Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/290cc34d-dc8d-39a9-b35e-a492b18459d0.roa
File:                     290cc34d-dc8d-39a9-b35e-a492b18459d0.roa (raw, json)
Hash identifier:          DiCnD4WGQ+xqrO0bnWvMRiXHqywbH3lCaIFzeIdKGD0=
Subject key identifier:   14:B7:3B:14:A0:F0:6A:F6:2D:0D:31:26:4F:5E:63:C0:70:DF:95:A1
Certificate issuer:       /CN=6e005a51-3e55-4f51-b393-eb9918255f3f
Certificate serial:       010D0C9F432858498E6489FE64C8516250169FC0
Authority key identifier: 7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/290cc34d-dc8d-39a9-b35e-a492b18459d0.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     400817
IP address blocks:        199.58.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:89:fe:64:c8:51:62:50:16:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e005a51-3e55-4f51-b393-eb9918255f3f
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=529faf35-2733-4645-8832-5509b12a053e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:16:03:47:47:32:da:24:87:2a:9f:93:6f:
                    24:06:98:13:73:07:1f:a4:e3:29:4c:bb:1c:6b:3a:
                    d9:d1:56:4c:f5:d9:db:5b:65:01:a0:a3:66:77:47:
                    79:be:17:56:e1:a5:09:6a:c7:a4:ff:4b:9c:5e:32:
                    35:07:99:25:4d:a4:4b:11:a4:05:46:75:0b:3d:60:
                    e0:f2:27:ff:58:ff:ba:85:ec:a8:90:06:1d:28:2d:
                    4f:8c:55:8a:66:17:c9:fe:56:0c:93:95:eb:2d:0b:
                    14:9f:11:98:a7:80:34:06:3e:2e:ec:1b:61:cd:01:
                    e7:f1:11:5f:4e:57:4f:73:75:c6:31:a9:ac:57:f7:
                    b9:dd:11:af:94:84:62:1e:76:af:95:58:66:0a:52:
                    7a:6d:47:d1:38:97:72:eb:61:21:6b:63:ce:0a:6b:
                    28:99:d0:2c:01:14:7b:a7:ff:f8:cb:bb:ed:1c:c8:
                    32:7b:7f:7e:69:63:9d:7b:7a:e5:98:5c:50:32:4d:
                    ed:f2:a6:9d:f1:48:75:ca:84:06:fb:7c:74:c1:1b:
                    04:bf:f9:32:c2:e3:f2:7c:71:e7:9d:cf:82:c5:ac:
                    30:da:57:e7:3a:54:b1:26:56:6a:02:40:ac:3c:97:
                    d2:64:6b:65:26:55:49:e7:66:40:96:cf:03:3a:75:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B7:3B:14:A0:F0:6A:F6:2D:0D:31:26:4F:5E:63:C0:70:DF:95:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/290cc34d-dc8d-39a9-b35e-a492b18459d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl

            X509v3 Authority Key Identifier:
                keyid:7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c4:b4:99:be:86:33:63:41:3a:05:81:15:21:f0:48:b1:f4:
         c0:c7:7b:df:90:4e:fc:e5:26:5a:c7:43:61:5f:ea:24:b9:12:
         cd:d4:6d:31:b3:20:e2:45:d9:ca:c4:49:5f:18:8a:7f:85:70:
         e0:34:66:ef:7d:6e:6c:ff:49:fe:b6:30:c4:99:e2:f8:7d:a1:
         db:02:fc:bc:16:57:2f:de:0d:3d:e6:72:3d:3f:e7:99:41:1f:
         90:e2:9f:a8:4f:7e:9c:bc:c8:ce:0a:77:24:22:29:f8:ba:01:
         72:4b:8b:74:9d:a0:0b:37:d5:87:38:53:6e:f6:54:41:fc:c7:
         d9:9d:17:61:b4:70:2c:7d:41:fc:b1:82:97:72:63:7f:44:f5:
         e2:0f:7a:6c:d3:66:8d:0f:95:40:f8:6a:03:0f:85:12:76:68:
         de:fe:f9:9c:88:23:36:21:46:3a:97:d9:e9:a2:98:b4:4f:cb:
         72:1c:c0:e8:cd:c5:a8:d1:5a:62:9e:cb:7f:0c:df:c0:cb:33:
         61:c3:0b:48:a9:fa:da:5c:3f:40:75:52:5b:01:3e:e3:c1:ca:
         15:c9:57:7a:56:50:7e:fb:5f:9d:cf:02:29:9e:3e:68:f1:c4:
         45:05:ec:fa:c9:ae:95:33:4c:ec:86:41:b9:7e:ae:c2:b2:ed:
         e8:85:4f:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIn+ZMhRYlAWn8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUwMDVhNTEtM2U1NS00ZjUxLWIzOTMtZWI5OTE4MjU1
ZjNmMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk
NTI5ZmFmMzUtMjczMy00NjQ1LTg4MzItNTUwOWIxMmEwNTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFkWA0dHMtokhyqfk28kBpgTcwcfpOMpTLsc
azrZ0VZM9dnbW2UBoKNmd0d5vhdW4aUJasek/0ucXjI1B5klTaRLEaQFRnULPWDg
8if/WP+6heyokAYdKC1PjFWKZhfJ/lYMk5XrLQsUnxGYp4A0Bj4u7BthzQHn8RFf
TldPc3XGMamsV/e53RGvlIRiHnavlVhmClJ6bUfROJdy62Eha2POCmsomdAsARR7
p//4y7vtHMgye39+aWOde3rlmFxQMk3t8qad8Uh1yoQG+3x0wRsEv/kywuPyfHHn
nc+Cxaww2lfnOlSxJlZqAkCsPJfSZGtlJlVJ52ZAls8DOnXVzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBS3OxSg8Gr2LQ0xJk9eY8Bw35WhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTAw
NWE1MS0zZTU1LTRmNTEtYjM5My1lYjk5MTgyNTVmM2YvMjkwY2MzNGQtZGM4ZC0z
OWE5LWIzNWUtYTQ5MmIxODQ1OWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmUwMDVhNTEtM2U1NS00ZjUxLWIz
OTMtZWI5OTE4MjU1ZjNmLzZlMDA1YTUxLTNlNTUtNGY1MS1iMzkzLWViOTkxODI1
NWYzZi5jcmwwHwYDVR0jBBgwFoAUf6XhVGyl0nPxEzVBNJ49rg/sa/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTAwNWE1MS0zZTU1LTRmNTEtYjM5My1lYjk5
MTgyNTVmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACLEtJm+hjNjQToFgRUh8Eix9MDHe9+QTvzlJlrHQ2Ff6iS5Es3UbTGz
IOJF2crESV8Yin+FcOA0Zu99bmz/Sf62MMSZ4vh9odsC/LwWVy/eDT3mcj0/55lB
H5Din6hPfpy8yM4KdyQiKfi6AXJLi3SdoAs31Yc4U272VEH8x9mdF2G0cCx9Qfyx
gpdyY39E9eIPemzTZo0PlUD4agMPhRJ2aN7++ZyIIzYhRjqX2emimLRPy3IcwOjN
xajRWmKey38M38DLM2HDC0ip+tpcP0B1UlsBPuPByhXJV3pWUH77X53PAimePmjx
xEUF7PrJrpUzTOyGQbl+rsKy7eiFT9A=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:07:41 2025 by rpki-client