Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c3a650dc-b4e5-36e2-8473-dfb15cc276df.roa
File:                     c3a650dc-b4e5-36e2-8473-dfb15cc276df.roa (raw, json)
Hash identifier:          TsZ5qj4EsCAU8gUAPJTjI3xfJ04ZtViP9GcnP2AWy90=
Subject key identifier:   34:F5:6F:A1:B4:59:4B:28:0D:6A:0C:E2:9C:0A:A9:55:FC:14:50:82
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584ABF5CADAF94C8F0D082F7E280
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c3a650dc-b4e5-36e2-8473-dfb15cc276df.roa
Signing time:             Mon 04 Aug 2025 18:46:54 +0000
ROA not before:           Mon 04 Aug 2025 18:46:54 +0000
ROA not after:            Sun 02 Nov 2025 19:46:54 +0000
asID:                     46558
IP address blocks:        130.35.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bf:5c:ad:af:94:c8:f0:d0:82:f7:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Aug  4 18:46:54 2025 GMT
            Not After : Nov  2 19:46:54 2025 GMT
        Subject: CN=792ac330-24dc-4131-a9f6-acf46f2c92c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d7:72:5d:28:ac:58:4c:1f:c4:b5:a8:bd:1b:
                    8c:e4:d0:d8:88:e0:05:c8:fb:2d:86:32:9d:61:ab:
                    5a:d1:fb:c8:0d:2f:b3:88:f7:89:df:a9:49:3b:bb:
                    b4:65:ff:ac:83:57:58:64:8b:2f:99:cb:51:b6:76:
                    69:7e:2e:87:8d:a4:c0:01:4b:47:31:c9:25:ff:57:
                    2c:e7:e5:29:69:cc:61:3f:f4:8d:4b:7e:54:d4:55:
                    cf:f6:5f:dc:4c:3e:fc:1b:0a:cc:15:56:a5:21:fc:
                    d9:f1:6f:86:59:08:09:77:1a:cc:ac:bd:33:01:38:
                    15:96:cf:3a:b9:dd:ba:ce:a3:a6:72:1c:14:30:a4:
                    16:e5:61:0b:49:da:e6:6e:f9:1c:05:8d:78:4b:a8:
                    f7:ff:48:3c:27:59:48:bc:a6:54:5d:17:e4:d0:47:
                    3f:27:6f:b5:aa:8e:6d:a8:a4:27:26:1a:47:d2:04:
                    d5:e0:6f:81:71:7f:08:ff:d5:cf:50:8e:a8:bd:f5:
                    b1:96:65:48:62:42:96:13:c0:91:d0:74:b2:b3:72:
                    b7:5c:6b:1d:bd:8a:33:fd:ae:3e:e8:2c:b4:48:39:
                    5f:c8:33:6d:3f:fe:32:c5:42:a3:0e:16:cc:c1:c2:
                    e1:ea:35:30:d2:92:a7:82:1e:30:f1:01:2a:00:53:
                    fe:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F5:6F:A1:B4:59:4B:28:0D:6A:0C:E2:9C:0A:A9:55:FC:14:50:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c3a650dc-b4e5-36e2-8473-dfb15cc276df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8b:f4:89:bf:60:fb:6d:4e:0f:94:78:17:a7:3f:06:9e:50:
         f2:b0:c5:02:5c:f0:ca:bd:cb:16:50:07:58:f7:fd:52:96:49:
         52:89:7b:ac:53:01:90:36:a8:85:cf:ed:60:5e:f1:2e:78:6c:
         c1:3f:91:b1:0c:f0:59:68:cd:17:bc:53:62:e1:6e:59:c7:c6:
         a0:ae:52:2c:6c:41:9a:a6:0d:5f:01:60:1c:e3:14:e7:e8:c5:
         eb:7a:67:49:66:55:09:01:88:68:3c:e3:ea:3f:00:d1:20:48:
         fd:05:0a:da:30:e6:ca:2d:70:eb:7d:93:d0:00:8f:9e:ef:f0:
         4a:e3:e2:eb:4c:3c:48:71:28:e7:ea:58:04:a7:7f:6d:be:3f:
         2f:d4:fd:07:50:1b:cb:ee:1f:d9:ac:c5:cd:d1:91:a8:e9:5c:
         3a:66:9b:75:b7:9d:dd:24:76:1a:52:a2:0e:3c:5b:43:1a:9f:
         60:94:d9:8c:ea:2f:7c:8f:77:8c:aa:c8:99:ee:15:b1:f2:2d:
         cc:32:1f:32:94:57:95:59:d9:e6:ec:1a:e5:72:9a:67:3e:24:
         92:5b:15:0c:8a:99:98:eb:e9:1b:ea:c9:78:55:b6:79:ab:22:
         3a:c9:05:b3:30:6b:3f:d0:54:a0:68:4a:4f:6e:12:ee:c2:42:
         94:73:d5:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq/XK2vlMjw0IL34oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy
ZTQ0MB4XDTI1MDgwNDE4NDY1NFoXDTI1MTEwMjE5NDY1NFowLzEtMCsGA1UEAxMk
NzkyYWMzMzAtMjRkYy00MTMxLWE5ZjYtYWNmNDZmMmM5MmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NdyXSisWEwfxLWovRuM5NDYiOAFyPsthjKd
Yata0fvIDS+ziPeJ36lJO7u0Zf+sg1dYZIsvmctRtnZpfi6HjaTAAUtHMckl/1cs
5+UpacxhP/SNS35U1FXP9l/cTD78GwrMFValIfzZ8W+GWQgJdxrMrL0zATgVls86
ud26zqOmchwUMKQW5WELSdrmbvkcBY14S6j3/0g8J1lIvKZUXRfk0Ec/J2+1qo5t
qKQnJhpH0gTV4G+BcX8I/9XPUI6ovfWxlmVIYkKWE8CR0HSys3K3XGsdvYoz/a4+
6Cy0SDlfyDNtP/4yxUKjDhbMwcLh6jUw0pKngh4w8QEqAFP+gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDT1b6G0WUsoDWoM4pwKqVX8FFCCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0
MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYzNhNjUwZGMtYjRlNS0z
NmUyLTg0NzMtZGZiMTVjYzI3NmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx
MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj
MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1
MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGL9Im/YPttTg+UeBenPwaeUPKwxQJc8Mq9yxZQB1j3/VKWSVKJe6xT
AZA2qIXP7WBe8S54bME/kbEM8FlozRe8U2LhblnHxqCuUixsQZqmDV8BYBzjFOfo
xet6Z0lmVQkBiGg84+o/ANEgSP0FCtow5sotcOt9k9AAj57v8Erj4utMPEhxKOfq
WASnf22+Py/U/QdQG8vuH9msxc3RkajpXDpmm3W3nd0kdhpSog48W0Man2CU2Yzq
L3yPd4yqyJnuFbHyLcwyHzKUV5VZ2ebsGuVymmc+JJJbFQyKmZjr6RvqyXhVtnmr
IjrJBbMwaz/QVKBoSk9uEu7CQpRz1a4=
-----END CERTIFICATE-----
Generated at Thu Aug 7 23:57:38 2025 by rpki-client