Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/3048f25b-01bb-3ce6-a347-f94feaca53ce.roa
File:                     3048f25b-01bb-3ce6-a347-f94feaca53ce.roa (raw, json)
Hash identifier:          Q/y7ucphCsCcvRhW430fSuZiNuAdIMp9FYkkTtuJTSs=
Subject key identifier:   33:68:5A:AB:E4:8C:CC:DA:6B:43:A0:40:59:1D:34:75:5E:CA:10:33
Certificate issuer:       /CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
Certificate serial:       010D0C9F432858499829D2B56019C35B84288F80
Authority key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/3048f25b-01bb-3ce6-a347-f94feaca53ce.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     54885
IP address blocks:        192.102.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:d2:b5:60:19:c3:5b:84:28:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=304f4d17-71e0-4cc1-81c4-0a247f873754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:bd:d0:30:90:de:df:52:a6:49:2d:78:0b:
                    a9:45:63:cb:9e:1f:18:86:9d:03:41:d5:90:f3:16:
                    f9:b7:31:31:fd:44:c0:41:ae:e6:1b:6b:0b:de:97:
                    02:41:2b:8b:b1:60:0e:9c:fc:dd:5b:55:67:54:05:
                    05:5f:f4:26:de:4d:27:49:e3:c6:d2:b3:72:86:c5:
                    4f:5b:4b:18:0f:3c:5c:ee:70:96:4d:28:de:61:ed:
                    c9:d9:20:61:2c:26:38:ed:39:d3:51:e8:a2:3e:58:
                    2c:cc:ce:7a:a9:d7:64:04:f5:8c:06:f3:ca:15:8e:
                    a4:2d:23:ab:6e:04:54:92:d3:6e:60:0b:c2:f4:3d:
                    6b:6b:6e:79:04:be:a8:37:0b:43:2a:86:75:b7:58:
                    d4:a5:dd:d3:c8:0f:6a:b1:31:89:44:3c:18:4e:7b:
                    44:a9:a5:d1:85:28:b1:2a:8b:e1:82:76:19:ea:44:
                    a7:76:0a:3f:be:55:c9:f7:ff:b6:6f:49:9a:d2:5c:
                    fa:c0:0e:b5:d7:5e:d1:d0:40:92:1f:19:37:33:ab:
                    25:6c:ec:b6:89:eb:8c:76:b4:34:22:64:44:30:e6:
                    ea:80:d9:97:50:d4:ce:11:d8:33:13:20:0e:ad:2c:
                    48:d4:de:c1:f6:7f:7c:c2:9d:00:b5:0d:69:97:15:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:68:5A:AB:E4:8C:CC:DA:6B:43:A0:40:59:1D:34:75:5E:CA:10:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/3048f25b-01bb-3ce6-a347-f94feaca53ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:13:8e:58:5d:2a:a5:35:cf:77:cb:79:91:bd:d5:1c:91:35:
         5c:ec:79:44:43:2b:4e:65:7c:45:aa:2b:37:34:54:94:ed:90:
         fe:7a:8e:47:4f:48:71:e4:c6:14:65:ae:bc:0c:2f:11:4e:ba:
         e7:ca:d2:f7:3b:56:73:46:b9:c6:63:42:2a:48:a1:c3:d5:92:
         15:e4:69:6d:29:c5:fd:30:21:16:fe:c3:50:04:2e:08:1e:bb:
         b6:05:5c:d3:0f:e7:fb:41:3d:cd:3b:b2:12:1e:9a:ea:4f:17:
         50:c5:34:30:6e:0a:20:56:c1:4b:c5:c2:53:c2:99:3a:91:ac:
         ac:68:89:82:c6:df:16:dd:75:b2:2e:63:05:03:a8:55:67:eb:
         7c:b4:d4:cd:69:0e:bd:99:71:8c:11:8f:7d:eb:16:58:81:55:
         87:a8:c8:b0:d1:7e:bb:03:94:5f:ff:0a:15:d4:98:1a:c8:3b:
         21:20:57:81:64:76:38:12:12:a2:08:27:d0:2f:0e:f5:f1:ec:
         49:6d:6c:11:9e:46:09:f2:23:ab:bf:d3:87:5a:a0:fe:a8:03:
         b1:61:d6:53:2a:54:c2:25:e4:28:43:25:3b:37:3b:f3:6d:3b:
         a4:7e:3e:55:27:78:41:75:f4:c4:82:6f:3d:bd:ca:d5:fa:91:
         9a:44:1b:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdK1YBnDW4Qoj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE2MzYxZDItYmNlNy00MDlhLThmMTktZGRkODFhMWY2
MjQ5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk
MzA0ZjRkMTctNzFlMC00Y2MxLTgxYzQtMGEyNDdmODczNzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVK90DCQ3t9SpkkteAupRWPLnh8Yhp0DQdWQ
8xb5tzEx/UTAQa7mG2sL3pcCQSuLsWAOnPzdW1VnVAUFX/Qm3k0nSePG0rNyhsVP
W0sYDzxc7nCWTSjeYe3J2SBhLCY47TnTUeiiPlgszM56qddkBPWMBvPKFY6kLSOr
bgRUktNuYAvC9D1ra255BL6oNwtDKoZ1t1jUpd3TyA9qsTGJRDwYTntEqaXRhSix
KovhgnYZ6kSndgo/vlXJ9/+2b0ma0lz6wA61117R0ECSHxk3M6slbOy2ieuMdrQ0
ImREMObqgNmXUNTOEdgzEyAOrSxI1N7B9n98wp0AtQ1plxW6MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNoWqvkjMzaa0OgQFkdNHVeyhAzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YTYz
NjFkMi1iY2U3LTQwOWEtOGYxOS1kZGQ4MWExZjYyNDkvMzA0OGYyNWItMDFiYi0z
Y2U2LWEzNDctZjk0ZmVhY2E1M2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWE2MzYxZDItYmNlNy00MDlhLThm
MTktZGRkODFhMWY2MjQ5LzlhNjM2MWQyLWJjZTctNDA5YS04ZjE5LWRkZDgxYTFm
NjI0OS5jcmwwHwYDVR0jBBgwFoAU7aJGTlftF2Y9jLAvYYv0eGpLW7kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YTYzNjFkMi1iY2U3LTQwOWEtOGYxOS1kZGQ4
MWExZjYyNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGYQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAETjlhdKqU1z3fLeZG91RyRNVzseURDK05lfEWqKzc0VJTtkP56jkdP
SHHkxhRlrrwMLxFOuufK0vc7VnNGucZjQipIocPVkhXkaW0pxf0wIRb+w1AELgge
u7YFXNMP5/tBPc07shIemupPF1DFNDBuCiBWwUvFwlPCmTqRrKxoiYLG3xbddbIu
YwUDqFVn63y01M1pDr2ZcYwRj33rFliBVYeoyLDRfrsDlF//ChXUmBrIOyEgV4Fk
djgSEqIIJ9AvDvXx7EltbBGeRgnyI6u/04daoP6oA7Fh1lMqVMIl5ChDJTs3O/Nt
O6R+PlUneEF19MSCbz29ytX6kZpEG+A=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:56 2025 by rpki-client