Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/9a9fe228-0c29-3c72-b8c4-fb20f31baca9.roa
File:                     9a9fe228-0c29-3c72-b8c4-fb20f31baca9.roa (raw, json)
Hash identifier:          Z/4hHa4hMWYt3PxcRPKmZEzO1hT/VZnVMqfvR2/VtJ8=
Subject key identifier:   39:CA:63:12:3E:14:B5:A3:DE:2D:F3:DE:7B:4C:CB:15:00:5D:26:15
Certificate issuer:       /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial:       010D0C9F43285849FF751BAB91CCFA156EF4E080
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/9a9fe228-0c29-3c72-b8c4-fb20f31baca9.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     54334
IP address blocks:        198.133.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:1b:ab:91:cc:fa:15:6e:f4:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=ccc99c2b-0539-4a7c-bb0d-2b15d95792c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:62:0c:09:23:d7:2d:78:50:94:0b:de:84:
                    dc:69:5e:b5:da:6a:0c:df:aa:75:82:07:1d:be:99:
                    6b:b9:a5:04:68:e9:5d:ac:c9:d0:81:71:4c:a2:da:
                    6d:d7:de:7c:0c:3f:e2:31:2a:46:f9:a3:e7:1f:b5:
                    42:a5:04:78:dd:a4:57:8e:eb:d7:4b:96:93:d3:e7:
                    34:65:94:6b:32:22:8e:82:d3:9e:e2:72:73:91:b6:
                    44:48:1a:ef:f6:ff:73:d0:d8:c6:4e:2b:16:ae:d0:
                    93:a2:1b:d4:a3:ca:64:da:62:33:7e:05:07:b1:a1:
                    dc:49:b8:30:69:65:e2:17:4e:5f:96:14:71:09:b6:
                    99:4d:b1:14:e3:7b:a0:b3:db:d6:e3:2d:c5:ed:6a:
                    fe:85:e1:9b:27:78:4b:4b:05:4f:93:d5:68:d5:f1:
                    b1:3a:6d:db:a8:de:ba:db:19:e8:f2:07:8f:fd:ea:
                    f9:d6:93:1d:a2:2a:ae:56:d5:8a:ea:f1:19:bb:91:
                    cb:0e:cb:25:c5:02:35:6c:27:6b:8c:d5:ad:93:13:
                    5b:99:cd:75:fa:f7:29:bb:7a:81:c0:da:13:c8:a5:
                    b6:ab:6b:c0:79:85:db:d1:d2:80:a5:86:21:82:95:
                    d2:7b:79:c5:e2:cf:1c:e3:13:63:43:4d:58:28:a8:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CA:63:12:3E:14:B5:A3:DE:2D:F3:DE:7B:4C:CB:15:00:5D:26:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/9a9fe228-0c29-3c72-b8c4-fb20f31baca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:30:2a:b9:2b:66:5f:f0:09:eb:87:75:6e:ce:55:78:b0:af:
         6b:34:fe:7d:ad:4f:63:18:a9:0e:25:ee:fa:a0:56:47:3e:cf:
         ac:aa:f2:fc:90:81:12:bf:7d:3d:a1:4f:35:6b:9e:83:89:fc:
         2f:ec:32:ce:34:8d:3d:f6:6f:c4:14:13:50:b9:97:bb:89:a4:
         0e:d4:30:68:30:1b:ce:4a:53:ee:01:84:33:4a:fa:41:dc:ad:
         15:0d:f2:76:69:10:01:55:63:9b:7d:00:b4:66:2f:77:3e:2c:
         7b:3a:91:ce:e0:e2:7a:74:76:71:6e:22:d4:73:83:5e:a6:a3:
         0c:65:03:06:e3:3a:f8:ab:71:3c:b5:bb:be:89:83:b7:4f:69:
         50:23:81:a0:c6:7b:61:b9:f3:5f:55:f6:7f:aa:f5:17:43:41:
         b5:48:c5:b7:c3:31:c5:4b:be:0c:19:b7:ef:98:e0:a0:95:68:
         02:d5:56:ca:47:a4:92:fa:5b:ef:ef:94:53:d0:0b:94:2c:94:
         87:50:05:f7:a4:54:56:19:8a:48:39:fd:c4:b3:39:14:5f:95:
         81:fd:1e:27:84:0a:f0:ff:4d:ce:b6:4f:8b:ad:fc:d9:f8:bb:
         1a:33:05:b6:69:cb:8f:c5:f4:c4:94:87:d7:b6:1e:4e:bf:6e:
         5c:37:ac:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dRurkcz6FW704IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVkOTM0MDAtMGE2Zi00OTM4LTk5MjUtODU2YzZhY2Uz
OWRmMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
Y2NjOTljMmItMDUzOS00YTdjLWJiMGQtMmIxNWQ5NTc5MmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2hiDAkj1y14UJQL3oTcaV612moM36p1ggcd
vplruaUEaOldrMnQgXFMotpt1958DD/iMSpG+aPnH7VCpQR43aRXjuvXS5aT0+c0
ZZRrMiKOgtOe4nJzkbZESBrv9v9z0NjGTisWrtCTohvUo8pk2mIzfgUHsaHcSbgw
aWXiF05flhRxCbaZTbEU43ugs9vW4y3F7Wr+heGbJ3hLSwVPk9Vo1fGxOm3bqN66
2xno8geP/er51pMdoiquVtWK6vEZu5HLDsslxQI1bCdrjNWtkxNbmc11+vcpu3qB
wNoTyKW2q2vAeYXb0dKApYYhgpXSe3nF4s8c4xNjQ01YKKjS3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDnKYxI+FLWj3i3z3ntMyxUAXSYVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNWQ5
MzQwMC0wYTZmLTQ5MzgtOTkyNS04NTZjNmFjZTM5ZGYvOWE5ZmUyMjgtMGMyOS0z
YzcyLWI4YzQtZmIyMGYzMWJhY2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjVkOTM0MDAtMGE2Zi00OTM4LTk5
MjUtODU2YzZhY2UzOWRmL2Y1ZDkzNDAwLTBhNmYtNDkzOC05OTI1LTg1NmM2YWNl
MzlkZi5jcmwwHwYDVR0jBBgwFoAUrA+Cm0QWCz2wP5W2ggDuFayzH2swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNWQ5MzQwMC0wYTZmLTQ5MzgtOTkyNS04NTZj
NmFjZTM5ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACowKrkrZl/wCeuHdW7OVXiwr2s0/n2tT2MYqQ4l7vqgVkc+z6yq8vyQ
gRK/fT2hTzVrnoOJ/C/sMs40jT32b8QUE1C5l7uJpA7UMGgwG85KU+4BhDNK+kHc
rRUN8nZpEAFVY5t9ALRmL3c+LHs6kc7g4np0dnFuItRzg16mowxlAwbjOvircTy1
u76Jg7dPaVAjgaDGe2G5819V9n+q9RdDQbVIxbfDMcVLvgwZt++Y4KCVaALVVspH
pJL6W+/vlFPQC5QslIdQBfekVFYZikg5/cSzORRflYH9HieECvD/Tc62T4ut/Nn4
uxozBbZpy4/F9MSUh9e2Hk6/blw3rD4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:59:44 2025 by rpki-client