Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa
File:                     ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa (raw, json)
Hash identifier:          /HI2QoC2dl6vwfNPGjoQCsh68VFl1+DsD5O9Xz0NitY=
Subject key identifier:   27:04:15:0D:89:67:92:12:9D:30:96:E7:89:44:E2:6E:C1:FC:9F:4D
Certificate issuer:       /CN=117f0c8a-705e-440d-8160-752196eb04a2
Certificate serial:       010D0C9F43285849F71526215C86AE64A00E77F0
Authority key identifier: AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        72.22.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:26:21:5c:86:ae:64:a0:0e:77:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f0c8a-705e-440d-8160-752196eb04a2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=5133e6dd-c97c-48e5-9226-deab15256df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:b4:bc:3f:9f:ed:75:62:77:e1:06:f5:10:
                    71:66:07:24:18:2f:6d:9d:48:db:54:01:09:26:e9:
                    61:5e:d3:40:17:87:e4:7f:8b:d3:18:80:79:73:f4:
                    4a:5b:b2:db:7d:d3:a9:39:a0:82:d3:c0:ab:2b:34:
                    15:b7:c7:b1:5b:54:de:e7:2b:e9:3d:56:b1:ee:5e:
                    2b:bf:2a:f0:2d:c5:4f:72:ca:f0:c7:11:5a:26:b0:
                    8d:bf:8b:a8:1c:a5:65:e8:2f:32:3e:b2:23:2c:e7:
                    4f:12:ed:27:47:ac:ef:0b:f3:49:40:8e:b2:4f:f7:
                    bd:b1:aa:2c:71:a8:38:a1:b4:72:8b:e5:a8:2a:af:
                    53:3f:07:bb:77:f3:82:c8:e6:fa:97:1c:34:68:82:
                    fe:13:ca:41:d2:e1:5d:53:b6:ad:7b:c0:77:7d:fd:
                    cb:2e:50:49:89:71:fb:e9:ef:8f:30:56:96:cc:e9:
                    e2:a5:15:73:2d:33:77:b2:a1:6a:55:ba:70:2b:41:
                    a3:41:6c:38:7e:f9:05:29:1d:68:be:80:e7:64:e1:
                    77:27:3c:dc:a6:48:95:32:43:bf:72:27:4d:d6:44:
                    05:31:b7:0e:9f:b3:fb:ab:b3:0a:ff:4c:ad:52:87:
                    3b:2d:45:b8:2b:d7:b4:11:a7:a7:9b:bd:b8:c7:33:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:04:15:0D:89:67:92:12:9D:30:96:E7:89:44:E2:6E:C1:FC:9F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl

            X509v3 Authority Key Identifier:
                keyid:AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e5:c8:ae:cc:2c:08:5d:05:d4:75:3e:fd:06:7d:c4:83:e0:
         26:a6:28:a3:d5:b8:ba:e9:33:10:ce:35:9f:3d:59:ed:e0:30:
         31:f1:b0:99:e5:33:b4:b9:69:e7:6c:f6:8f:4f:bb:e9:f6:5c:
         d5:2f:df:a3:99:a2:f9:a2:75:d5:a6:3f:75:f6:a9:77:87:82:
         fe:88:4e:49:49:21:50:f7:74:74:6d:27:5f:12:4b:05:db:66:
         c2:5b:c0:a8:88:f3:7f:cf:74:f8:2c:2c:cd:f9:9a:71:f0:1e:
         27:fd:66:1c:93:c9:0b:b5:e4:35:5d:45:74:5b:8c:a1:91:6f:
         f1:b0:d4:20:01:ee:eb:21:2b:9d:c0:93:3a:bd:f4:bf:89:f9:
         6c:ee:d2:f3:13:cb:86:aa:4e:90:f2:72:83:20:0e:8a:04:3d:
         a5:3d:33:45:77:c8:74:fa:79:44:9a:0d:de:7c:45:ed:1c:4b:
         25:ab:ed:26:90:76:ec:a3:95:26:d7:3f:ad:99:c1:dc:d7:b4:
         18:65:02:02:7e:35:46:34:45:9b:d8:c5:75:42:09:62:9c:2f:
         29:da:13:22:d3:d3:6a:8f:0a:12:cd:dc:04:99:77:f8:8a:a5:
         99:ed:0c:f4:62:73:49:ab:aa:90:10:22:3d:9c:3f:dc:ae:f3:
         76:dd:72:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FSYhXIauZKAOd/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTE3ZjBjOGEtNzA1ZS00NDBkLTgxNjAtNzUyMTk2ZWIw
NGEyMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
NTEzM2U2ZGQtYzk3Yy00OGU1LTkyMjYtZGVhYjE1MjU2ZGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra20vD+f7XVid+EG9RBxZgckGC9tnUjbVAEJ
JulhXtNAF4fkf4vTGIB5c/RKW7LbfdOpOaCC08CrKzQVt8exW1Te5yvpPVax7l4r
vyrwLcVPcsrwxxFaJrCNv4uoHKVl6C8yPrIjLOdPEu0nR6zvC/NJQI6yT/e9saos
cag4obRyi+WoKq9TPwe7d/OCyOb6lxw0aIL+E8pB0uFdU7ate8B3ff3LLlBJiXH7
6e+PMFaWzOnipRVzLTN3sqFqVbpwK0GjQWw4fvkFKR1ovoDnZOF3JzzcpkiVMkO/
cidN1kQFMbcOn7P7q7MK/0ytUoc7LUW4K9e0Eaenm724xzPzfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCcEFQ2JZ5ISnTCW54lE4m7B/J9NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMTdm
MGM4YS03MDVlLTQ0MGQtODE2MC03NTIxOTZlYjA0YTIvY2E2ZDVhNmEtNWEwNi0z
NWQ4LWI1YTAtZDFjMzU4ODc3YTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTE3ZjBjOGEtNzA1ZS00NDBkLTgx
NjAtNzUyMTk2ZWIwNGEyLzExN2YwYzhhLTcwNWUtNDQwZC04MTYwLTc1MjE5NmVi
MDRhMi5jcmwwHwYDVR0jBBgwFoAUrR+VyGWB55XajGVUK0RqLpLI99gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMTdmMGM4YS03MDVlLTQ0MGQtODE2MC03NTIx
OTZlYjA0YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAArlyK7MLAhdBdR1Pv0GfcSD4CamKKPVuLrpMxDONZ89We3gMDHxsJnl
M7S5aeds9o9Pu+n2XNUv36OZovmiddWmP3X2qXeHgv6ITklJIVD3dHRtJ18SSwXb
ZsJbwKiI83/PdPgsLM35mnHwHif9ZhyTyQu15DVdRXRbjKGRb/Gw1CAB7ushK53A
kzq99L+J+Wzu0vMTy4aqTpDycoMgDooEPaU9M0V3yHT6eUSaDd58Re0cSyWr7SaQ
duyjlSbXP62ZwdzXtBhlAgJ+NUY0RZvYxXVCCWKcLynaEyLT02qPChLN3ASZd/iK
pZntDPRic0mrqpAQIj2cP9yu83bdcoI=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:23:15 2025 by rpki-client