Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ecaac54-c783-30b3-8e7a-fdc1a9758aba.roa
File:                     4ecaac54-c783-30b3-8e7a-fdc1a9758aba.roa (raw, json)
Hash identifier:          Yf4io+F/cQ4MwoH9tptMP5XRK+Ws+pJ755EeAek+rLs=
Subject key identifier:   BF:62:E3:8A:2D:7F:92:17:E2:9D:EB:67:8C:F4:96:12:12:05:4E:C0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAB12B75895C4689CF9A40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ecaac54-c783-30b3-8e7a-fdc1a9758aba.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     21723
IP address blocks:        209.226.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b1:2b:75:89:5c:46:89:cf:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=4b77f189-a632-4812-af13-5dea434ba398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8f:39:cf:6a:14:0b:cc:5f:50:fe:81:e9:12:
                    63:91:07:03:ac:2f:30:00:24:7d:bf:71:6a:1f:09:
                    70:5b:f5:10:a9:1b:f9:ae:4f:8a:85:b8:28:cc:73:
                    46:c4:f7:c0:90:02:74:9a:6b:64:42:f6:8b:b5:ba:
                    68:b3:a0:71:a7:7f:4f:0f:68:8c:9d:04:56:41:17:
                    b1:9a:9f:63:b4:00:d6:66:c6:85:09:68:33:80:29:
                    a5:84:98:29:f9:50:c8:6f:5d:26:2c:00:06:7f:97:
                    f8:51:13:e2:7a:c8:fb:2f:7e:40:72:5d:1c:9c:e5:
                    aa:a4:e2:ba:bf:98:b4:37:3f:c0:ac:2e:17:d9:54:
                    fa:1d:8c:a5:71:44:27:2d:af:53:3f:12:72:5f:80:
                    18:c4:bd:08:1a:b3:0c:6f:84:23:09:63:7d:ea:4c:
                    3d:dc:0d:78:f9:dc:fa:f7:9a:75:95:d8:9a:17:bc:
                    fc:c8:13:7c:fd:73:82:8d:ae:a1:d8:0a:5f:ee:9f:
                    fc:5c:71:28:73:10:17:5b:eb:bc:15:6a:41:c9:de:
                    20:0d:8c:ef:6b:b7:be:26:28:a5:51:63:83:66:98:
                    ec:06:03:44:2b:3f:9c:70:25:9b:ec:cf:c2:68:bb:
                    18:f9:4c:6d:98:c6:be:a8:17:92:a8:33:63:e8:90:
                    e7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:62:E3:8A:2D:7F:92:17:E2:9D:EB:67:8C:F4:96:12:12:05:4E:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ecaac54-c783-30b3-8e7a-fdc1a9758aba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:37:00:f2:2f:bf:7f:ff:0a:7d:64:0f:77:23:b8:0c:cb:3b:
         56:0c:f5:a9:e8:50:fb:e2:5f:bd:f8:90:32:3d:75:e3:9c:dd:
         b5:fc:99:eb:a4:13:c4:4d:28:5e:2b:a6:4a:25:d5:f9:c4:f4:
         ea:ed:a1:87:8d:4d:ce:e0:4a:e7:f6:b9:f1:61:2e:0a:38:f3:
         2b:38:23:c6:68:80:31:55:0f:82:1e:31:6e:c5:68:dd:7b:e2:
         83:c1:55:1a:b5:48:8e:f5:91:ba:e5:f5:33:69:7c:9a:d4:a7:
         a6:54:9b:4f:dc:61:c8:46:e5:0e:ae:11:b9:e3:33:d2:cb:b0:
         45:e0:2a:1f:72:34:31:d1:2f:e2:7a:bd:af:5d:f3:6e:82:87:
         89:bb:82:95:b1:b8:29:87:55:fd:be:35:47:38:60:ac:1e:b2:
         8c:09:76:13:eb:f6:42:3a:3f:71:89:a7:b6:77:71:9f:b6:61:
         30:c9:22:ad:c4:9a:e7:a4:1a:b0:3f:20:4c:46:4e:5b:26:ee:
         ec:c5:da:e9:3d:22:c7:83:37:ef:a1:eb:9d:24:f3:a9:9b:e2:
         1f:31:40:39:a6:ea:43:15:11:88:dc:45:19:fb:2f:73:d5:20:
         27:36:92:59:9e:55:fa:5b:2f:c4:34:1d:02:ce:5d:1c:9a:cf:
         a8:22:fb:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2rErdYlcRonPmkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NGI3N2YxODktYTYzMi00ODEyLWFmMTMtNWRlYTQzNGJhMzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo85z2oUC8xfUP6B6RJjkQcDrC8wACR9v3Fq
HwlwW/UQqRv5rk+KhbgozHNGxPfAkAJ0mmtkQvaLtbpos6Bxp39PD2iMnQRWQRex
mp9jtADWZsaFCWgzgCmlhJgp+VDIb10mLAAGf5f4URPiesj7L35Acl0cnOWqpOK6
v5i0Nz/ArC4X2VT6HYylcUQnLa9TPxJyX4AYxL0IGrMMb4QjCWN96kw93A14+dz6
95p1ldiaF7z8yBN8/XOCja6h2Apf7p/8XHEocxAXW+u8FWpByd4gDYzva7e+Jiil
UWODZpjsBgNEKz+ccCWb7M/CaLsY+UxtmMa+qBeSqDNj6JDnLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL9i44otf5IX4p3rZ4z0lhISBU7AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNGVjYWFjNTQtYzc4My0z
MGIzLThlN2EtZmRjMWE5NzU4YWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eIuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEY3APIvv3//Cn1kD3cjuAzLO1YM9anoUPviX734kDI9deOc3bX8meuk
E8RNKF4rpkol1fnE9OrtoYeNTc7gSuf2ufFhLgo48ys4I8ZogDFVD4IeMW7FaN17
4oPBVRq1SI71kbrl9TNpfJrUp6ZUm0/cYchG5Q6uEbnjM9LLsEXgKh9yNDHRL+J6
va9d826Ch4m7gpWxuCmHVf2+NUc4YKwesowJdhPr9kI6P3GJp7Z3cZ+2YTDJIq3E
muekGrA/IExGTlsm7uzF2uk9IseDN++h650k86mb4h8xQDmm6kMVEYjcRRn7L3PV
ICc2klmeVfpbL8Q0HQLOXRyaz6gi+xs=
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:30:14 2025 by rpki-client