Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/0bcc3297-1d40-3a7e-89d7-c26a61996a76.roa
File:                     0bcc3297-1d40-3a7e-89d7-c26a61996a76.roa (raw, json)
Hash identifier:          +DEEmcQbLwAwhUBGVM2K861leGf09cXmBKzrM9Buuwg=
Subject key identifier:   9D:F2:8B:F9:6D:18:19:43:7F:89:E9:9E:73:8E:C6:95:A4:33:E5:0A
Certificate issuer:       /CN=4e5cccc9-30d7-416f-83cb-af13d1079fb3
Certificate serial:       010D0C9F4328584A612B16E01C0DD03033BAD338
Authority key identifier: A7:7D:99:20:83:4D:A0:3A:06:B7:F7:9A:D6:D7:9C:D5:69:9E:E0:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/0bcc3297-1d40-3a7e-89d7-c26a61996a76.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     397735
IP address blocks:        142.202.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/4e5cccc9-30d7-416f-83cb-af13d1079fb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/4e5cccc9-30d7-416f-83cb-af13d1079fb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:16:e0:1c:0d:d0:30:33:ba:d3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5cccc9-30d7-416f-83cb-af13d1079fb3
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=e547917d-f7d8-44b5-b9c6-7d20ca6aedba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:67:f8:77:36:41:43:26:ed:57:57:48:50:d8:
                    9c:18:6f:23:cc:e4:07:57:24:d8:52:45:a8:e2:c8:
                    24:61:23:10:0e:7d:d2:5c:ae:79:63:6e:8e:b7:bd:
                    86:02:8c:5a:ca:f8:5e:a2:1a:34:44:a6:84:b2:a8:
                    90:25:e5:63:7c:16:47:c6:56:a8:1e:12:0a:83:fa:
                    8e:55:1f:a2:71:be:39:8b:42:7c:37:a1:ff:0d:9f:
                    60:4f:dd:75:c2:68:70:8e:7a:81:b4:8c:bb:b5:a6:
                    d4:00:9b:70:73:0b:14:3d:1b:0f:75:e5:ab:82:88:
                    34:56:60:25:5f:bc:30:62:0e:2c:b3:05:75:ae:25:
                    25:a1:63:25:ca:3a:34:04:3e:8e:45:30:e7:91:49:
                    a3:c8:8f:a0:ce:93:e1:9b:8b:2b:6e:f0:42:85:5c:
                    62:9e:0f:1c:85:51:15:dd:bc:0f:99:3a:65:cc:ac:
                    a4:f8:0a:87:f5:51:3c:2b:13:ab:1e:4e:74:d9:41:
                    de:cf:b7:e3:86:84:00:3c:f1:fd:ed:f5:35:e5:5d:
                    f8:87:94:70:20:36:9e:ed:80:66:6c:4d:9d:0a:3d:
                    f0:69:c5:6b:85:33:3f:00:7f:f0:4b:4c:b4:3a:64:
                    eb:07:19:58:f2:5e:7d:1f:2d:11:2b:92:d1:a2:c8:
                    c6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F2:8B:F9:6D:18:19:43:7F:89:E9:9E:73:8E:C6:95:A4:33:E5:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/0bcc3297-1d40-3a7e-89d7-c26a61996a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/4e5cccc9-30d7-416f-83cb-af13d1079fb3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:7D:99:20:83:4D:A0:3A:06:B7:F7:9A:D6:D7:9C:D5:69:9E:E0:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ce:9d:90:7d:a4:d8:80:0b:c8:d0:67:eb:d4:68:fc:ba:5c:
         8d:ed:f2:20:3c:75:8b:63:1d:f5:e0:c3:43:8d:9e:24:b1:7a:
         2b:85:39:68:d2:53:0a:2c:fa:9f:11:4f:62:a4:5b:48:69:6c:
         e6:54:3c:e5:71:74:5b:bb:e5:94:f5:3f:ce:b6:ae:63:71:0f:
         4c:27:0f:0d:c0:6e:03:64:28:ef:11:12:89:f9:f2:44:f3:7c:
         6f:1f:c7:bc:91:f9:3e:99:62:65:a2:c0:78:f7:ba:61:59:74:
         79:1c:22:ff:82:8a:13:6c:22:69:c2:c9:3e:a2:5d:66:95:a0:
         54:25:f3:2e:0f:04:8c:b6:ed:77:6e:a6:6b:82:80:13:b7:16:
         19:21:f4:84:37:95:38:b9:bf:17:1b:66:74:d8:87:b5:f4:5b:
         b1:4e:01:37:19:16:51:35:4c:b2:c7:eb:b0:35:46:35:bd:4a:
         b7:0d:54:e8:4c:9b:9b:23:1d:40:cb:5d:83:0d:2e:87:e3:48:
         6f:22:b6:1e:34:57:08:e1:08:41:b5:aa:04:88:93:4e:d6:be:
         35:bd:12:7d:e8:70:5b:76:d6:b8:eb:6e:38:b3:7e:0c:c8:c5:
         4d:73:be:a5:45:0d:57:17:64:ac:c7:a1:d8:8b:e9:5d:08:b6:
         0d:e1:f0:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxbgHA3QMDO60zgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU1Y2NjYzktMzBkNy00MTZmLTgzY2ItYWYxM2QxMDc5
ZmIzMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk
ZTU0NzkxN2QtZjdkOC00NGI1LWI5YzYtN2QyMGNhNmFlZGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWf4dzZBQybtV1dIUNicGG8jzOQHVyTYUkWo
4sgkYSMQDn3SXK55Y26Ot72GAoxayvheoho0RKaEsqiQJeVjfBZHxlaoHhIKg/qO
VR+icb45i0J8N6H/DZ9gT911wmhwjnqBtIy7tabUAJtwcwsUPRsPdeWrgog0VmAl
X7wwYg4sswV1riUloWMlyjo0BD6ORTDnkUmjyI+gzpPhm4srbvBChVxing8chVEV
3bwPmTplzKyk+AqH9VE8KxOrHk502UHez7fjhoQAPPH97fU15V34h5RwIDae7YBm
bE2dCj3wacVrhTM/AH/wS0y0OmTrBxlY8l59Hy0RK5LRosjGYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3yi/ltGBlDf4npnnOOxpWkM+UKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZTVj
Y2NjOS0zMGQ3LTQxNmYtODNjYi1hZjEzZDEwNzlmYjMvMGJjYzMyOTctMWQ0MC0z
YTdlLTg5ZDctYzI2YTYxOTk2YTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGU1Y2NjYzktMzBkNy00MTZmLTgz
Y2ItYWYxM2QxMDc5ZmIzLzRlNWNjY2M5LTMwZDctNDE2Zi04M2NiLWFmMTNkMTA3
OWZiMy5jcmwwHwYDVR0jBBgwFoAUp32ZIINNoDoGt/ea1tec1Wme4A8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80ZTVjY2NjOS0zMGQ3LTQxNmYtODNjYi1hZjEz
ZDEwNzlmYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjsqKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7OnZB9pNiAC8jQZ+vUaPy6XI3t8iA8dYtjHfXgw0ONniSxeiuFOWjS
Uwos+p8RT2KkW0hpbOZUPOVxdFu75ZT1P862rmNxD0wnDw3AbgNkKO8REon58kTz
fG8fx7yR+T6ZYmWiwHj3umFZdHkcIv+CihNsImnCyT6iXWaVoFQl8y4PBIy27Xdu
pmuCgBO3Fhkh9IQ3lTi5vxcbZnTYh7X0W7FOATcZFlE1TLLH67A1RjW9SrcNVOhM
m5sjHUDLXYMNLofjSG8ith40VwjhCEG1qgSIk07WvjW9En3ocFt21rjrbjizfgzI
xU1zvqVFDVcXZKzHodiL6V0Itg3h8C0=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:14:35 2025 by rpki-client