Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8163403f-0b2f-351e-9f96-249b84f23fcb.roa
File:                     8163403f-0b2f-351e-9f96-249b84f23fcb.roa (raw, json)
Hash identifier:          RL26heJ+zwWSxH9Pw/NvjU3n1APVoUIDihqHPpe+kSU=
Subject key identifier:   61:41:4A:5A:6F:36:07:ED:AF:E6:50:0B:A2:C6:46:5B:98:68:48:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FF0B7C9E19581A6B7DB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8163403f-0b2f-351e-9f96-249b84f23fcb.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        76.144.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:f0:b7:c9:e1:95:81:a6:b7:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=da3a08bc-3d14-489a-834c-8f24dc1eb361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:19:a8:5c:70:95:56:05:a5:91:4f:05:5e:20:
                    1d:81:95:2c:0d:54:f0:1b:78:a6:a3:06:65:e9:b2:
                    36:cb:4d:23:6a:aa:b5:7d:15:d7:12:ab:df:21:5f:
                    5c:43:d5:00:a0:2f:5b:b6:71:17:ee:84:c0:6e:dc:
                    7a:d6:41:2d:4e:aa:1f:0f:9d:9d:a4:ff:6d:b5:b3:
                    7d:d0:0f:de:b1:94:af:3d:ca:00:bf:4c:24:dd:46:
                    74:ba:e0:03:18:a2:9c:bb:80:ff:72:00:b5:58:31:
                    29:73:fe:5b:4d:b3:db:7f:cf:25:55:80:58:04:9a:
                    35:84:5c:a5:a0:3f:eb:40:62:b2:12:ff:58:41:37:
                    b1:c7:93:89:63:76:3c:00:30:4d:df:89:74:0a:ab:
                    3e:15:95:67:23:6e:c9:6b:87:16:e8:c6:b2:8e:95:
                    e3:c2:fe:d0:29:92:80:ae:3b:7b:0e:c0:d6:18:dc:
                    fd:c0:20:97:ce:c9:f0:3a:59:37:10:32:54:f2:76:
                    c8:76:f5:eb:55:f1:4e:e4:15:d3:bc:cb:8f:d4:15:
                    10:f7:08:77:07:b7:66:07:9d:7f:af:a0:1f:44:3d:
                    a7:6c:97:21:d8:8f:c6:3d:8e:52:a6:f4:33:17:60:
                    f4:f0:f5:7a:2c:22:6f:bc:83:99:fd:46:f9:53:6b:
                    07:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:41:4A:5A:6F:36:07:ED:AF:E6:50:0B:A2:C6:46:5B:98:68:48:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8163403f-0b2f-351e-9f96-249b84f23fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.144.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c3:43:c6:95:db:cf:ec:04:f9:a8:e3:cd:e4:ac:de:9c:2c:
         26:b8:fd:b8:d2:23:b3:3c:19:de:c2:d1:55:9e:aa:a2:c3:37:
         5d:5e:8d:86:41:53:6f:db:79:9a:22:59:10:9a:1a:0e:24:8b:
         36:18:76:e2:08:3e:69:01:11:6f:d0:24:f3:a9:af:15:ed:77:
         09:d0:e7:50:c6:be:3b:f1:20:9b:64:b4:37:a2:ea:c1:15:63:
         f7:9f:bf:7e:c0:9b:35:00:2b:74:ca:c6:9d:24:82:59:4d:f5:
         d8:9b:13:58:07:52:89:e7:79:ac:b0:7f:b2:4d:52:d9:ca:20:
         14:0a:99:45:1f:0e:c5:eb:ab:0e:81:aa:51:57:d0:54:c4:74:
         35:af:15:a4:b4:fe:a6:04:42:ea:87:f4:c7:82:ec:f5:6b:a3:
         49:75:f8:13:6f:8b:9a:39:28:44:c8:1b:5f:7d:08:a5:84:6b:
         a0:f0:46:74:27:8b:59:0c:ab:ae:46:1d:f0:81:3f:48:1a:f8:
         ff:7e:b9:60:5d:9a:5f:0d:c6:77:41:3f:db:d7:72:da:8f:2d:
         c8:3d:9c:c9:cc:e8:19:c3:19:44:01:c4:0d:1f:c7:4a:2f:c3:
         f4:af:ac:f6:6e:3c:64:a5:77:52:37:76:db:0e:ac:4d:96:08:
         e2:a1:90:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL/C3yeGVgaa32wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
ZGEzYTA4YmMtM2QxNC00ODlhLTgzNGMtOGYyNGRjMWViMzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxmoXHCVVgWlkU8FXiAdgZUsDVTwG3imowZl
6bI2y00jaqq1fRXXEqvfIV9cQ9UAoC9btnEX7oTAbtx61kEtTqofD52dpP9ttbN9
0A/esZSvPcoAv0wk3UZ0uuADGKKcu4D/cgC1WDEpc/5bTbPbf88lVYBYBJo1hFyl
oD/rQGKyEv9YQTexx5OJY3Y8ADBN34l0Cqs+FZVnI27Ja4cW6MayjpXjwv7QKZKA
rjt7DsDWGNz9wCCXzsnwOlk3EDJU8nbIdvXrVfFO5BXTvMuP1BUQ9wh3B7dmB51/
r6AfRD2nbJch2I/GPY5SpvQzF2D08PV6LCJvvIOZ/Ub5U2sHrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGFBSlpvNgftr+ZQC6LGRluYaEhUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODE2MzQwM2YtMGIyZi0z
NTFlLTlmOTYtMjQ5Yjg0ZjIzZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJDWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvDQ8aV28/sBPmo483krN6cLCa4/bjSI7M8Gd7C0VWeqqLDN11ejYZB
U2/beZoiWRCaGg4kizYYduIIPmkBEW/QJPOprxXtdwnQ51DGvjvxIJtktDei6sEV
Y/efv37AmzUAK3TKxp0kgllN9dibE1gHUonneaywf7JNUtnKIBQKmUUfDsXrqw6B
qlFX0FTEdDWvFaS0/qYEQuqH9MeC7PVro0l1+BNvi5o5KETIG199CKWEa6DwRnQn
i1kMq65GHfCBP0ga+P9+uWBdml8NxndBP9vXctqPLcg9nMnM6BnDGUQBxA0fx0ov
w/SvrPZuPGSld1I3dtsOrE2WCOKhkCM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:12:56 2025 by rpki-client