Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/862aa735-b2f1-3e2b-954a-0ebcfe82fe10.roa
File:                     862aa735-b2f1-3e2b-954a-0ebcfe82fe10.roa (raw, json)
Hash identifier:          r+SD12uzgXSDv9sKBhdU+gg889oryMXGIDlFs10GwB8=
Subject key identifier:   00:54:55:69:16:73:37:E7:AC:1B:D6:A9:34:ED:9C:36:CA:9A:67:29
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F1800D5D4B1D59AE46DBA3E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/862aa735-b2f1-3e2b-954a-0ebcfe82fe10.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        100.11.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:0d:5d:4b:1d:59:ae:46:db:a3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=c2430072-4a1d-492a-9b8d-1c9667cf0d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ce:50:47:74:9e:b1:11:e0:44:72:68:4e:63:
                    e0:43:8b:b0:e8:4b:62:39:f9:b9:3e:17:f1:1a:e0:
                    fa:55:c8:c9:c8:3f:74:e8:90:ce:a6:9e:61:16:0b:
                    a4:2b:71:c0:43:87:e3:86:de:ac:f9:22:07:1c:a8:
                    e6:b6:2e:6d:3d:16:fe:cc:8b:17:b9:89:0e:7c:b7:
                    e8:27:25:a2:f0:a2:74:4f:42:ed:95:5c:44:b6:10:
                    1b:0d:b9:11:a3:80:47:48:d9:22:dc:c3:71:ea:78:
                    82:7b:e6:52:30:e8:b4:98:98:37:bc:d4:ee:94:70:
                    a5:21:e9:1d:66:7c:85:16:60:df:b4:b3:70:d1:61:
                    9e:55:ac:83:a1:fc:b8:1e:33:f4:b6:a4:10:1c:1a:
                    6c:d9:4d:c4:38:b5:1c:16:ed:b3:78:24:a0:c3:36:
                    15:fc:d1:68:3c:7a:72:e7:9a:db:63:41:e4:95:94:
                    df:b6:6e:21:63:3a:bd:e3:d7:28:9c:d5:b0:9d:77:
                    fe:9e:75:3c:28:75:30:79:39:86:d6:a0:a5:a7:cc:
                    d7:c6:a1:64:dc:cd:cb:5a:fb:fa:c8:c5:ca:b4:0b:
                    39:ad:ab:09:bf:ca:1b:a9:94:bd:c9:6c:fe:73:b4:
                    0f:ef:cb:0f:4d:29:ad:f9:3d:19:c7:5f:ef:3c:f2:
                    30:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:54:55:69:16:73:37:E7:AC:1B:D6:A9:34:ED:9C:36:CA:9A:67:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/862aa735-b2f1-3e2b-954a-0ebcfe82fe10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.11.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:58:4e:8c:89:73:22:18:0f:64:46:64:55:0a:ca:78:ce:0a:
         da:25:b9:c7:66:cc:a9:eb:1b:90:dd:b5:bb:11:f6:a9:13:7c:
         ae:3a:a9:68:cb:9d:b2:7e:e9:10:a2:fb:67:7f:83:6c:12:d5:
         02:c6:26:f6:7d:0d:21:09:bb:9e:16:0f:61:06:f9:de:c6:1d:
         d7:06:9e:f3:28:f2:b5:b7:f8:4f:f9:c3:cf:fd:13:e8:16:9b:
         c1:f7:fd:da:ea:6b:72:83:3f:70:e5:13:0f:c6:b0:96:27:3c:
         6a:ad:d9:96:f2:5c:24:fc:39:57:92:59:59:64:e8:52:96:58:
         1b:6d:0f:b0:84:5e:74:a2:24:6e:d5:8d:38:28:47:10:76:7b:
         86:29:8c:62:d5:2c:82:ea:4d:a5:6c:a4:0d:b2:b4:3b:71:be:
         98:97:f2:a0:47:55:88:98:96:b7:2e:f8:58:19:6d:d0:9b:89:
         0c:04:b0:1c:1d:4f:0f:f8:03:41:48:d2:e7:16:0d:97:00:7f:
         61:42:7b:34:02:5c:7f:2a:3a:c0:09:e4:b1:84:ad:af:dc:b1:
         d2:6d:50:a1:e9:ee:f6:de:76:f4:7e:72:bc:70:13:bf:f4:67:
         61:37:36:7d:d7:3d:2b:26:28:2f:de:e7:3a:2d:9d:f7:ad:5b:
         7f:9c:e8:fb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnxgA1dSx1Zrkbbo+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
YzI0MzAwNzItNGExZC00OTJhLTliOGQtMWM5NjY3Y2YwZDk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc5QR3SesRHgRHJoTmPgQ4uw6EtiOfm5Phfx
GuD6VcjJyD906JDOpp5hFgukK3HAQ4fjht6s+SIHHKjmti5tPRb+zIsXuYkOfLfo
JyWi8KJ0T0LtlVxEthAbDbkRo4BHSNki3MNx6niCe+ZSMOi0mJg3vNTulHClIekd
ZnyFFmDftLNw0WGeVayDofy4HjP0tqQQHBps2U3EOLUcFu2zeCSgwzYV/NFoPHpy
55rbY0HklZTftm4hYzq949conNWwnXf+nnU8KHUweTmG1qClp8zXxqFk3M3LWvv6
yMXKtAs5rasJv8obqZS9yWz+c7QP78sPTSmt+T0Zx1/vPPIw1QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFABUVWkWczfnrBvWqTTtnDbKmmcpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODYyYWE3MzUtYjJmMS0z
ZTJiLTk1NGEtMGViY2ZlODJmZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZAswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATFhOjIlzIhgPZEZkVQrKeM4K2iW5x2bMqesbkN21uxH2qRN8rjqpaMud
sn7pEKL7Z3+DbBLVAsYm9n0NIQm7nhYPYQb53sYd1wae8yjytbf4T/nDz/0T6Bab
wff92uprcoM/cOUTD8awlic8aq3ZlvJcJPw5V5JZWWToUpZYG20PsIRedKIkbtWN
OChHEHZ7himMYtUsgupNpWykDbK0O3G+mJfyoEdViJiWty74WBlt0JuJDASwHB1P
D/gDQUjS5xYNlwB/YUJ7NAJcfyo6wAnksYStr9yx0m1Qoenu9t529H5yvHATv/Rn
YTc2fdc9KyYoL97nOi2d961bf5zo+w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 16:59:27 2025 by rpki-client