Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/256b6b73-425f-337c-8539-dd74b1dc0dcd.roa
File:                     256b6b73-425f-337c-8539-dd74b1dc0dcd.roa (raw, json)
Hash identifier:          KquYfrQnDvO6DMm5IlwZeaGrtMdJ8J/ZMY5UAaSs+SA=
Subject key identifier:   A6:EF:7A:83:8C:C6:08:02:CE:4E:3B:12:A9:E6:1D:3B:3B:DD:EC:4C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849FB452FFCEFDD35B54CA4B400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/256b6b73-425f-337c-8539-dd74b1dc0dcd.roa
Signing time:             Mon 26 May 2025 13:01:03 +0000
ROA not before:           Mon 26 May 2025 13:01:03 +0000
ROA not after:            Sun 24 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        108.161.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:45:2f:fc:ef:dd:35:b5:4c:a4:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 26 13:01:03 2025 GMT
            Not After : Aug 24 13:01:03 2025 GMT
        Subject: CN=b955ccec-b4b7-4072-980a-382e7f622770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4d:21:87:77:50:01:45:e5:bb:d2:c3:f4:74:
                    4d:e7:46:5a:4a:53:03:0d:63:2f:eb:d9:f1:de:9d:
                    33:7b:84:40:fb:5f:55:12:5a:72:4c:9b:ff:22:68:
                    81:95:73:ac:0c:fd:f6:2c:bb:98:5e:61:98:9c:4a:
                    36:dc:de:96:98:8d:41:3a:58:3f:28:65:f4:6f:ac:
                    6d:29:92:71:c7:6d:dc:4e:8f:2e:42:6d:f2:44:d0:
                    ed:82:21:83:67:6a:d1:14:34:73:03:88:c0:7e:33:
                    60:ab:a5:25:69:2f:0f:ce:ae:72:34:71:6f:d0:c5:
                    02:be:f2:ce:64:7b:33:41:e5:d8:55:f5:f3:1e:35:
                    41:ba:7e:f1:dd:39:a2:11:21:c3:17:f3:11:a6:3a:
                    da:f4:ad:34:51:7c:77:3d:02:83:bb:0d:39:cb:97:
                    fe:2f:c9:43:36:36:5c:70:0f:ca:34:d2:dc:d1:e6:
                    5a:90:9d:9d:6e:15:00:4c:fc:1d:78:7b:b6:33:88:
                    fb:26:9e:27:e2:49:a7:40:db:eb:56:17:ae:48:2d:
                    44:02:59:11:5a:49:36:b5:da:7c:cb:45:61:06:f8:
                    da:bf:6b:58:77:53:d2:76:85:fb:2a:62:c2:06:2d:
                    f8:59:a9:fd:24:a3:3f:e4:e1:3c:95:82:b4:cb:df:
                    83:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EF:7A:83:8C:C6:08:02:CE:4E:3B:12:A9:E6:1D:3B:3B:DD:EC:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/256b6b73-425f-337c-8539-dd74b1dc0dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:76:4b:ca:d9:cc:f9:e8:cf:56:6a:4c:77:1d:40:93:cd:c6:
         5b:56:40:84:3c:68:bc:00:2a:f1:7c:76:61:38:68:8f:b2:4d:
         97:00:c0:eb:0d:94:1d:ad:3f:6c:02:ff:ef:4b:8d:5b:46:68:
         13:c8:78:b9:1d:c6:c4:66:48:f8:fe:06:b4:c1:10:cf:9b:bd:
         ff:a1:69:51:b8:bc:12:62:57:b2:71:73:5f:4e:f7:54:e1:6e:
         c7:f4:0b:47:c4:e6:91:5d:d2:8d:5f:2a:6e:aa:d2:e8:52:e0:
         5f:d8:bd:cb:e2:1d:b8:ec:6f:44:9c:4d:3e:ff:5f:b0:61:0f:
         0a:5d:d5:22:c8:ab:fa:ac:63:60:fb:52:51:8e:09:ee:d7:ef:
         76:81:92:ba:c8:da:dd:89:2f:b0:e9:69:64:30:04:ea:64:ee:
         09:5a:e1:82:02:bb:e9:2c:01:35:ad:b8:61:dd:87:12:e9:db:
         44:88:f4:9f:ad:22:fd:45:41:ab:0b:27:66:5e:ce:1d:c4:9d:
         f4:58:ac:c6:18:c0:56:bc:1a:fb:c8:a1:bc:14:80:ae:f4:f9:
         2b:fc:a5:55:e5:e3:10:ad:a7:73:a6:f7:3b:b0:24:4b:d2:59:
         f2:d0:39:74:1c:87:13:07:2d:87:7e:20:da:fa:f3:d8:6b:16:
         5d:42:ab:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn7RS/87901tUyktAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDUyNjEzMDEwM1oXDTI1MDgyNDEzMDEwM1owLzEtMCsGA1UEAxMk
Yjk1NWNjZWMtYjRiNy00MDcyLTk4MGEtMzgyZTdmNjIyNzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE0hh3dQAUXlu9LD9HRN50ZaSlMDDWMv69nx
3p0ze4RA+19VElpyTJv/ImiBlXOsDP32LLuYXmGYnEo23N6WmI1BOlg/KGX0b6xt
KZJxx23cTo8uQm3yRNDtgiGDZ2rRFDRzA4jAfjNgq6UlaS8Pzq5yNHFv0MUCvvLO
ZHszQeXYVfXzHjVBun7x3TmiESHDF/MRpjra9K00UXx3PQKDuw05y5f+L8lDNjZc
cA/KNNLc0eZakJ2dbhUATPwdeHu2M4j7Jp4n4kmnQNvrVheuSC1EAlkRWkk2tdp8
y0VhBvjav2tYd1PSdoX7KmLCBi34Wan9JKM/5OE8lYK0y9+DEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKbveoOMxggCzk47EqnmHTs73exMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjU2YjZiNzMtNDI1Zi0z
MzdjLTg1MzktZGQ3NGIxZGMwZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKFaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFd2S8rZzPnoz1ZqTHcdQJPNxltWQIQ8aLwAKvF8dmE4aI+yTZcAwOsN
lB2tP2wC/+9LjVtGaBPIeLkdxsRmSPj+BrTBEM+bvf+haVG4vBJiV7Jxc19O91Th
bsf0C0fE5pFd0o1fKm6q0uhS4F/YvcviHbjsb0ScTT7/X7BhDwpd1SLIq/qsY2D7
UlGOCe7X73aBkrrI2t2JL7DpaWQwBOpk7gla4YICu+ksATWtuGHdhxLp20SI9J+t
Iv1FQasLJ2Zezh3EnfRYrMYYwFa8GvvIobwUgK70+Sv8pVXl4xCtp3Om9zuwJEvS
WfLQOXQchxMHLYd+INr689hrFl1Cq9Q=
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:08:08 2025 by rpki-client