Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa
File:                     e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa (raw, json)
Hash identifier:          BYql7d61XNKoc31Oj3HCjfUd03ycqvM1IXX23wl/E6w=
Subject key identifier:   6A:4A:89:85:B1:47:CD:BA:37:F0:B5:45:C6:D6:8E:95:BB:E1:B0:3D
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F4328584A2ABAE4A257EE89F9F8EFA500
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        170.225.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e4:a2:57:ee:89:f9:f8:ef:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=54df27b8-23a6-445c-858a-fa359c5bc8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:ff:42:6f:5f:df:35:b6:cf:f2:dd:11:14:
                    14:4f:85:f7:fd:32:fd:b0:11:8d:da:8f:e1:79:20:
                    99:4c:32:25:ba:ff:5c:9b:07:05:d4:24:36:a7:bb:
                    ba:02:45:01:39:de:d2:d8:fe:93:05:53:e9:76:f7:
                    c6:42:83:b6:05:82:c9:b0:fb:98:83:d4:2e:23:c5:
                    b3:1d:cd:6e:fd:fd:ea:17:7a:b0:b3:ca:ab:80:5c:
                    15:10:b4:59:e1:4f:a2:5b:2e:f0:d0:96:0e:7b:58:
                    06:f5:f0:e6:a9:ca:f1:3e:28:27:b9:3f:32:8e:22:
                    8c:34:83:56:06:c7:6e:47:59:7a:df:e2:61:80:59:
                    29:d8:21:69:03:0d:7a:27:2a:67:eb:79:02:ba:ef:
                    e2:3e:a8:a6:e0:87:e2:8d:b1:03:8a:ce:61:d3:84:
                    22:40:55:e2:58:75:44:55:48:e6:31:3c:7d:f4:6a:
                    2b:54:fb:e6:f8:76:80:e5:b8:09:2b:32:18:d8:01:
                    91:f0:2f:94:b9:eb:66:f8:b0:a7:23:e3:f5:98:b9:
                    c7:5c:7c:4e:1c:57:cf:d9:e6:39:05:5c:7f:f4:20:
                    9e:94:b1:a7:4d:e4:bf:10:a5:e7:7f:9a:19:21:85:
                    e4:49:a1:b6:e2:e3:07:22:88:f5:25:25:8a:ea:6d:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4A:89:85:B1:47:CD:BA:37:F0:B5:45:C6:D6:8E:95:BB:E1:B0:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.225.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d6:a9:f2:57:ca:bd:38:24:f0:5b:b7:6a:66:68:ad:55:a0:
         b7:58:91:6b:74:4d:df:00:0c:1c:7c:72:fc:f4:9c:e8:49:08:
         64:75:b8:53:3e:69:51:28:8e:c3:83:37:dc:de:46:d4:1c:ff:
         4f:a3:eb:fa:13:23:96:e1:9c:b4:6f:42:77:46:54:26:e0:3c:
         11:66:b9:de:04:dd:22:0f:1c:d4:79:62:e2:65:40:90:13:d1:
         87:2f:42:bf:52:b5:0b:5f:3e:bf:31:e1:ed:94:47:35:7e:e4:
         cd:a6:8e:93:9c:7b:65:88:ca:4a:12:b3:63:34:6b:1d:74:ba:
         06:31:d1:6a:ac:cf:f2:a6:d1:6c:84:68:b6:57:ec:36:f1:78:
         79:88:5b:eb:16:49:00:68:bf:ba:50:39:fd:b3:22:5c:bd:44:
         fb:a9:20:50:a7:15:19:98:60:d9:01:d7:61:3e:ed:73:d2:a2:
         bd:74:0c:99:4d:ec:92:da:18:39:87:79:11:d8:8f:d6:3f:f0:
         90:47:76:f3:73:59:3b:10:d9:f9:8f:8f:03:b7:59:5e:40:54:
         0e:6e:51:d5:63:ba:d7:b0:52:bb:b2:54:69:55:3a:0d:10:41:
         bb:e7:32:11:ca:c2:eb:a7:cc:6d:f8:1a:7f:56:50:cc:db:3f:
         2f:47:03:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuSiV+6J+fjvpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4
Mjc5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
NTRkZjI3YjgtMjNhNi00NDVjLTg1OGEtZmEzNTljNWJjOGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5P/Qm9f3zW2z/LdERQUT4X3/TL9sBGN2o/h
eSCZTDIluv9cmwcF1CQ2p7u6AkUBOd7S2P6TBVPpdvfGQoO2BYLJsPuYg9QuI8Wz
Hc1u/f3qF3qws8qrgFwVELRZ4U+iWy7w0JYOe1gG9fDmqcrxPignuT8yjiKMNINW
BsduR1l63+JhgFkp2CFpAw16Jypn63kCuu/iPqim4IfijbEDis5h04QiQFXiWHVE
VUjmMTx99GorVPvm+HaA5bgJKzIY2AGR8C+Uuetm+LCnI+P1mLnHXHxOHFfP2eY5
BVx/9CCelLGnTeS/EKXnf5oZIYXkSaG24uMHIoj1JSWK6m3X4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGpKiYWxR826N/C1RcbWjpW74bA9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5
N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZTFlNjllYzctMWM5Yi0z
M2NmLTg2MjMtMGNmMzNjNmNmMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5
ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw
ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0
OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAfWqfJXyr04JPBbt2pmaK1VoLdYkWt0Td8ADBx8cvz0nOhJCGR1uFM+
aVEojsODN9zeRtQc/0+j6/oTI5bhnLRvQndGVCbgPBFmud4E3SIPHNR5YuJlQJAT
0YcvQr9StQtfPr8x4e2URzV+5M2mjpOce2WIykoSs2M0ax10ugYx0Wqsz/Km0WyE
aLZX7DbxeHmIW+sWSQBov7pQOf2zIly9RPupIFCnFRmYYNkB12E+7XPSor10DJlN
7JLaGDmHeRHYj9Y/8JBHdvNzWTsQ2fmPjwO3WV5AVA5uUdVjutewUruyVGlVOg0Q
QbvnMhHKwuunzG34Gn9WUMzbPy9HA24=
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:21:50 2025 by rpki-client