Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa
File:                     b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa (raw, json)
Hash identifier:          fHVhSOOxSkl/9vgPA/UGNy4RwGFx2D9pnfEKY03yaWo=
Subject key identifier:   5A:7C:DF:AD:9B:B1:F4:40:11:92:D6:3D:62:48:9A:1D:A7:03:6F:8A
Certificate issuer:       /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial:       010D0C9F4328584A331AF14C4A01EF1F7F26C900
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     395301
IP address blocks:        209.172.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f1:4c:4a:01:ef:1f:7f:26:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=6915a66c-b297-46a4-89ac-665287cd583e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:bb:ad:0b:57:76:7c:89:b8:06:0f:4d:f1:
                    fb:92:a2:35:54:48:4b:37:63:eb:54:6c:c8:be:fd:
                    33:bc:6d:4c:69:6d:68:98:cb:d5:24:66:7e:40:76:
                    34:aa:b3:7c:c5:42:c5:51:b0:52:ee:37:13:9b:a9:
                    89:e6:3f:0f:94:5e:1f:15:5a:bc:77:cf:ec:08:9e:
                    5a:cb:b6:96:2f:22:5e:ce:81:26:11:dc:66:76:98:
                    e2:6e:b8:64:65:18:71:d2:8e:4e:b6:a1:2d:e7:c1:
                    94:50:47:ac:83:ee:18:cb:f9:a0:0e:5a:8c:12:d4:
                    7f:dc:5d:2a:2f:6e:41:19:b3:a8:6e:5d:2e:be:36:
                    38:24:f8:31:9d:9f:ef:22:a0:99:f4:dc:03:23:f7:
                    ba:7c:07:50:ab:6d:bd:67:07:39:07:2d:3e:ae:61:
                    6b:99:15:de:c7:45:b7:fd:5e:f3:2d:86:48:85:23:
                    19:87:00:cc:ca:de:41:a8:59:da:e8:d0:43:be:95:
                    48:f9:d9:3e:00:3d:50:29:42:fd:f7:1a:bb:aa:8e:
                    dc:c3:cb:be:38:d3:fb:e4:20:c6:71:c5:1b:7b:ed:
                    53:95:d3:73:8b:72:80:7e:df:1e:58:10:38:05:fa:
                    e8:6f:15:db:ac:1b:6f:4b:73:5f:0a:36:9d:7d:48:
                    62:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7C:DF:AD:9B:B1:F4:40:11:92:D6:3D:62:48:9A:1D:A7:03:6F:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl

            X509v3 Authority Key Identifier:
                keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.172.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:18:b9:c7:04:d5:6f:87:15:33:d7:45:86:00:44:e5:c0:ff:
         61:3c:00:ed:d3:ca:3e:33:59:4b:91:32:4d:ad:6b:ff:3f:6b:
         f2:a6:68:0b:23:bc:f8:72:1b:d6:79:bb:46:42:2a:cd:da:14:
         96:1a:97:e8:f3:be:e0:59:35:2a:87:35:98:1e:48:9b:3f:55:
         b1:d3:77:3f:77:36:0a:63:d0:ff:c1:aa:0a:75:bc:b9:dc:65:
         20:94:8f:10:41:3d:5a:bc:55:34:f5:1e:5a:5e:2b:d1:a6:00:
         23:ce:72:73:98:e6:3f:ef:15:30:ac:47:8c:d1:6d:67:f9:74:
         4d:26:e8:63:0e:6d:42:fe:48:ba:75:0e:b7:4f:8c:ab:55:17:
         3b:56:15:91:42:9e:0f:e2:ad:9c:57:b0:2c:bd:3f:f2:63:d4:
         06:07:7e:ad:5e:88:fc:cd:f1:98:cc:67:bc:a4:b9:8f:44:01:
         e9:71:3e:04:36:29:ec:7f:c7:e2:2a:03:09:30:0c:1b:34:08:
         f3:6b:36:46:c3:28:3c:45:19:4e:c3:0b:24:ba:54:fc:21:71:
         e5:c7:3e:29:c3:a9:51:36:75:ab:a7:7d:b6:9d:ed:1b:da:bd:
         44:91:a2:a6:64:71:2e:0d:0f:0a:b0:d2:fc:0b:17:d0:fe:51:
         cd:ce:c8:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGvFMSgHvH38myQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw
MjgzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
NjkxNWE2NmMtYjI5Ny00NmE0LTg5YWMtNjY1Mjg3Y2Q1ODNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Xm7rQtXdnyJuAYPTfH7kqI1VEhLN2PrVGzI
vv0zvG1MaW1omMvVJGZ+QHY0qrN8xULFUbBS7jcTm6mJ5j8PlF4fFVq8d8/sCJ5a
y7aWLyJezoEmEdxmdpjibrhkZRhx0o5OtqEt58GUUEesg+4Yy/mgDlqMEtR/3F0q
L25BGbOobl0uvjY4JPgxnZ/vIqCZ9NwDI/e6fAdQq229Zwc5By0+rmFrmRXex0W3
/V7zLYZIhSMZhwDMyt5BqFna6NBDvpVI+dk+AD1QKUL99xq7qo7cw8u+ONP75CDG
ccUbe+1TldNzi3KAft8eWBA4BfrobxXbrBtvS3NfCjadfUhiFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFp8362bsfRAEZLWPWJImh2nA2+KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1
OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvYjZkZTg4ODQtYzVjYy0z
ZGI1LTkyMjgtNTJjY2ZhODdhYjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy
NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy
MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy
NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0awEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMYuccE1W+HFTPXRYYAROXA/2E8AO3Tyj4zWUuRMk2ta/8/a/KmaAsj
vPhyG9Z5u0ZCKs3aFJYal+jzvuBZNSqHNZgeSJs/VbHTdz93Ngpj0P/Bqgp1vLnc
ZSCUjxBBPVq8VTT1HlpeK9GmACPOcnOY5j/vFTCsR4zRbWf5dE0m6GMObUL+SLp1
DrdPjKtVFztWFZFCng/irZxXsCy9P/Jj1AYHfq1eiPzN8ZjMZ7ykuY9EAelxPgQ2
Kex/x+IqAwkwDBs0CPNrNkbDKDxFGU7DCyS6VPwhceXHPinDqVE2daunfbad7Rva
vUSRoqZkcS4NDwqw0vwLF9D+Uc3OyPM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:34:47 2025 by rpki-client