Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/e506c216-da6e-32f0-a766-3de241d4b056.roa
File:                     e506c216-da6e-32f0-a766-3de241d4b056.roa (raw, json)
Hash identifier:          r+cgtACEp3+0pYZj3xqmFI2UXX1EChOUAnlCX2WsOjw=
Subject key identifier:   5A:A9:6A:B6:F2:25:75:F0:1C:E7:BA:54:C3:B5:87:B2:73:78:87:FD
Certificate issuer:       /CN=02e3db6d-40b5-4639-a499-a02b80a4befe
Certificate serial:       010D0C9F43285849A784C26BAC18F3E4A427EFC0
Authority key identifier: CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/e506c216-da6e-32f0-a766-3de241d4b056.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     398448
IP address blocks:        162.216.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:c2:6b:ac:18:f3:e4:a4:27:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e3db6d-40b5-4639-a499-a02b80a4befe
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=bed00979-d8eb-4a2c-8811-4c0118cb6f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:0c:c1:ba:46:3d:a6:45:eb:61:5c:97:b7:
                    a4:d2:0a:84:68:77:a7:3d:40:2d:37:10:bc:68:d8:
                    d4:e7:ff:9e:8b:b4:6c:fa:d7:32:22:f2:c4:65:67:
                    72:7b:1f:c3:21:b3:b6:63:14:d3:51:29:e6:e5:47:
                    8f:c1:f9:bf:24:f1:cf:1d:32:b6:ab:49:43:ab:d4:
                    fb:c3:4c:7d:1d:72:7f:b6:f7:22:b3:e9:52:15:09:
                    4b:ea:18:7a:bb:b6:b4:db:ed:1a:aa:3b:23:fd:33:
                    ad:60:6f:79:45:b7:fb:d5:cb:76:db:c4:ec:a8:d3:
                    e8:be:f6:35:83:45:fc:90:e2:b9:c9:0a:fe:78:67:
                    0d:77:c4:cb:ff:fd:d4:37:2e:89:62:5b:90:21:a8:
                    aa:d4:6c:71:19:33:d4:03:93:41:31:ba:44:c0:33:
                    3e:a1:53:e1:1b:d6:a9:6f:6e:a5:1d:e3:67:86:a9:
                    25:26:f3:e0:8a:a7:22:44:b9:b8:44:a9:a7:b6:66:
                    ff:8c:09:be:ca:5d:98:1d:51:45:43:1a:2b:92:36:
                    d7:f7:57:b7:65:6e:f8:88:dd:07:34:e4:7e:6e:39:
                    55:71:e6:81:34:3c:02:a6:2b:5d:29:7a:0e:ec:b0:
                    f9:53:ef:62:62:d1:04:c4:84:ad:a3:62:7c:4c:a4:
                    95:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A9:6A:B6:F2:25:75:F0:1C:E7:BA:54:C3:B5:87:B2:73:78:87:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/e506c216-da6e-32f0-a766-3de241d4b056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.crl

            X509v3 Authority Key Identifier:
                keyid:CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:cf:35:9e:fd:43:ec:5a:11:ba:a3:2f:1a:18:c9:30:4b:ca:
         a3:61:27:b7:b5:2f:73:65:37:1a:02:dc:64:2e:4f:f9:1b:bf:
         0e:af:b7:5d:f5:5b:bb:32:55:32:0e:8b:c6:fb:1e:08:6c:98:
         e1:c7:c5:5a:0b:61:74:61:34:82:2c:20:07:28:d1:16:39:55:
         b3:17:24:28:31:39:60:ff:6d:9c:73:59:44:fe:0e:21:a5:a6:
         3b:36:79:8e:77:65:30:66:ab:04:6b:e7:29:41:f4:c7:47:92:
         2b:ec:72:a3:7b:b9:bf:45:5c:0f:46:be:3f:5b:4d:57:76:2b:
         5d:60:fc:f9:e3:d8:eb:83:a8:e7:90:20:eb:16:ea:e7:33:37:
         2e:45:b7:22:39:61:e6:4e:13:09:0e:c1:7c:f8:e3:fd:b6:2c:
         bd:25:8c:b6:7c:40:ae:ea:b9:7f:a3:b0:d9:bc:59:0e:61:de:
         48:b7:76:ff:72:7a:b9:dd:38:61:06:c7:1a:9f:14:4e:3b:f0:
         fe:55:85:66:3e:99:19:b8:50:ad:5f:d1:a0:c4:a5:28:90:02:
         ac:ce:c6:8a:58:57:08:99:75:09:3d:ca:53:78:c6:78:05:9c:
         3e:50:11:0b:28:58:40:23:bc:12:e3:7a:08:3f:98:85:8a:b9:
         92:8b:ba:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMJrrBjz5KQn78AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDJlM2RiNmQtNDBiNS00NjM5LWE0OTktYTAyYjgwYTRi
ZWZlMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
YmVkMDA5NzktZDhlYi00YTJjLTg4MTEtNGMwMTE4Y2I2ZjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZUMwbpGPaZF62Fcl7ek0gqEaHenPUAtNxC8
aNjU5/+ei7Rs+tcyIvLEZWdyex/DIbO2YxTTUSnm5UePwfm/JPHPHTK2q0lDq9T7
w0x9HXJ/tvcis+lSFQlL6hh6u7a02+0aqjsj/TOtYG95Rbf71ct228TsqNPovvY1
g0X8kOK5yQr+eGcNd8TL//3UNy6JYluQIaiq1GxxGTPUA5NBMbpEwDM+oVPhG9ap
b26lHeNnhqklJvPgiqciRLm4RKmntmb/jAm+yl2YHVFFQxorkjbX91e3ZW74iN0H
NOR+bjlVceaBNDwCpitdKXoO7LD5U+9iYtEExISto2J8TKSV6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFqparbyJXXwHOe6VMO1h7JzeIf9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmUz
ZGI2ZC00MGI1LTQ2MzktYTQ5OS1hMDJiODBhNGJlZmUvZTUwNmMyMTYtZGE2ZS0z
MmYwLWE3NjYtM2RlMjQxZDRiMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDJlM2RiNmQtNDBiNS00NjM5LWE0
OTktYTAyYjgwYTRiZWZlLzAyZTNkYjZkLTQwYjUtNDYzOS1hNDk5LWEwMmI4MGE0
YmVmZS5jcmwwHwYDVR0jBBgwFoAUzGII0y3oa3ErofLAhqi2YpmB77IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wMmUzZGI2ZC00MGI1LTQ2MzktYTQ5OS1hMDJi
ODBhNGJlZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotgbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/PNZ79Q+xaEbqjLxoYyTBLyqNhJ7e1L3NlNxoC3GQuT/kbvw6vt131
W7syVTIOi8b7HghsmOHHxVoLYXRhNIIsIAco0RY5VbMXJCgxOWD/bZxzWUT+DiGl
pjs2eY53ZTBmqwRr5ylB9MdHkivscqN7ub9FXA9Gvj9bTVd2K11g/Pnj2OuDqOeQ
IOsW6uczNy5FtyI5YeZOEwkOwXz44/22LL0ljLZ8QK7quX+jsNm8WQ5h3ki3dv9y
erndOGEGxxqfFE478P5VhWY+mRm4UK1f0aDEpSiQAqzOxopYVwiZdQk9ylN4xngF
nD5QEQsoWEAjvBLjegg/mIWKuZKLujg=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:38 2025 by rpki-client