Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d89bac88-e6f8-38cf-bcde-8bb6bf3e15ff.roa
File:                     d89bac88-e6f8-38cf-bcde-8bb6bf3e15ff.roa (raw, json)
Hash identifier:          0rgSzG7EO6EIM4GAg+uC4k5pyckBbJuQfP7LGUho1YM=
Subject key identifier:   E1:65:18:53:46:19:AB:4A:B8:48:0A:F1:30:11:2F:B7:C9:CB:86:31
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AADF128131FE69697EBC01E54
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d89bac88-e6f8-38cf-bcde-8bb6bf3e15ff.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     23097
IP address blocks:        65.209.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:28:13:1f:e6:96:97:eb:c0:1e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=7351dfac-1b42-466b-b9d3-4c480dc9c6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:a8:73:40:5c:fd:92:86:9b:c5:2d:7b:32:
                    c5:1d:97:f1:37:64:d3:5e:3e:47:b2:82:96:af:a3:
                    5b:94:df:0b:61:58:53:cb:b3:5c:0d:39:56:5b:af:
                    53:5d:0e:c8:0c:d9:4c:1d:c5:1d:ab:65:23:c0:7b:
                    a5:9b:2e:a5:00:83:8a:d5:38:c2:b1:f3:b5:58:1a:
                    6f:53:f7:62:f8:3d:0e:76:fe:58:73:fc:bb:cc:17:
                    43:2e:93:ce:78:7d:3b:f4:d3:10:a2:14:7e:5f:6b:
                    2e:0b:e5:ad:9e:95:86:f3:35:0d:e8:7a:47:6f:b5:
                    2c:22:25:66:d6:c9:2b:4b:55:ca:21:10:6d:e7:d2:
                    23:dd:be:e4:dd:7a:3b:36:f8:e4:4d:a0:b3:f8:62:
                    10:82:42:7d:e4:7b:38:5c:af:ef:94:71:97:b9:7a:
                    e9:7b:d3:e7:77:d8:f6:46:cf:d9:87:87:ed:4f:bd:
                    3c:1e:70:9e:1c:24:8e:fc:b6:98:bd:4a:91:df:97:
                    90:3f:88:01:6e:8d:71:6e:e9:be:a4:1a:97:9e:c7:
                    90:39:8e:ba:a1:d2:dc:e7:69:c4:b2:35:bd:44:33:
                    16:cc:74:a6:10:72:6d:32:2f:c2:c4:eb:1c:6f:ad:
                    df:63:2b:89:eb:ff:77:b4:bf:e6:e4:cd:94:7b:19:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:65:18:53:46:19:AB:4A:B8:48:0A:F1:30:11:2F:B7:C9:CB:86:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d89bac88-e6f8-38cf-bcde-8bb6bf3e15ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.209.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:2d:8d:96:9b:49:43:ca:b6:9c:aa:db:de:63:0a:44:12:39:
         74:65:30:13:bb:6f:4e:78:23:2d:b8:cb:e2:d7:00:9d:18:fb:
         af:49:8a:db:03:d1:78:92:05:dd:ac:68:02:5e:87:b7:90:96:
         41:33:e3:3c:c1:9d:9a:04:a7:ce:3b:7f:9a:00:f2:97:bc:42:
         3f:6b:4e:68:d2:40:06:df:a0:54:55:6f:28:0f:a8:b5:11:83:
         27:22:db:a0:a0:d6:53:33:ab:3c:b6:32:8d:78:0f:d0:ae:54:
         9d:25:99:f3:16:e6:af:d4:b1:e4:89:4f:bf:33:fa:7f:d7:de:
         d4:61:d4:f9:15:f2:e7:c5:95:e9:c8:13:15:a1:7d:18:13:75:
         fb:9a:47:cf:30:66:9d:e0:15:c3:75:b8:d5:2e:df:25:27:8c:
         dd:d6:c7:eb:6d:1f:f4:69:af:8d:56:e8:cf:b5:b2:c9:90:90:
         1e:12:1c:86:50:7a:c5:14:cc:7c:94:1b:c0:e5:44:44:f0:04:
         f2:a9:7c:da:71:51:8e:d3:c1:77:c6:7b:29:42:c0:3f:0b:91:
         d4:c5:46:78:28:2e:00:54:5c:58:e6:c1:bf:d8:b7:07:fb:17:
         60:15:b8:ca:a2:42:06:15:67:ae:ce:b7:f1:b0:f0:a3:e7:53:
         f5:73:74:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SgTH+aWl+vAHlQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
NzM1MWRmYWMtMWI0Mi00NjZiLWI5ZDMtNGM0ODBkYzljNmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmqoc0Bc/ZKGm8UtezLFHZfxN2TTXj5HsoKW
r6NblN8LYVhTy7NcDTlWW69TXQ7IDNlMHcUdq2UjwHulmy6lAIOK1TjCsfO1WBpv
U/di+D0Odv5Yc/y7zBdDLpPOeH079NMQohR+X2suC+WtnpWG8zUN6HpHb7UsIiVm
1skrS1XKIRBt59Ij3b7k3Xo7NvjkTaCz+GIQgkJ95Hs4XK/vlHGXuXrpe9Pnd9j2
Rs/Zh4ftT708HnCeHCSO/LaYvUqR35eQP4gBbo1xbum+pBqXnseQOY66odLc52nE
sjW9RDMWzHSmEHJtMi/CxOscb63fYyuJ6/93tL/m5M2UexkBJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOFlGFNGGatKuEgK8TARL7fJy4YxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDg5YmFjODgtZTZmOC0z
OGNmLWJjZGUtOGJiNmJmM2UxNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQdFwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG0tjZabSUPKtpyq295jCkQSOXRlMBO7b054Iy24y+LXAJ0Y+69JitsD
0XiSBd2saAJeh7eQlkEz4zzBnZoEp847f5oA8pe8Qj9rTmjSQAbfoFRVbygPqLUR
gyci26Cg1lMzqzy2Mo14D9CuVJ0lmfMW5q/UseSJT78z+n/X3tRh1PkV8ufFlenI
ExWhfRgTdfuaR88wZp3gFcN1uNUu3yUnjN3Wx+ttH/Rpr41W6M+1ssmQkB4SHIZQ
esUUzHyUG8DlRETwBPKpfNpxUY7TwXfGeylCwD8LkdTFRngoLgBUXFjmwb/Ytwf7
F2AVuMqiQgYVZ67Ot/Gw8KPnU/VzdMo=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:19 2025 by rpki-client