Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/6f1a7cf3-e8c1-3a2c-bae1-b1e5b1f24025.roa
File:                     6f1a7cf3-e8c1-3a2c-bae1-b1e5b1f24025.roa (raw, json)
Hash identifier:          jHagFRfa6Su5QvRho3Chhvuf5XJFBlvEZsksNK7Obow=
Subject key identifier:   FB:BE:D7:F6:92:8A:5D:A0:FF:B4:27:59:23:D3:46:0C:B6:0A:76:AD
Certificate issuer:       /CN=5b326d4d-84cb-4b68-b303-78f3cdef804f
Certificate serial:       010D0C9F4328584AA85B9ECFEFB5CA2173FCF4E0
Authority key identifier: A7:D0:DE:BF:C4:97:6E:D0:5A:7E:55:A2:44:1F:65:42:97:1F:89:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/6f1a7cf3-e8c1-3a2c-bae1-b1e5b1f24025.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        199.30.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:9e:cf:ef:b5:ca:21:73:fc:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b326d4d-84cb-4b68-b303-78f3cdef804f
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=8218d2a2-61af-4e0e-b0b6-e437ae17381d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9d:e3:4d:c3:cc:28:b2:c1:d3:44:48:9b:31:
                    68:95:75:8b:03:c8:b1:39:46:31:03:d0:3d:ce:5d:
                    d9:f2:d9:a0:4c:94:a2:1a:03:b3:a8:cb:9f:af:07:
                    a2:f7:82:d7:16:8b:58:83:7d:0b:5a:76:6e:97:ca:
                    6c:e4:6e:cb:c4:79:9f:dc:3c:6e:9b:44:0b:64:02:
                    24:4e:7e:40:b1:7c:bc:dd:18:6c:96:59:98:b8:b8:
                    15:f8:2e:a9:11:3f:09:f5:af:1b:13:89:a6:bb:28:
                    6b:f7:7c:f5:24:63:14:1a:29:e6:a2:30:58:06:ee:
                    c2:32:3b:2a:aa:ba:55:82:8d:e0:30:b7:82:3c:60:
                    72:63:9c:9f:4d:47:52:b5:7c:09:02:15:45:78:23:
                    e7:69:12:02:b4:c1:39:c7:66:27:39:6c:0c:af:71:
                    e6:eb:5b:9b:39:c9:3b:39:08:48:d0:8c:7c:2c:aa:
                    9e:80:be:68:65:a1:71:5c:9a:cd:4f:08:d1:4d:44:
                    ac:c4:4e:4d:12:08:a9:4c:50:3b:d5:e1:40:85:35:
                    f9:b3:c6:e6:4e:f2:48:10:3d:98:d3:a2:fe:16:b6:
                    2f:d9:13:b3:d9:74:cf:85:12:b8:ec:7a:ca:73:6c:
                    41:21:8f:6c:5b:0c:0d:96:81:e9:45:c2:07:dc:c5:
                    b5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BE:D7:F6:92:8A:5D:A0:FF:B4:27:59:23:D3:46:0C:B6:0A:76:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/6f1a7cf3-e8c1-3a2c-bae1-b1e5b1f24025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.crl

            X509v3 Authority Key Identifier:
                keyid:A7:D0:DE:BF:C4:97:6E:D0:5A:7E:55:A2:44:1F:65:42:97:1F:89:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:ce:e1:db:af:ce:33:41:01:61:86:c0:6e:ca:2b:76:f4:d1:
         72:1f:ff:cb:d6:b1:93:cc:69:eb:c1:de:35:c5:52:53:60:f5:
         8b:f7:f2:62:fd:aa:5f:14:b0:21:55:36:99:8c:d2:a4:69:e3:
         99:61:4e:f9:ce:8e:13:ba:90:90:5c:2c:30:a5:7f:16:38:26:
         e4:14:b6:c7:8a:ae:cf:f3:87:46:6e:92:da:e3:65:55:5e:c2:
         c5:63:49:5d:b0:e9:fc:f9:76:97:94:53:e7:96:a4:ba:c1:96:
         9e:90:47:97:1f:cb:0f:83:c5:30:dd:6f:b8:d0:d1:b4:3a:25:
         21:6a:a1:95:fa:91:b8:cc:96:13:08:60:fb:cd:78:ee:9c:61:
         53:fa:cf:c3:3a:b5:8e:37:d0:61:6c:d9:05:01:a3:b9:db:ad:
         86:b4:98:be:68:53:99:1d:5a:e0:38:57:1c:47:02:2a:0a:1d:
         5b:f3:a1:a8:e0:ab:48:bc:99:e1:6f:d0:22:f2:b9:06:7d:c0:
         e7:af:ff:ee:8d:aa:84:dd:57:fc:e8:d7:58:e0:47:77:f3:bd:
         76:3f:70:cf:1a:9b:8d:86:ad:cf:93:09:03:a0:9e:70:1d:c8:
         bf:41:8c:ee:9c:95:8b:6e:3e:95:b3:be:e5:88:ee:4c:38:8e:
         d0:23:dd:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW57P77XKIXP89OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWIzMjZkNGQtODRjYi00YjY4LWIzMDMtNzhmM2NkZWY4
MDRmMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk
ODIxOGQyYTItNjFhZi00ZTBlLWIwYjYtZTQzN2FlMTczODFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ3jTcPMKLLB00RImzFolXWLA8ixOUYxA9A9
zl3Z8tmgTJSiGgOzqMufrwei94LXFotYg30LWnZul8ps5G7LxHmf3Dxum0QLZAIk
Tn5AsXy83RhsllmYuLgV+C6pET8J9a8bE4mmuyhr93z1JGMUGinmojBYBu7CMjsq
qrpVgo3gMLeCPGByY5yfTUdStXwJAhVFeCPnaRICtME5x2YnOWwMr3Hm61ubOck7
OQhI0Ix8LKqegL5oZaFxXJrNTwjRTUSsxE5NEgipTFA71eFAhTX5s8bmTvJIED2Y
06L+FrYv2ROz2XTPhRK47HrKc2xBIY9sWwwNloHpRcIH3MW1SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPu+1/aSil2g/7QnWSPTRgy2CnatMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81YjMy
NmQ0ZC04NGNiLTRiNjgtYjMwMy03OGYzY2RlZjgwNGYvNmYxYTdjZjMtZThjMS0z
YTJjLWJhZTEtYjFlNWIxZjI0MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWIzMjZkNGQtODRjYi00YjY4LWIz
MDMtNzhmM2NkZWY4MDRmLzViMzI2ZDRkLTg0Y2ItNGI2OC1iMzAzLTc4ZjNjZGVm
ODA0Zi5jcmwwHwYDVR0jBBgwFoAUp9Dev8SXbtBaflWiRB9lQpcfiXEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81YjMyNmQ0ZC04NGNiLTRiNjgtYjMwMy03OGYz
Y2RlZjgwNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxx6wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALXO4duvzjNBAWGGwG7KK3b00XIf/8vWsZPMaevB3jXFUlNg9Yv38mL9
ql8UsCFVNpmM0qRp45lhTvnOjhO6kJBcLDClfxY4JuQUtseKrs/zh0ZuktrjZVVe
wsVjSV2w6fz5dpeUU+eWpLrBlp6QR5cfyw+DxTDdb7jQ0bQ6JSFqoZX6kbjMlhMI
YPvNeO6cYVP6z8M6tY430GFs2QUBo7nbrYa0mL5oU5kdWuA4VxxHAioKHVvzoajg
q0i8meFv0CLyuQZ9wOev/+6NqoTdV/zo11jgR3fzvXY/cM8am42Grc+TCQOgnnAd
yL9BjO6clYtuPpWzvuWI7kw4jtAj3bk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:23 2025 by rpki-client