Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/5e1da7f9-f38c-3fee-a2ce-f217907851ba.roa
File:                     5e1da7f9-f38c-3fee-a2ce-f217907851ba.roa (raw, json)
Hash identifier:          PKDeBfN8JDri92k2zs99KAu7eqFRqM2CRrAqv7vwvyY=
Subject key identifier:   C0:7F:20:34:85:5F:55:AD:B6:E3:60:C1:F4:31:AD:A6:94:1A:D7:0D
Certificate issuer:       /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a
Certificate serial:       010D0C9F43285849998F325E572D34C960DE40E0
Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/5e1da7f9-f38c-3fee-a2ce-f217907851ba.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     7018
IP address blocks:        192.100.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:32:5e:57:2d:34:c9:60:de:40:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=bbbb7b74-65a8-4db1-9859-e9f6ae26cc83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:e3:47:e5:40:15:51:83:8d:6c:f6:35:9a:
                    8e:4b:39:b0:85:aa:ce:93:e7:17:9c:92:2e:e5:d0:
                    59:8b:c6:54:2b:ad:5e:9d:e8:c3:28:94:d6:44:d3:
                    75:32:95:ef:8a:c5:f9:ca:fe:53:e8:ba:67:46:89:
                    14:e6:28:32:b8:f2:18:df:e7:fc:56:1f:bf:61:17:
                    ef:41:6d:8e:5a:71:3a:2b:ca:45:3d:ee:a3:d4:96:
                    66:5c:09:a2:91:ff:50:e5:9b:c7:eb:8e:52:c8:40:
                    d3:eb:79:ac:ae:bf:bb:3d:8f:31:79:a4:c1:5d:ab:
                    3e:49:f4:50:e8:73:12:a3:51:b7:51:66:b9:ad:1e:
                    b0:52:4b:1e:a5:d8:a2:5f:22:0b:00:1c:a7:84:19:
                    4e:90:d9:1b:14:23:2a:75:89:a9:0a:ec:c4:2c:e8:
                    c9:0d:0b:0f:b4:b1:6c:69:5b:5a:ec:bb:86:a3:88:
                    3a:c6:ff:38:b1:1a:97:2e:3f:de:88:44:c1:6e:ad:
                    1e:57:ac:93:05:6a:64:2a:32:6a:f2:ef:7e:3b:e5:
                    9d:cd:3a:fa:3e:c6:5b:71:92:c6:5f:0e:9e:0e:4c:
                    e1:40:d2:64:c9:38:18:6b:e9:3d:ea:4b:d9:db:3c:
                    53:31:70:f2:31:a3:8c:4d:8a:7e:ed:7c:c7:b6:c8:
                    b1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7F:20:34:85:5F:55:AD:B6:E3:60:C1:F4:31:AD:A6:94:1A:D7:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/5e1da7f9-f38c-3fee-a2ce-f217907851ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl

            X509v3 Authority Key Identifier:
                keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:70:43:73:5d:5e:ed:3d:7c:53:7b:82:ef:71:c5:0a:3a:a2:
         fe:d0:64:5e:1d:6a:1e:fd:9a:30:66:45:8e:6c:87:fa:51:6b:
         8d:1e:70:41:fc:10:7a:ca:a3:02:ff:fc:85:bc:04:8c:d8:ce:
         76:51:59:59:a3:05:7c:f8:d4:22:33:4c:38:d1:8a:7a:71:0c:
         ce:8e:db:33:39:ea:f8:29:88:e1:85:6e:a0:34:20:aa:a5:8c:
         a2:22:1c:20:f4:d6:98:51:1b:c2:46:61:50:06:1b:26:f9:e6:
         d5:da:af:f8:af:ad:ff:5b:f7:9d:98:42:06:fc:97:63:f2:72:
         8c:91:1f:da:2d:5c:0b:6e:76:55:e1:0e:2d:fc:cf:ae:99:23:
         ee:dd:7a:a3:e6:c5:8f:b8:2e:ad:30:31:57:1f:2a:e9:e5:c7:
         d2:67:50:82:ad:e1:99:13:cc:92:0a:93:9e:7a:16:a2:43:87:
         60:64:32:cf:c5:0c:97:15:b7:93:2d:13:6f:70:a0:d8:ce:52:
         9a:5e:7d:52:a9:ec:96:86:87:3c:b4:c7:b1:ec:60:fc:1e:a4:
         62:69:6c:39:0d:89:f5:ed:82:5d:53:ea:33:57:d8:35:a4:24:
         bc:83:3c:c1:56:07:71:85:20:16:82:ad:d2:5c:ce:53:7f:6f:
         9a:19:98:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzJeVy00yWDeQOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZmZmE1YzMtYjVjNy00MzQ3LThkNTctOTZiYzMxMDJk
ZjhhMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk
YmJiYjdiNzQtNjVhOC00ZGIxLTk4NTktZTlmNmFlMjZjYzgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8TjR+VAFVGDjWz2NZqOSzmwharOk+cXnJIu
5dBZi8ZUK61enejDKJTWRNN1MpXvisX5yv5T6LpnRokU5igyuPIY3+f8Vh+/YRfv
QW2OWnE6K8pFPe6j1JZmXAmikf9Q5ZvH645SyEDT63msrr+7PY8xeaTBXas+SfRQ
6HMSo1G3UWa5rR6wUksepdiiXyILABynhBlOkNkbFCMqdYmpCuzELOjJDQsPtLFs
aVta7LuGo4g6xv84sRqXLj/eiETBbq0eV6yTBWpkKjJq8u9+O+WdzTr6PsZbcZLG
Xw6eDkzhQNJkyTgYa+k96kvZ2zxTMXDyMaOMTYp+7XzHtsixcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMB/IDSFX1WttuNgwfQxraaUGtcNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZm
YTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJjMzEwMmRmOGEvNWUxZGE3ZjktZjM4Yy0z
ZmVlLWEyY2UtZjIxNzkwNzg1MWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZmZmE1YzMtYjVjNy00MzQ3LThk
NTctOTZiYzMxMDJkZjhhL2RmZmZhNWMzLWI1YzctNDM0Ny04ZDU3LTk2YmMzMTAy
ZGY4YS5jcmwwHwYDVR0jBBgwFoAUIe+ilYJwxKe3fT4mS96etGYNrkgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZmYTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJj
MzEwMmRmOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGREMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5wQ3NdXu09fFN7gu9xxQo6ov7QZF4dah79mjBmRY5sh/pRa40ecEH8
EHrKowL//IW8BIzYznZRWVmjBXz41CIzTDjRinpxDM6O2zM56vgpiOGFbqA0IKql
jKIiHCD01phRG8JGYVAGGyb55tXar/ivrf9b952YQgb8l2PycoyRH9otXAtudlXh
Di38z66ZI+7deqPmxY+4Lq0wMVcfKunlx9JnUIKt4ZkTzJIKk556FqJDh2BkMs/F
DJcVt5MtE29woNjOUppefVKp7JaGhzy0x7HsYPwepGJpbDkNifXtgl1T6jNX2DWk
JLyDPMFWB3GFIBaCrdJczlN/b5oZmGc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:17:07 2025 by rpki-client