Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/71e14953-f533-3705-9850-4a6c2e06f1a1.roa
File:                     71e14953-f533-3705-9850-4a6c2e06f1a1.roa (raw, json)
Hash identifier:          uIttzf4MZZqJoOHCEwkmRmhB0XClesZeccSU4EIrZqs=
Subject key identifier:   41:E8:EF:AD:88:35:67:CB:6A:00:EA:4E:45:8C:16:04:B4:B2:20:0B
Certificate issuer:       /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
Certificate serial:       010D0C9F43285849A089CFBA330F1DE531251310
Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/71e14953-f533-3705-9850-4a6c2e06f1a1.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     36549
IP address blocks:        173.225.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:cf:ba:33:0f:1d:e5:31:25:13:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=93e2ed80-2aa6-4921-97fb-0ce21fcb69a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:32:87:15:85:75:8f:7b:66:32:9f:72:84:
                    54:b5:41:18:10:8e:da:a0:fa:4f:d7:82:bf:2a:bb:
                    1d:04:b3:33:b1:ba:72:83:9d:3c:29:71:8b:36:0e:
                    68:9a:0d:9f:0a:73:3e:d6:3a:92:40:e5:f0:be:ae:
                    59:0e:b6:c9:f8:36:2e:86:1d:ea:37:97:50:3c:11:
                    fa:bb:3c:3b:fc:af:33:40:10:f8:c4:49:f4:f0:e3:
                    c9:39:51:f1:ca:9c:77:1d:b1:eb:00:f8:54:9f:87:
                    26:94:09:85:67:9e:19:a1:ef:ed:8a:da:7d:85:41:
                    75:41:be:de:8e:a3:eb:3d:43:44:c7:c9:9b:39:29:
                    42:ff:4b:0b:13:99:52:3f:cf:eb:c2:a7:e4:bb:5b:
                    5b:ee:27:45:cf:e5:0f:ea:4b:6b:36:42:5c:6e:8f:
                    ee:e9:db:89:29:7e:23:e6:f6:12:06:a2:f7:c2:2c:
                    10:d3:ad:af:da:9c:0d:af:9f:4e:f4:bc:b2:9d:ae:
                    aa:d6:3e:4f:b8:43:b1:62:16:65:8a:31:99:41:61:
                    a8:c1:91:47:c2:18:f0:ee:93:bb:ab:74:74:1e:da:
                    1b:65:1e:c3:be:c6:30:e6:83:83:e3:4f:9d:3c:d0:
                    65:61:cb:31:9d:c8:89:a9:00:e7:0e:f6:19:69:26:
                    2b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E8:EF:AD:88:35:67:CB:6A:00:EA:4E:45:8C:16:04:B4:B2:20:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/71e14953-f533-3705-9850-4a6c2e06f1a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.225.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a2:dc:6b:82:b8:23:97:dd:34:43:ef:e6:73:73:81:55:ba:
         44:64:5b:bf:fb:01:ad:8e:5a:cf:4e:94:f5:b8:0f:7f:6a:17:
         8f:1e:8a:66:ff:8c:a3:c7:6d:22:35:c3:61:d4:ea:71:2a:2e:
         ee:9f:6d:11:e4:96:e6:77:b2:b3:1f:9f:2d:78:1d:ff:71:bf:
         1c:be:83:fc:3d:7f:2c:4e:f0:5e:95:c0:f1:aa:df:56:5a:43:
         00:fd:83:f2:5b:d0:10:ce:73:91:e1:a9:6a:a4:d2:5e:26:dd:
         03:f2:0e:a7:0b:60:90:80:01:b0:14:f6:0b:7f:af:3e:25:22:
         d6:a6:1c:39:35:d3:37:4d:b3:5c:8d:b1:49:8f:8b:47:b9:2c:
         91:0a:70:9c:54:84:a2:af:49:cd:cb:54:c9:be:25:81:b7:34:
         83:db:e9:fa:da:6c:e6:be:47:9c:33:e5:75:c4:10:1c:44:42:
         b7:dd:5e:bb:16:eb:f1:3a:64:82:7e:80:16:c0:03:4d:db:10:
         bb:01:5e:dd:f5:67:00:6a:06:b8:8e:15:29:97:ce:8b:e8:f6:
         4f:b7:16:5b:bc:3d:6f:0f:df:0f:6e:58:19:3a:f9:09:a7:e1:
         6c:ef:44:78:a9:80:93:06:ea:14:30:d7:d7:58:c1:80:f9:1f:
         56:5c:05:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgic+6Mw8d5TElExAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjU5ZmU3YzgtZjdmYS00NjM3LWE3NDYtODczZGJlYWRi
ZjNjMB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk
OTNlMmVkODAtMmFhNi00OTIxLTk3ZmItMGNlMjFmY2I2OWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob8yhxWFdY97ZjKfcoRUtUEYEI7aoPpP14K/
KrsdBLMzsbpyg508KXGLNg5omg2fCnM+1jqSQOXwvq5ZDrbJ+DYuhh3qN5dQPBH6
uzw7/K8zQBD4xEn08OPJOVHxypx3HbHrAPhUn4cmlAmFZ54Zoe/titp9hUF1Qb7e
jqPrPUNEx8mbOSlC/0sLE5lSP8/rwqfku1tb7idFz+UP6ktrNkJcbo/u6duJKX4j
5vYSBqL3wiwQ062v2pwNr59O9Lyyna6q1j5PuEOxYhZlijGZQWGowZFHwhjw7pO7
q3R0HtobZR7DvsYw5oOD40+dPNBlYcsxnciJqQDnDvYZaSYrywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEHo762INWfLagDqTkWMFgS0siALMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlm
ZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNkYmVhZGJmM2MvNzFlMTQ5NTMtZjUzMy0z
NzA1LTk4NTAtNGE2YzJlMDZmMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjU5ZmU3YzgtZjdmYS00NjM3LWE3
NDYtODczZGJlYWRiZjNjLzI1OWZlN2M4LWY3ZmEtNDYzNy1hNzQ2LTg3M2RiZWFk
YmYzYy5jcmwwHwYDVR0jBBgwFoAUdFJpwi/8O6u55n4V9rH9o+lb5uowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlmZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNk
YmVhZGJmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSi3GuCuCOX3TRD7+Zzc4FVukRkW7/7Aa2OWs9OlPW4D39qF48eimb/
jKPHbSI1w2HU6nEqLu6fbRHkluZ3srMfny14Hf9xvxy+g/w9fyxO8F6VwPGq31Za
QwD9g/Jb0BDOc5HhqWqk0l4m3QPyDqcLYJCAAbAU9gt/rz4lItamHDk10zdNs1yN
sUmPi0e5LJEKcJxUhKKvSc3LVMm+JYG3NIPb6frabOa+R5wz5XXEEBxEQrfdXrsW
6/E6ZIJ+gBbAA03bELsBXt31ZwBqBriOFSmXzovo9k+3Flu8PW8P3w9uWBk6+Qmn
4WzvRHipgJMG6hQw19dYwYD5H1ZcBdU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 04:52:55 2025 by rpki-client