Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17f7e103-f945-368a-8a1f-002e316488bb.roa
File:                     17f7e103-f945-368a-8a1f-002e316488bb.roa (raw, json)
Hash identifier:          Pn/DIm+7EMEq+a6XYLxsdCobp2ZH8CzARxL/tuvGYMQ=
Subject key identifier:   8A:F1:E8:07:08:28:B3:94:C3:49:DC:01:5D:52:36:71:98:E6:6E:2B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAAB1BFE8368932C861600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17f7e103-f945-368a-8a1f-002e316488bb.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     15321
IP address blocks:        207.164.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ab:1b:fe:83:68:93:2c:86:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=5820c4f5-b06f-4bf7-8571-cbf37d97a66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bd:79:2f:25:01:64:9f:92:52:c0:63:2f:6d:
                    0a:4f:f8:a7:c0:13:91:d3:21:77:d4:02:e2:18:7a:
                    be:71:5f:f6:c6:8f:40:f0:42:08:3a:28:4b:cc:82:
                    e6:24:95:38:9a:a5:a7:88:b0:61:3a:ce:15:67:9d:
                    22:f7:24:08:99:85:03:07:79:36:39:ad:4c:1c:e3:
                    d8:c4:7f:65:1c:63:ba:08:2f:aa:b2:09:e9:da:ba:
                    e4:bf:90:4f:3a:23:c0:9a:7f:9d:c1:8b:75:3e:73:
                    fd:d4:65:44:98:27:5b:f9:5d:b8:9d:30:3e:48:de:
                    df:b6:19:e2:ea:40:e2:8d:88:83:a7:6e:45:09:f3:
                    98:0c:6e:20:01:4d:32:a5:d5:f9:cc:fb:1e:3d:a2:
                    fc:2e:8a:64:27:08:4c:24:90:d5:16:e4:31:2f:ae:
                    a8:88:96:91:26:7a:5e:a4:f6:ae:38:4d:a0:78:2d:
                    dd:4d:bc:a7:03:3d:8d:40:10:13:1f:c6:cf:a7:f7:
                    d4:de:ae:f2:33:5a:66:cb:fd:23:e5:76:7e:a5:33:
                    9d:80:5f:77:06:60:f6:80:04:86:b7:e3:00:39:92:
                    75:5c:e4:bc:6a:95:fd:ca:0d:33:90:0d:b6:49:b2:
                    1a:25:94:9f:ca:08:aa:a5:2a:79:ce:bf:02:59:9c:
                    a6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F1:E8:07:08:28:B3:94:C3:49:DC:01:5D:52:36:71:98:E6:6E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17f7e103-f945-368a-8a1f-002e316488bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:53:a5:5e:11:e0:3d:ff:7c:fb:53:25:82:60:54:68:72:bd:
         11:7c:b0:72:24:c8:d1:56:ea:42:16:40:57:9c:b8:f3:9f:ab:
         84:55:af:8d:a5:65:3c:a0:96:14:66:51:69:33:a6:fa:8f:b2:
         11:17:2d:0c:00:7c:46:31:b2:2f:f8:94:b9:fb:7c:bc:77:03:
         c0:0f:cf:22:8d:cc:de:ca:e9:22:09:0e:8a:73:cf:13:f0:70:
         d2:67:96:25:57:cb:23:cb:62:f3:d8:25:86:3c:85:f8:8c:2c:
         f8:12:64:9e:a3:aa:c2:30:b5:63:a7:da:d1:cc:e8:7b:a5:14:
         0e:4b:f6:6e:ba:b1:93:34:21:95:c8:a8:b1:dc:4a:05:6a:e6:
         4f:cf:6d:fa:fb:2e:90:f5:a0:cd:2d:1a:2c:54:d6:06:de:a2:
         64:0a:4c:22:df:7c:5d:7e:74:af:96:77:0c:be:92:6c:7b:11:
         e0:3f:0e:a1:bb:be:86:6f:7c:38:9c:52:33:fb:ec:c9:54:ce:
         76:12:e3:52:f6:f5:de:ce:e4:27:e0:47:3d:90:3d:68:47:95:
         c0:d0:d9:b2:02:73:73:1f:e2:f8:56:ac:42:4a:e1:51:71:c3:
         6b:9a:cb:c4:3a:c2:0e:38:d0:6c:92:56:60:dd:18:0d:5a:13:
         de:da:3d:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2qsb/oNokyyGFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NTgyMGM0ZjUtYjA2Zi00YmY3LTg1NzEtY2JmMzdkOTdhNjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr15LyUBZJ+SUsBjL20KT/inwBOR0yF31ALi
GHq+cV/2xo9A8EIIOihLzILmJJU4mqWniLBhOs4VZ50i9yQImYUDB3k2Oa1MHOPY
xH9lHGO6CC+qsgnp2rrkv5BPOiPAmn+dwYt1PnP91GVEmCdb+V24nTA+SN7fthni
6kDijYiDp25FCfOYDG4gAU0ypdX5zPsePaL8LopkJwhMJJDVFuQxL66oiJaRJnpe
pPauOE2geC3dTbynAz2NQBATH8bPp/fU3q7yM1pmy/0j5XZ+pTOdgF93BmD2gASG
t+MAOZJ1XOS8apX9yg0zkA22SbIaJZSfygiqpSp5zr8CWZym2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIrx6AcIKLOUw0ncAV1SNnGY5m4rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMTdmN2UxMDMtZjk0NS0z
NjhhLThhMWYtMDAyZTMxNjQ4OGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz6S8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtTpV4R4D3/fPtTJYJgVGhyvRF8sHIkyNFW6kIWQFecuPOfq4RVr42l
ZTyglhRmUWkzpvqPshEXLQwAfEYxsi/4lLn7fLx3A8APzyKNzN7K6SIJDopzzxPw
cNJnliVXyyPLYvPYJYY8hfiMLPgSZJ6jqsIwtWOn2tHM6HulFA5L9m66sZM0IZXI
qLHcSgVq5k/Pbfr7LpD1oM0tGixU1gbeomQKTCLffF1+dK+Wdwy+kmx7EeA/DqG7
voZvfDicUjP77MlUznYS41L29d7O5CfgRz2QPWhHlcDQ2bICc3Mf4vhWrEJK4VFx
w2uay8Q6wg440GySVmDdGA1aE97aPfw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:49:14 2025 by rpki-client