Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/5280a665-c90c-33ed-932d-de71f12512e9.roa
File:                     5280a665-c90c-33ed-932d-de71f12512e9.roa (raw, json)
Hash identifier:          99Tz4iAZ74cEMtuEpURYuvhC9d1mIbJj6pFJ3NQ64as=
Subject key identifier:   B4:C4:1D:46:01:B2:CF:FC:CE:32:C2:50:92:2B:40:92:4D:13:29:46
Certificate issuer:       /CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Certificate serial:       010D0C9F43285849E7BA7FF52669E831FC78BF00
Authority key identifier: 1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/5280a665-c90c-33ed-932d-de71f12512e9.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     19151
IP address blocks:        172.110.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:7f:f5:26:69:e8:31:fc:78:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=ce5a02e1-5d77-4a04-8b55-41bd9a194b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:db:4e:e8:4e:53:1a:65:1b:e6:90:ee:db:
                    a3:46:89:c8:c1:e5:fe:a6:68:f7:a2:74:69:8d:c1:
                    f6:0a:6b:65:07:0b:7a:67:c7:f2:18:f8:00:8a:97:
                    39:c6:17:08:8d:c0:aa:9f:44:f2:06:a9:d9:e1:71:
                    52:44:f8:3e:44:cf:ef:fe:65:fd:40:13:aa:49:98:
                    71:a6:fb:58:48:44:34:54:57:5b:13:04:68:87:25:
                    65:66:ec:5b:14:94:0d:0c:a1:29:fc:d0:48:78:f0:
                    19:e0:2b:10:53:3c:7b:2e:ad:0c:7f:34:eb:13:6f:
                    65:25:a6:19:76:0b:97:af:04:ea:dc:e7:b6:a4:59:
                    ed:e7:c8:a6:a1:99:2c:6b:97:69:c4:48:1c:f8:5e:
                    a0:ab:67:41:ac:b4:11:57:3f:d3:a4:67:4d:3a:cf:
                    87:bc:ea:d5:0e:6c:c3:e7:10:be:f3:59:66:8e:7f:
                    68:0c:86:08:1b:6b:7c:e9:2e:8d:a8:c7:15:44:ae:
                    f0:8f:cc:3a:5f:54:de:41:57:19:2d:ba:60:4f:10:
                    3d:89:e6:31:a4:bd:0d:9b:6f:39:14:30:11:08:38:
                    04:a2:39:9c:fa:91:2c:22:a2:f3:09:85:8c:7a:d9:
                    66:f6:2d:9e:1a:09:cd:0c:7d:6f:e6:cf:b8:58:d0:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C4:1D:46:01:B2:CF:FC:CE:32:C2:50:92:2B:40:92:4D:13:29:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/5280a665-c90c-33ed-932d-de71f12512e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl

            X509v3 Authority Key Identifier:
                keyid:1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:a3:f1:ee:74:f8:d2:b7:43:4c:ad:86:81:72:79:6e:b0:f6:
         41:47:4b:6d:5b:12:73:bb:d9:ef:62:4d:45:9d:5e:9f:b9:cb:
         f8:54:79:5b:26:25:c7:ac:a1:bf:8d:6b:39:b2:d0:16:41:a9:
         d1:ab:11:93:6a:4c:d2:c7:fd:95:0b:c4:4a:be:a2:c8:3d:f6:
         39:d9:be:9a:38:2a:e7:1f:0c:28:45:a4:df:a1:6a:da:fe:48:
         46:1f:2f:21:fc:a0:bf:da:c0:42:51:9a:1a:7f:8b:51:7f:66:
         f5:e6:47:fe:90:25:13:dd:6f:c4:7c:bc:2f:00:5e:a5:2a:a8:
         af:e7:79:81:b1:fb:c8:20:28:79:31:1b:13:ad:54:7b:20:6f:
         a8:17:b8:9c:2c:bd:a3:75:a4:ef:cc:ba:0b:f4:d4:8e:4e:1b:
         26:47:eb:47:27:19:a2:5b:e1:1d:85:db:84:fe:c7:64:e5:56:
         b1:bd:6b:94:c4:91:b5:ea:5b:c5:16:9c:1f:d6:b3:a2:de:af:
         2c:db:f2:97:45:85:60:86:50:39:62:be:70:38:5a:91:39:59:
         10:75:ac:cc:9a:2a:ec:bf:a4:d7:0d:42:71:cc:12:2b:da:ff:
         f8:c0:80:08:6d:83:9e:f0:13:26:3c:56:69:a8:5e:5b:ed:d1:
         6c:f2:0a:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnun/1JmnoMfx4vwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdmNDI2YmMtZTAxNi00ZTMxLTg0MjQtYmM3Y2I4NmE4
MDhlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
Y2U1YTAyZTEtNWQ3Ny00YTA0LThiNTUtNDFiZDlhMTk0YjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsTbTuhOUxplG+aQ7tujRonIweX+pmj3onRp
jcH2CmtlBwt6Z8fyGPgAipc5xhcIjcCqn0TyBqnZ4XFSRPg+RM/v/mX9QBOqSZhx
pvtYSEQ0VFdbEwRohyVlZuxbFJQNDKEp/NBIePAZ4CsQUzx7Lq0MfzTrE29lJaYZ
dguXrwTq3Oe2pFnt58imoZksa5dpxEgc+F6gq2dBrLQRVz/TpGdNOs+HvOrVDmzD
5xC+81lmjn9oDIYIG2t86S6NqMcVRK7wj8w6X1TeQVcZLbpgTxA9ieYxpL0Nm285
FDARCDgEojmc+pEsIqLzCYWMetlm9i2eGgnNDH1v5s+4WNDVSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLTEHUYBss/8zjLCUJIrQJJNEylGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hN2Y0
MjZiYy1lMDE2LTRlMzEtODQyNC1iYzdjYjg2YTgwOGUvNTI4MGE2NjUtYzkwYy0z
M2VkLTkzMmQtZGU3MWYxMjUxMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTdmNDI2YmMtZTAxNi00ZTMxLTg0
MjQtYmM3Y2I4NmE4MDhlL2E3ZjQyNmJjLWUwMTYtNGUzMS04NDI0LWJjN2NiODZh
ODA4ZS5jcmwwHwYDVR0jBBgwFoAUGw6WAE4CF+OdBPmjHZ7ZA+pr0HEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hN2Y0MjZiYy1lMDE2LTRlMzEtODQyNC1iYzdj
Yjg2YTgwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG4vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaj8e50+NK3Q0ythoFyeW6w9kFHS21bEnO72e9iTUWdXp+5y/hUeVsm
Jcesob+Nazmy0BZBqdGrEZNqTNLH/ZULxEq+osg99jnZvpo4KucfDChFpN+hatr+
SEYfLyH8oL/awEJRmhp/i1F/ZvXmR/6QJRPdb8R8vC8AXqUqqK/neYGx+8ggKHkx
GxOtVHsgb6gXuJwsvaN1pO/Mugv01I5OGyZH60cnGaJb4R2F24T+x2TlVrG9a5TE
kbXqW8UWnB/Ws6Leryzb8pdFhWCGUDlivnA4WpE5WRB1rMyaKuy/pNcNQnHMEiva
//jAgAhtg57wEyY8VmmoXlvt0WzyCno=
-----END CERTIFICATE-----
Generated at Tue Jun 17 17:59:15 2025 by rpki-client