Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/0733e398-7546-3dbf-889c-68734c1610fc.roa
File:                     0733e398-7546-3dbf-889c-68734c1610fc.roa (raw, json)
Hash identifier:          rLXAjnxI0sC9/+XcD5ltC16XjTlaEh+Afvhtu/M+IcE=
Subject key identifier:   9B:31:66:D1:97:71:35:50:36:AD:04:C0:0F:97:E4:D2:BC:61:5B:F2
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F43285849DC8FB8C62DAA454703B75580
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/0733e398-7546-3dbf-889c-68734c1610fc.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        168.151.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b8:c6:2d:aa:45:47:03:b7:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=500bb574-a5bf-4d39-813f-5741be0ef680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c4:23:fb:f9:2f:bd:a2:2a:7b:3b:85:92:f0:
                    20:4a:d8:57:22:ba:02:02:d7:17:02:f4:ab:1b:b5:
                    74:aa:e8:eb:ba:e9:21:63:42:51:ba:57:71:12:7c:
                    fd:28:9a:41:94:6c:98:46:f6:a7:ea:d5:83:66:7b:
                    85:ee:ed:3d:46:a4:d4:9f:a2:7b:e9:08:91:31:4a:
                    ca:fc:ab:e7:2c:43:9b:ed:4f:c0:b1:e8:23:a2:07:
                    87:84:15:b4:59:f0:f1:4c:ac:35:b7:2a:db:da:2c:
                    c4:53:47:7b:5e:ab:7c:7a:ba:6e:32:b1:eb:ad:57:
                    33:35:40:95:f2:86:71:fb:74:84:84:54:32:9a:83:
                    b3:ba:10:24:6b:e4:b3:c6:d0:d2:80:ee:18:64:5e:
                    2d:08:f3:4f:09:a6:40:e5:90:09:20:f3:ca:8e:5e:
                    a9:52:a1:59:58:5d:b7:a8:e3:8d:29:24:40:0a:21:
                    16:3f:a0:85:f5:74:81:55:b2:6e:53:99:30:a8:72:
                    ef:07:8b:67:fe:55:7c:eb:84:25:07:1c:71:9f:9f:
                    ce:db:2e:05:a9:85:68:bb:8f:37:13:40:e7:f7:33:
                    d1:13:14:12:06:09:6c:c8:fe:08:bc:47:18:f9:c8:
                    9b:2e:45:ae:5b:80:7c:19:4f:e9:97:b1:9d:1c:34:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:31:66:D1:97:71:35:50:36:AD:04:C0:0F:97:E4:D2:BC:61:5B:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/0733e398-7546-3dbf-889c-68734c1610fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e9:77:d7:3d:40:1f:29:3b:39:92:61:fc:7d:6b:a9:91:5f:
         6c:76:6c:23:7e:ca:d7:56:48:36:42:da:a8:57:b7:3c:bb:75:
         22:50:80:a2:b2:7f:49:99:b7:79:09:de:6e:82:11:7e:6e:fe:
         1b:da:17:a0:19:f3:8c:44:aa:ae:62:0c:53:78:ff:e9:c1:5e:
         46:df:9e:d3:3d:a9:d0:63:87:b2:7c:dd:a3:ea:16:2c:d2:59:
         2e:a3:d2:09:52:be:6d:c2:0b:f6:e7:5f:d4:1d:de:c3:56:3a:
         fd:7c:07:c6:6f:41:97:dd:98:cd:2d:e9:f2:1a:71:39:1d:3b:
         09:64:4f:c1:4d:13:e4:fd:3c:62:51:b9:99:c5:e8:a5:5b:74:
         b6:66:58:4a:99:37:48:87:c3:16:0e:29:29:19:2c:0d:52:d0:
         15:7f:68:2d:7a:50:00:58:d1:e9:79:f0:69:eb:db:7a:91:df:
         4a:70:55:fc:c8:5d:4c:0f:9d:cc:57:b0:65:dc:0d:2b:08:9e:
         ee:f9:ab:53:66:a6:89:a7:49:2c:d0:41:30:52:b9:19:55:72:
         5a:f9:62:aa:f8:0f:b6:d5:7f:ec:aa:20:72:46:00:c4:f7:3b:
         14:45:2d:08:c6:22:a5:48:b0:f7:40:32:d1:c1:1c:f8:74:4f:
         69:c5:4d:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7jGLapFRwO3VYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA1MDQyM2EtYjdhZS00ODc5LWE4ODAtZWEzYmU2ZTE5
M2E4MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
NTAwYmI1NzQtYTViZi00ZDM5LTgxM2YtNTc0MWJlMGVmNjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sQj+/kvvaIqezuFkvAgSthXIroCAtcXAvSr
G7V0qujruukhY0JRuldxEnz9KJpBlGyYRvan6tWDZnuF7u09RqTUn6J76QiRMUrK
/KvnLEOb7U/AsegjogeHhBW0WfDxTKw1tyrb2izEU0d7Xqt8erpuMrHrrVczNUCV
8oZx+3SEhFQymoOzuhAka+SzxtDSgO4YZF4tCPNPCaZA5ZAJIPPKjl6pUqFZWF23
qOONKSRACiEWP6CF9XSBVbJuU5kwqHLvB4tn/lV864QlBxxxn5/O2y4FqYVou483
E0Dn9zPRExQSBglsyP4IvEcY+cibLkWuW4B8GU/pl7GdHDSfJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJsxZtGXcTVQNq0EwA+X5NK8YVvyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUw
NDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNiZTZlMTkzYTgvMDczM2UzOTgtNzU0Ni0z
ZGJmLTg4OWMtNjg3MzRjMTYxMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA1MDQyM2EtYjdhZS00ODc5LWE4
ODAtZWEzYmU2ZTE5M2E4LzkwNTA0MjNhLWI3YWUtNDg3OS1hODgwLWVhM2JlNmUx
OTNhOC5jcmwwHwYDVR0jBBgwFoAU58VCXqDfM4B3q4C4MBhJU0KltnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUwNDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNi
ZTZlMTkzYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJcKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPpd9c9QB8pOzmSYfx9a6mRX2x2bCN+ytdWSDZC2qhXtzy7dSJQgKKy
f0mZt3kJ3m6CEX5u/hvaF6AZ84xEqq5iDFN4/+nBXkbfntM9qdBjh7J83aPqFizS
WS6j0glSvm3CC/bnX9Qd3sNWOv18B8ZvQZfdmM0t6fIacTkdOwlkT8FNE+T9PGJR
uZnF6KVbdLZmWEqZN0iHwxYOKSkZLA1S0BV/aC16UABY0el58Gnr23qR30pwVfzI
XUwPncxXsGXcDSsInu75q1NmpomnSSzQQTBSuRlVclr5Yqr4D7bVf+yqIHJGAMT3
OxRFLQjGIqVIsPdAMtHBHPh0T2nFTZ8=
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:59:40 2025 by rpki-client