Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cc14b707-3e78-3382-99cd-75d692e5974c.roa
File:                     cc14b707-3e78-3382-99cd-75d692e5974c.roa (raw, json)
Hash identifier:          cpk2HMboYNEyr95vwaOajyishuHg7ZFAUsLtrH9bLoU=
Subject key identifier:   95:B3:2A:32:37:A5:B7:96:E0:AC:DC:ED:12:1B:F8:DB:96:E0:E6:49
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584964C80A3898470C672247BE00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cc14b707-3e78-3382-99cd-75d692e5974c.roa
Signing time:             Wed 02 Apr 2025 15:17:43 +0000
ROA not before:           Wed 02 Apr 2025 15:17:43 +0000
ROA not after:            Tue 01 Jul 2025 15:17:43 +0000
asID:                     394089
IP address blocks:        144.125.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:c8:0a:38:98:47:0c:67:22:47:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr  2 15:17:43 2025 GMT
            Not After : Jul  1 15:17:43 2025 GMT
        Subject: CN=c8203cd0-d143-48fb-9410-5be80c1b856d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ba:98:98:41:74:a9:5e:3f:cc:55:f8:a4:cf:
                    3c:bf:e2:db:88:f1:74:07:37:68:72:95:5a:72:f1:
                    88:71:b7:10:36:9c:22:88:3a:58:e1:24:3d:ec:48:
                    fa:7a:04:c9:e1:1a:d2:f2:f8:40:1d:eb:c9:df:e1:
                    3e:a8:a5:f1:d5:71:3e:5c:31:bb:27:a2:00:32:f7:
                    7b:78:59:23:ce:4a:f0:d6:42:18:fa:b0:27:ef:40:
                    11:73:be:3c:1b:e6:02:14:23:4c:3c:90:96:ec:46:
                    7d:2b:c2:b0:c5:d5:0b:73:d6:21:9e:40:43:6b:fc:
                    1c:11:d1:ae:c9:38:2e:77:71:69:66:ac:db:80:80:
                    64:15:0f:a5:3b:01:f7:0f:42:aa:ca:c2:5a:01:43:
                    72:2f:4e:d8:7c:19:aa:a4:18:57:2c:01:15:97:28:
                    8c:63:73:c4:cf:58:f3:d0:79:1d:97:98:dd:d3:73:
                    f8:0a:a7:0d:48:1d:3e:0d:4a:fc:0c:24:a5:b4:8d:
                    ef:be:df:e3:bd:a8:0e:e4:46:6d:8b:0d:28:ff:e5:
                    f5:52:35:6e:c2:1f:a8:30:38:da:7d:bd:4e:1b:b0:
                    2b:35:5b:77:68:cf:84:13:1a:41:d2:da:3f:bf:7c:
                    18:85:ae:c7:c8:8c:aa:1d:cc:62:59:f2:48:de:ad:
                    ea:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B3:2A:32:37:A5:B7:96:E0:AC:DC:ED:12:1B:F8:DB:96:E0:E6:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cc14b707-3e78-3382-99cd-75d692e5974c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:6a:6d:9d:0f:9d:ad:32:1e:22:8f:08:99:fd:1d:6a:e3:46:
         e4:52:54:be:e8:ee:de:b4:52:db:db:8a:bf:de:79:78:e2:b9:
         b7:11:cb:6b:32:46:74:b7:d5:12:ad:65:42:6b:65:e3:18:f4:
         b5:73:6e:32:05:35:2c:2e:59:da:7c:dd:99:35:96:59:38:07:
         57:b0:ea:dd:9e:04:42:0f:7d:be:90:b7:5e:b7:99:e9:22:11:
         e1:9e:53:5b:81:f0:6d:3b:9a:63:8e:88:7e:c5:12:70:5c:d5:
         b4:78:5d:1d:80:a7:f2:2f:66:22:b3:0f:66:cd:a2:4e:f7:a7:
         b9:ad:23:4c:a8:c9:72:d6:4a:61:3d:0f:7e:be:b9:bc:c1:0d:
         06:b6:bd:34:61:01:e5:80:ae:35:f1:43:92:19:c1:8e:0b:3e:
         a0:80:7b:ee:49:d5:32:35:75:7b:c3:f7:0a:3e:84:bb:fc:21:
         c5:58:46:fc:f9:3f:f4:8b:35:40:4a:14:bf:03:8a:ac:eb:9b:
         b6:23:f6:4b:f2:d0:42:7e:ca:79:4b:a6:e2:48:83:bd:d2:a8:
         64:ad:2c:a7:b5:2a:c0:9f:4c:15:82:1b:55:16:d3:33:cf:95:
         82:76:8c:b2:34:cd:61:d3:85:ac:2e:b1:7e:95:65:19:e1:ea:
         8c:25:1c:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkyAo4mEcMZyJHvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDQwMjE1MTc0M1oXDTI1MDcwMTE1MTc0M1owLzEtMCsGA1UEAxMk
YzgyMDNjZDAtZDE0My00OGZiLTk0MTAtNWJlODBjMWI4NTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbqYmEF0qV4/zFX4pM88v+LbiPF0BzdocpVa
cvGIcbcQNpwiiDpY4SQ97Ej6egTJ4RrS8vhAHevJ3+E+qKXx1XE+XDG7J6IAMvd7
eFkjzkrw1kIY+rAn70ARc748G+YCFCNMPJCW7EZ9K8KwxdULc9YhnkBDa/wcEdGu
yTgud3FpZqzbgIBkFQ+lOwH3D0KqysJaAUNyL07YfBmqpBhXLAEVlyiMY3PEz1jz
0Hkdl5jd03P4CqcNSB0+DUr8DCSltI3vvt/jvagO5EZtiw0o/+X1UjVuwh+oMDja
fb1OG7ArNVt3aM+EExpB0to/v3wYha7HyIyqHcxiWfJI3q3qTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWzKjI3pbeW4Kzc7RIb+NuW4OZJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvY2MxNGI3MDctM2U3OC0z
MzgyLTk5Y2QtNzVkNjkyZTU5NzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkH1gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlqbZ0Pna0yHiKPCJn9HWrjRuRSVL7o7t60Utvbir/eeXjiubcRy2sy
RnS31RKtZUJrZeMY9LVzbjIFNSwuWdp83Zk1llk4B1ew6t2eBEIPfb6Qt163meki
EeGeU1uB8G07mmOOiH7FEnBc1bR4XR2Ap/IvZiKzD2bNok73p7mtI0yoyXLWSmE9
D36+ubzBDQa2vTRhAeWArjXxQ5IZwY4LPqCAe+5J1TI1dXvD9wo+hLv8IcVYRvz5
P/SLNUBKFL8Diqzrm7Yj9kvy0EJ+ynlLpuJIg73SqGStLKe1KsCfTBWCG1UW0zPP
lYJ2jLI0zWHThawusX6VZRnh6owlHOk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:19 2025 by rpki-client