee:03:b8:03:cd:07:af:c1:6b:7f:b7:47:
                    fe:72:1b:ca:0c:92:bf:e2:12:a0:c3:df:d1:e6:75:
                    37:4a:97:cb:17:6b:82:53:ee:bf:a6:01:b8:0b:3b:
                    d4:50:5b:c1:be:2d:70:8d:75:da:ea:c9:84:62:f9:
                    be:c9:7f:7d:ee:55:c8:2b:22:76:9f:82:15:25:29:
                    d9:a2:ed:99:9d:02:39:77:a7:ec:37:0a:42:6b:8d:
                    14:1d:b5:70:7b:0e:6a:fe:89:4f:15:c8:b0:19:40:
                    64:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E9:57:C7:09:62:6E:48:00:E3:83:D1:19:DA:16:6D:B8:2B:02:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e6ffc483-72dc-3b86-9f89-d980ddcbe56a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.249.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a1:e8:42:15:ef:ec:c1:7e:0f:63:65:4c:18:3d:63:24:84:
         da:dd:9c:61:67:de:5e:3e:7c:53:67:b1:aa:45:3d:94:e2:7b:
         62:d0:40:92:48:fa:23:c3:28:0f:09:87:f1:7d:d3:30:f4:3c:
         1f:ea:0c:e3:4a:cc:7c:1c:4a:13:9f:b0:92:70:b7:e4:c4:f9:
         3b:4f:63:a7:2d:e4:3a:30:4d:5e:a1:92:35:ef:46:5a:17:d0:
         95:e3:0e:02:6b:3b:aa:2e:b5:43:c7:27:eb:2e:18:13:7f:f6:
         e1:10:d3:e3:2b:bd:d4:19:d5:25:09:f5:57:73:b5:f7:d0:76:
         ab:8c:54:2b:97:cf:f4:21:9a:cd:33:84:56:65:af:81:6f:16:
         d5:f9:07:01:36:d4:01:c0:e5:fa:d5:80:3b:71:33:1a:67:e6:
         26:b8:c7:36:31:3d:50:c2:dc:0e:51:f5:fd:4e:e9:50:b6:97:
         1b:0c:61:f6:93:1b:69:70:25:a2:6f:da:d5:35:47:e1:68:e9:
         a2:62:4d:77:3e:44:74:8f:67:69:7f:7f:bd:18:dd:03:d5:3c:
         a2:be:5d:de:f8:db:86:6b:73:4b:a1:33:28:cd:e8:34:9b:cb:
         32:05:63:e8:25:89:34:e3:37:a2:06:6c:c0:69:e7:7d:6c:cb:
         79:31:3c:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gKeuEnebJ/X1voAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk
MzVmMjNmZjUtOGFiMi00YjM4LWFlNmEtMjBmNmY4ZmM3YzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaQGMz/btYOJhzpvA2QSLvVJ7XQz3woGSGBe
x8dDkARcNYc0sKNCpWyDHcKik7TfpxHrqAOTGG8t+HMuL7cVZJSXkXQoihkWya4/
BLpQI3YCKAHLCiS7RnIgrWXziLe8JXjoL+lPthaQ5kysdNRHXK5RL+pfe3SewvX9
I4BgDl1LLvSKHcd+iJ8PuIh8uqJuWXCfBrdrn7HuA7gDzQevwWt/t0f+chvKDJK/
4hKgw9/R5nU3SpfLF2uCU+6/pgG4CzvUUFvBvi1wjXXa6smEYvm+yX997lXIKyJ2
n4IVJSnZou2ZnQI5d6fsNwpCa40UHbVwew5q/olPFciwGUBkgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEzpV8cJYm5IAOOD0RnaFm24KwIDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZTZmZmM0ODMtNzJkYy0z
Yjg2LTlmODktZDk4MGRkY2JlNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOh6EIV7+zBfg9jZUwYPWMkhNrdnGFn3l4+fFNnsapFPZTie2LQQJJI
+iPDKA8Jh/F90zD0PB/qDONKzHwcShOfsJJwt+TE+TtPY6ct5DowTV6hkjXvRloX
0JXjDgJrO6outUPHJ+suGBN/9uEQ0+MrvdQZ1SUJ9VdztffQdquMVCuXz/Qhms0z
hFZlr4FvFtX5BwE21AHA5frVgDtxMxpn5ia4xzYxPVDC3A5R9f1O6VC2lxsMYfaT
G2lwJaJv2tU1R+Fo6aJiTXc+RHSPZ2l/f70Y3QPVPKK+Xd7424Zrc0uhMyjN6DSb
yzIFY+gliTTjN6IGbMBp531sy3kxPNk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:33 2025 by rpki-client