Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/e11b8ea1-8d75-3b5a-b242-47acaf607545.roa
File:                     e11b8ea1-8d75-3b5a-b242-47acaf607545.roa (raw, json)
Hash identifier:          hrJ+0lr5qvc03nQI5f4qm9kWyzB6xtxgNbYnHDPf3Pk=
Subject key identifier:   49:21:DE:51:52:F7:6F:7D:91:ED:DA:5F:CB:DE:83:73:FF:C3:50:90
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285849A4B9F0A6E19E791359195E00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/e11b8ea1-8d75-3b5a-b242-47acaf607545.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     14813
IP address blocks:        69.73.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:b9:f0:a6:e1:9e:79:13:59:19:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=4dda3b30-80f2-4201-9b9a-8c1342417e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:4c:e4:a3:7f:0b:66:24:a4:b6:c0:63:ee:
                    ca:70:5d:9e:0b:52:05:f9:f4:4c:79:59:fa:d9:2e:
                    3e:b5:8e:ec:40:32:b2:01:1a:0d:fd:26:30:12:a9:
                    e5:7b:49:1a:59:3b:df:3c:18:14:43:fa:29:b7:1d:
                    fd:41:88:85:0b:34:f7:c1:81:1d:6e:ad:e3:18:1c:
                    02:d4:66:bb:ff:dd:41:6f:52:31:40:ea:4f:86:68:
                    28:d6:04:54:55:15:32:50:dc:19:cd:bf:7d:ae:d6:
                    78:d7:a2:b1:ab:22:a4:59:fc:0f:52:a0:17:63:d4:
                    3c:46:4f:64:1f:77:9f:e6:ad:35:68:ef:0b:c5:62:
                    a4:9f:e2:3d:32:8e:a7:60:ab:ca:93:0f:0b:ed:df:
                    fb:7d:82:d0:de:30:cd:bb:42:b1:a9:fc:3c:c3:63:
                    c8:67:73:9c:a0:ab:e5:80:01:f0:39:00:01:f7:f8:
                    d8:a0:cc:59:23:b4:2f:ee:fb:c5:32:80:80:4e:a0:
                    c5:5e:fb:2d:46:68:d3:63:b8:ea:9d:f9:dd:94:38:
                    64:7c:e2:43:ef:93:29:83:ca:98:c4:a1:68:7a:7d:
                    9b:e1:da:cb:6c:3c:ec:e1:da:f3:fd:f7:1c:f6:e9:
                    99:cc:e9:61:61:f7:3a:d5:f6:9b:79:b5:18:9c:f5:
                    b1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:21:DE:51:52:F7:6F:7D:91:ED:DA:5F:CB:DE:83:73:FF:C3:50:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/e11b8ea1-8d75-3b5a-b242-47acaf607545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:83:7a:92:c5:d1:f6:0b:36:75:71:16:77:2b:fe:7f:43:f3:
         11:87:1f:ea:62:08:9c:79:43:28:47:c1:f8:31:ce:04:30:fd:
         15:51:72:8a:6a:57:01:14:b9:65:7b:98:6c:3f:4a:54:78:44:
         97:2d:ab:5c:f7:9f:96:67:bc:78:5a:96:6d:d6:b9:98:64:66:
         a5:96:d9:04:64:65:6c:0b:ca:dc:da:78:9c:9d:e8:97:85:1e:
         c4:af:76:db:fe:af:49:65:2e:63:47:18:59:ce:eb:58:c3:67:
         05:c0:97:df:35:6a:d6:c3:37:39:ff:dd:5c:4a:cb:4f:97:6c:
         e2:03:19:06:3d:d4:00:3b:b0:52:fa:02:ba:23:27:d9:b4:83:
         17:70:e2:0e:17:19:c6:a9:18:2a:25:81:4a:17:39:43:c1:a6:
         21:93:91:c8:c8:9c:98:83:77:c3:6e:2a:b1:d9:fa:9c:40:c6:
         84:ba:66:24:ea:a7:e7:1e:0d:0f:a7:24:dc:b0:73:ad:77:43:
         bd:d5:42:ef:b1:85:65:30:b1:99:09:38:d6:22:ce:d3:26:56:
         ef:04:4b:fe:64:98:34:38:ab:0c:71:91:b3:fa:9e:c7:81:22:
         fb:e4:f5:44:b1:14:a9:4f:c5:2e:41:bf:06:45:ff:4e:82:a0:
         3a:93:3c:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufCm4Z55E1kZXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NGRkYTNiMzAtODBmMi00MjAxLTliOWEtOGMxMzQyNDE3ZTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxNM5KN/C2YkpLbAY+7KcF2eC1IF+fRMeVn6
2S4+tY7sQDKyARoN/SYwEqnle0kaWTvfPBgUQ/optx39QYiFCzT3wYEdbq3jGBwC
1Ga7/91Bb1IxQOpPhmgo1gRUVRUyUNwZzb99rtZ416KxqyKkWfwPUqAXY9Q8Rk9k
H3ef5q01aO8LxWKkn+I9Mo6nYKvKkw8L7d/7fYLQ3jDNu0Kxqfw8w2PIZ3OcoKvl
gAHwOQAB9/jYoMxZI7Qv7vvFMoCATqDFXvstRmjTY7jqnfndlDhkfOJD75Mpg8qY
xKFoen2b4drLbDzs4drz/fcc9umZzOlhYfc61fabebUYnPWxQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkh3lFS9299ke3aX8veg3P/w1CQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvZTExYjhlYTEtOGQ3NS0z
YjVhLWIyNDItNDdhY2FmNjA3NTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUnVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ+DepLF0fYLNnVxFncr/n9D8xGHH+piCJx5QyhHwfgxzgQw/RVRcopq
VwEUuWV7mGw/SlR4RJctq1z3n5ZnvHhalm3WuZhkZqWW2QRkZWwLytzaeJyd6JeF
HsSvdtv+r0llLmNHGFnO61jDZwXAl981atbDNzn/3VxKy0+XbOIDGQY91AA7sFL6
ArojJ9m0gxdw4g4XGcapGColgUoXOUPBpiGTkcjInJiDd8NuKrHZ+pxAxoS6ZiTq
p+ceDQ+nJNywc613Q73VQu+xhWUwsZkJONYiztMmVu8ES/5kmDQ4qwxxkbP6nseB
Ivvk9USxFKlPxS5BvwZF/06CoDqTPKw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:42:33 2025 by rpki-client