Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/ce2757a3-5b67-326d-b200-12e94dccea02.roa
File:                     ce2757a3-5b67-326d-b200-12e94dccea02.roa (raw, json)
Hash identifier:          XEpOaqpP0AbH8BMvRqh4sp7AFWXZZYTydqj2Opym6nk=
Subject key identifier:   EC:90:CE:02:EF:1A:17:29:3A:90:57:3F:AB:01:F4:20:D8:79:3D:77
Certificate issuer:       /CN=978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9
Certificate serial:       010D0C9F4328584A268AADB916D7D3AD6930B380
Authority key identifier: 4D:27:EF:33:4D:07:6A:91:5D:C7:56:79:D0:3B:B7:A2:B5:40:56:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/ce2757a3-5b67-326d-b200-12e94dccea02.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     396982
IP address blocks:        162.216.248.0/24 maxlen: 24
                          162.216.249.0/24 maxlen: 24
                          162.216.250.0/24 maxlen: 24
                          162.216.251.0/24 maxlen: 24
                          162.216.252.0/24 maxlen: 24
                          162.216.253.0/24 maxlen: 24
                          162.216.254.0/24 maxlen: 24
                          162.216.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:ad:b9:16:d7:d3:ad:69:30:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=bad3f1f6-a43d-44a6-8e7f-8dc2139004ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c9:cb:e4:28:73:c0:94:2b:9c:01:6c:55:10:
                    1e:ac:fd:39:10:fa:0e:86:23:1f:cb:a4:0b:e9:2e:
                    00:20:37:1d:0c:c8:f6:a6:af:02:b4:d0:f7:61:b9:
                    89:34:08:3f:fa:42:7d:31:68:af:15:fe:02:c8:f9:
                    ec:10:8e:7d:b1:1c:bc:de:05:e0:50:d8:84:eb:5e:
                    7f:ec:da:d2:1b:26:9c:c2:de:0c:46:f8:a4:77:7f:
                    07:31:31:7e:e9:2a:93:aa:80:b4:bc:3d:2b:20:f3:
                    52:d6:d6:94:c5:d1:d4:6b:9c:4a:77:81:dd:4b:10:
                    43:d7:89:fb:0e:e8:cd:e0:6b:41:12:31:96:2f:28:
                    b9:ac:b5:1b:49:7a:81:7f:b0:20:5a:80:65:e4:af:
                    ec:91:50:63:31:64:ff:01:8f:3a:85:f9:a0:d0:a2:
                    0f:43:73:5f:bc:74:9c:1b:8e:c9:3d:e1:88:06:f8:
                    94:6f:87:8b:8c:74:b0:f4:88:7f:1a:17:52:59:75:
                    31:bd:31:60:b0:e6:c2:e7:2d:bf:d0:3a:46:66:12:
                    16:df:8e:ab:f2:51:30:1b:1b:47:ee:d9:bc:bc:62:
                    e4:80:bb:57:16:dc:86:9f:d5:4e:64:14:ab:3f:fa:
                    27:57:d8:5a:15:f1:05:cc:a9:38:a8:01:3b:32:6f:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:90:CE:02:EF:1A:17:29:3A:90:57:3F:AB:01:F4:20:D8:79:3D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/ce2757a3-5b67-326d-b200-12e94dccea02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:27:EF:33:4D:07:6A:91:5D:C7:56:79:D0:3B:B7:A2:B5:40:56:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e4:86:73:26:8a:b1:52:e4:fa:0c:dc:b6:0e:9e:36:c5:a6:
         27:2a:28:16:cb:c2:2b:e6:0b:0b:ee:43:41:78:16:6a:5e:3c:
         4f:08:6b:fb:17:d3:79:12:0f:be:c7:99:4d:3f:a4:d8:52:c6:
         b8:97:72:8d:1a:22:93:62:32:1f:2c:78:4a:ff:65:60:bb:ff:
         00:2d:74:49:a7:f4:a3:7b:e5:a2:51:aa:d3:9b:be:0a:f9:8b:
         1f:8c:e6:d4:50:a8:2e:bb:5d:40:5b:eb:4e:a0:44:1e:13:b5:
         6e:6f:66:e8:44:4f:93:11:a6:98:a3:c3:88:15:00:b2:f7:a4:
         9a:4e:a5:7e:c5:7e:15:3d:44:d4:50:1d:44:80:af:40:fc:31:
         1a:bf:85:aa:17:62:1e:15:ca:e0:81:1c:ab:cb:46:de:68:8a:
         1b:6c:51:f6:0e:da:27:26:9b:f7:88:4f:7e:37:70:53:48:c2:
         40:af:e2:bc:04:37:a8:38:47:ee:ba:3f:c3:da:36:f5:66:68:
         92:56:5e:64:82:ee:fd:d0:32:3b:a3:4e:c3:89:90:81:bc:bd:
         e0:3c:bc:77:68:3c:1c:66:1c:21:46:83:b5:f9:b7:4f:dd:5f:
         86:c1:d9:87:b8:9e:6f:c6:d7:3e:b3:ce:1e:27:82:44:0c:c5:
         21:1b:61:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomiq25FtfTrWkws4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc4ZGZkNTItZTRlMS00Y2FhLWJkYWUtMjFmMWNjZDlh
NGI5MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk
YmFkM2YxZjYtYTQzZC00NGE2LThlN2YtOGRjMjEzOTAwNGFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsnL5ChzwJQrnAFsVRAerP05EPoOhiMfy6QL
6S4AIDcdDMj2pq8CtND3YbmJNAg/+kJ9MWivFf4CyPnsEI59sRy83gXgUNiE615/
7NrSGyacwt4MRvikd38HMTF+6SqTqoC0vD0rIPNS1taUxdHUa5xKd4HdSxBD14n7
DujN4GtBEjGWLyi5rLUbSXqBf7AgWoBl5K/skVBjMWT/AY86hfmg0KIPQ3NfvHSc
G47JPeGIBviUb4eLjHSw9Ih/GhdSWXUxvTFgsObC5y2/0DpGZhIW346r8lEwGxtH
7tm8vGLkgLtXFtyGn9VOZBSrP/onV9haFfEFzKk4qAE7Mm9X5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOyQzgLvGhcpOpBXP6sB9CDYeT13MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Nzhk
ZmQ1Mi1lNGUxLTRjYWEtYmRhZS0yMWYxY2NkOWE0YjkvY2UyNzU3YTMtNWI2Ny0z
MjZkLWIyMDAtMTJlOTRkY2NlYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTc4ZGZkNTItZTRlMS00Y2FhLWJk
YWUtMjFmMWNjZDlhNGI5Lzk3OGRmZDUyLWU0ZTEtNGNhYS1iZGFlLTIxZjFjY2Q5
YTRiOS5jcmwwHwYDVR0jBBgwFoAUTSfvM00HapFdx1Z50Du3orVAVuMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85NzhkZmQ1Mi1lNGUxLTRjYWEtYmRhZS0yMWYx
Y2NkOWE0YjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotj4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTkhnMmirFS5PoM3LYOnjbFpicqKBbLwivmCwvuQ0F4FmpePE8Ia/sX
03kSD77HmU0/pNhSxriXco0aIpNiMh8seEr/ZWC7/wAtdEmn9KN75aJRqtObvgr5
ix+M5tRQqC67XUBb606gRB4TtW5vZuhET5MRppijw4gVALL3pJpOpX7FfhU9RNRQ
HUSAr0D8MRq/haoXYh4VyuCBHKvLRt5oihtsUfYO2icmm/eIT343cFNIwkCv4rwE
N6g4R+66P8PaNvVmaJJWXmSC7v3QMjujTsOJkIG8veA8vHdoPBxmHCFGg7X5t0/d
X4bB2Ye4nm/G1z6zzh4ngkQMxSEbYR8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:09:23 2025 by rpki-client