Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/f1b424f5-544b-3229-8a77-49121b07de6d.roa
File:                     f1b424f5-544b-3229-8a77-49121b07de6d.roa (raw, json)
Hash identifier:          +AvPaDiqxt36ehSEJqR46zCRfF3NJMhIIWcegvW5wq0=
Subject key identifier:   8B:C7:DC:F4:62:77:F2:40:FD:15:4B:EA:B4:B2:F0:8C:80:25:A7:D7
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328584A331AE6AF3CE676ABDD67409C
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/f1b424f5-544b-3229-8a77-49121b07de6d.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     47050
IP address blocks:        173.224.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:e6:af:3c:e6:76:ab:dd:67:40:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=d3bce162-5065-42a6-b9c1-8266b1ec797c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7b:7e:40:0d:57:09:05:ca:12:ac:f3:93:8f:
                    b0:62:6e:05:7e:78:a6:f1:b3:4d:e3:1a:2c:c2:ea:
                    6d:88:10:2e:16:42:02:39:41:35:ba:cd:08:5e:62:
                    47:84:a1:03:e9:20:15:be:29:41:2a:ad:bf:3a:c3:
                    16:f5:28:69:1a:a6:f5:18:be:37:36:83:50:a4:1b:
                    9b:cd:99:19:3d:75:14:c4:6d:fc:5b:89:ca:54:a0:
                    e6:38:f5:37:7e:31:a6:39:8e:81:d1:4d:fc:d5:44:
                    85:a2:f9:7b:94:43:1c:26:2f:a8:01:57:8e:df:91:
                    20:2e:a3:b4:36:38:d8:9f:54:00:24:47:68:de:94:
                    8d:b7:1f:4f:3a:19:f8:65:b7:6e:39:6b:c5:9b:9e:
                    68:24:ff:a7:ee:f0:5b:87:ba:57:7f:fe:b1:e7:a1:
                    55:5b:76:53:1e:59:dc:fd:01:f8:a7:52:f1:e8:29:
                    dd:f5:33:e4:28:67:af:5d:d2:c2:d1:f0:58:57:37:
                    82:ba:e5:33:82:c5:c9:09:a0:9a:86:23:05:6a:c3:
                    84:ed:c9:fe:68:06:e4:e7:11:f9:c2:a9:b1:ab:c7:
                    75:a8:a3:ab:18:ef:36:0b:07:a8:63:53:a6:74:d0:
                    39:32:c9:1f:6f:6b:b7:af:0d:e3:44:65:62:d4:c4:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C7:DC:F4:62:77:F2:40:FD:15:4B:EA:B4:B2:F0:8C:80:25:A7:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/f1b424f5-544b-3229-8a77-49121b07de6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:65:e0:b0:18:7f:00:4c:6f:5e:85:2d:2c:25:0e:fa:4b:88:
         90:6d:a8:d4:32:e6:75:96:cb:17:90:56:92:57:37:dd:1a:9c:
         7e:43:bf:66:c5:42:be:c8:3f:8f:88:c5:84:3b:f3:06:5e:66:
         6e:c2:24:1c:cc:47:e9:7b:e2:32:39:84:15:e7:3d:ec:49:56:
         f6:b6:ca:66:30:cb:a9:31:a1:c6:77:09:00:50:45:bd:d8:af:
         8c:80:a2:ee:0e:7a:dc:e8:0d:fe:7a:1a:f2:53:cf:bb:09:6f:
         89:5b:b3:71:18:a4:9e:b7:4e:0a:8a:88:1e:7a:a6:cf:71:90:
         a5:62:fd:f5:22:be:72:cd:8e:d3:bc:b2:cb:ac:d5:43:b6:b2:
         b9:9c:40:be:2e:a7:7e:c3:a0:c6:a5:85:b8:b1:26:67:bf:37:
         ed:20:16:4b:4b:63:ed:7e:9b:dd:3f:42:c5:94:85:ee:2c:91:
         d1:a1:5d:2a:94:4c:59:12:31:e5:b6:d5:7e:8e:16:a5:fa:42:
         33:5c:8e:30:f7:9c:76:47:e7:b2:fb:49:6f:b8:16:7e:a1:6f:
         cd:90:ff:09:7f:4c:05:94:e2:79:91:04:b4:7a:b5:88:c7:76:
         f9:ff:9a:f3:8a:fd:7b:22:5f:20:f8:55:72:aa:9c:3b:c8:4a:
         53:ad:c5:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGuavPOZ2q91nQJwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGI1ZjJkYWYtN2Q3YS00ODQ4LWJiZDItMDU1ZjQzYWU4
OTcwMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
ZDNiY2UxNjItNTA2NS00MmE2LWI5YzEtODI2NmIxZWM3OTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3t+QA1XCQXKEqzzk4+wYm4Ffnim8bNN4xos
wuptiBAuFkICOUE1us0IXmJHhKED6SAVvilBKq2/OsMW9ShpGqb1GL43NoNQpBub
zZkZPXUUxG38W4nKVKDmOPU3fjGmOY6B0U381USFovl7lEMcJi+oAVeO35EgLqO0
NjjYn1QAJEdo3pSNtx9POhn4ZbduOWvFm55oJP+n7vBbh7pXf/6x56FVW3ZTHlnc
/QH4p1Lx6Cnd9TPkKGevXdLC0fBYVzeCuuUzgsXJCaCahiMFasOE7cn+aAbk5xH5
wqmxq8d1qKOrGO82CweoY1OmdNA5Mskfb2u3rw3jRGVi1MQMsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIvH3PRid/JA/RVL6rSy8IyAJafXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYjVm
MmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVmNDNhZTg5NzAvZjFiNDI0ZjUtNTQ0Yi0z
MjI5LThhNzctNDkxMjFiMDdkZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGI1ZjJkYWYtN2Q3YS00ODQ4LWJi
ZDItMDU1ZjQzYWU4OTcwLzBiNWYyZGFmLTdkN2EtNDg0OC1iYmQyLTA1NWY0M2Fl
ODk3MC5jcmwwHwYDVR0jBBgwFoAUMZIFdzydzonOld5Ql69DAR5Wb+IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYjVmMmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVm
NDNhZTg5NzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreBaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALFl4LAYfwBMb16FLSwlDvpLiJBtqNQy5nWWyxeQVpJXN90anH5Dv2bF
Qr7IP4+IxYQ78wZeZm7CJBzMR+l74jI5hBXnPexJVva2ymYwy6kxocZ3CQBQRb3Y
r4yAou4OetzoDf56GvJTz7sJb4lbs3EYpJ63TgqKiB56ps9xkKVi/fUivnLNjtO8
ssus1UO2srmcQL4up37DoMalhbixJme/N+0gFktLY+1+m90/QsWUhe4skdGhXSqU
TFkSMeW21X6OFqX6QjNcjjD3nHZH57L7SW+4Fn6hb82Q/wl/TAWU4nmRBLR6tYjH
dvn/mvOK/XsiXyD4VXKqnDvISlOtxfM=
-----END CERTIFICATE-----
Generated at Wed Jun 18 10:09:48 2025 by rpki-client