Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bae03fc-787c-3c8e-b9e9-d946b1c28287.roa
File:                     2bae03fc-787c-3c8e-b9e9-d946b1c28287.roa (raw, json)
Hash identifier:          RSmNmamdoBFkLwq2hCy1th4wILCxvBB/I6FMDk5eRqU=
Subject key identifier:   50:70:81:DE:E5:9C:B8:6B:4F:C7:0B:8E:90:B5:20:ED:69:0F:D0:D2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AC2E1114B9B83486EF8316D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bae03fc-787c-3c8e-b9e9-d946b1c28287.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        216.112.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:11:4b:9b:83:48:6e:f8:31:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=c43ffcfb-a77c-4bb5-845e-13c5f3d9ee24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d5:1a:dd:9c:ea:d2:29:01:d8:81:1d:2e:8f:
                    ee:b5:ed:2b:3f:5c:1f:95:86:01:8a:8f:ce:97:5f:
                    70:47:77:b6:a4:e8:cf:92:1a:1e:5d:f1:b4:59:03:
                    74:38:f4:bd:8f:b9:df:00:e5:8a:f2:01:24:31:71:
                    65:ad:4e:c8:be:49:ca:b0:af:d0:a1:70:29:33:76:
                    59:de:90:8b:d3:13:17:33:4b:0f:ea:bd:18:b3:78:
                    93:05:4e:df:e3:5e:02:c9:04:41:8a:4e:45:fc:0f:
                    a3:6c:8d:af:f2:f3:1a:37:ee:24:94:a4:b0:9d:c6:
                    3c:8d:81:f7:df:13:f3:59:d7:92:d0:2e:08:f4:94:
                    78:c9:4f:fd:f0:ab:24:7e:84:d1:67:92:6f:9b:6e:
                    b1:1a:b4:11:cf:cc:a3:40:fc:cc:64:0b:7e:57:a3:
                    ef:0f:7f:c7:61:13:17:d6:33:d9:7a:fb:4e:a1:4c:
                    69:3e:a4:4a:b1:07:f1:3e:eb:23:ba:38:c0:c8:17:
                    0e:48:9d:cf:9b:93:ba:20:82:c0:01:23:c3:a4:96:
                    ee:70:2b:a0:a2:b2:0b:18:6f:38:a9:7b:f0:fe:5f:
                    74:8d:ee:b4:3c:95:6a:ae:49:ea:82:82:61:d8:c9:
                    7c:1f:6f:10:a3:6b:43:06:50:f1:67:2d:21:12:3b:
                    90:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:70:81:DE:E5:9C:B8:6B:4F:C7:0B:8E:90:B5:20:ED:69:0F:D0:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bae03fc-787c-3c8e-b9e9-d946b1c28287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.112.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:88:8f:c1:08:77:30:31:0c:9c:56:44:19:88:02:79:80:1c:
         a1:ee:40:fd:4c:ad:85:b0:19:c4:b0:76:82:9a:e9:38:69:69:
         e6:84:d9:e7:a5:b3:db:ee:3e:98:29:f7:10:13:a1:36:24:18:
         40:be:df:10:e6:de:4f:c5:9c:69:3b:df:8d:47:58:f8:9c:8f:
         f2:43:75:ec:86:b2:dc:32:65:88:cd:32:60:34:b5:c8:99:29:
         cb:c2:bb:3e:e9:b4:92:28:2a:12:69:3b:2b:21:1b:b7:e2:28:
         a8:8c:82:46:fb:b1:0b:89:fd:26:1a:ea:49:a0:45:de:a3:2e:
         87:2f:ba:55:55:86:05:dd:98:2c:cd:f0:45:39:79:d1:9b:f5:
         35:44:69:69:08:e5:db:f3:8f:58:8f:47:88:87:44:ca:eb:e1:
         f3:cd:0c:db:d8:3a:a8:5b:9a:26:c1:68:4d:75:4e:13:2f:9b:
         ae:3b:e7:28:81:07:c8:a2:f0:61:1a:24:ac:5b:52:6a:0a:4d:
         1e:b0:5c:52:8a:d0:9c:5a:e1:0f:52:d9:74:64:38:98:c1:1b:
         9e:82:08:d9:35:3e:5a:1b:ef:fd:73:1a:58:d8:69:9b:28:ca:
         b4:a2:80:92:33:2d:88:69:7a:67:22:7b:82:e2:38:bb:80:36:
         6d:56:62:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RFLm4NIbvgxbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
YzQzZmZjZmItYTc3Yy00YmI1LTg0NWUtMTNjNWYzZDllZTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtUa3Zzq0ikB2IEdLo/ute0rP1wflYYBio/O
l19wR3e2pOjPkhoeXfG0WQN0OPS9j7nfAOWK8gEkMXFlrU7IvknKsK/QoXApM3ZZ
3pCL0xMXM0sP6r0Ys3iTBU7f414CyQRBik5F/A+jbI2v8vMaN+4klKSwncY8jYH3
3xPzWdeS0C4I9JR4yU/98KskfoTRZ5Jvm26xGrQRz8yjQPzMZAt+V6PvD3/HYRMX
1jPZevtOoUxpPqRKsQfxPusjujjAyBcOSJ3Pm5O6IILAASPDpJbucCugorILGG84
qXvw/l90je60PJVqrknqgoJh2Ml8H28Qo2tDBlDxZy0hEjuQbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFBwgd7lnLhrT8cLjpC1IO1pD9DSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmJhZTAzZmMtNzg3Yy0z
YzhlLWI5ZTktZDk0NmIxYzI4Mjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HDzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyIj8EIdzAxDJxWRBmIAnmAHKHuQP1MrYWwGcSwdoKa6ThpaeaE2eel
s9vuPpgp9xAToTYkGEC+3xDm3k/FnGk7341HWPicj/JDdeyGstwyZYjNMmA0tciZ
KcvCuz7ptJIoKhJpOyshG7fiKKiMgkb7sQuJ/SYa6kmgRd6jLocvulVVhgXdmCzN
8EU5edGb9TVEaWkI5dvzj1iPR4iHRMrr4fPNDNvYOqhbmibBaE11ThMvm6475yiB
B8ii8GEaJKxbUmoKTR6wXFKK0Jxa4Q9S2XRkOJjBG56CCNk1Plob7/1zGljYaZso
yrSigJIzLYhpemcie4LiOLuANm1WYrs=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:45 2025 by rpki-client