Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa
File:                     29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa (raw, json)
Hash identifier:          ivxGvvVk+h5p2AzcF+6Ce1huO17IvNf3IOIpDKuMlUk=
Subject key identifier:   B0:AB:83:B4:4F:73:8E:7D:8C:85:6F:7B:E7:90:30:EA:91:FA:E9:BF
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584A1F902343FC16447094124740
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     33392
IP address blocks:        137.83.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:23:43:fc:16:44:70:94:12:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=e689fcdc-2487-4864-806d-36a02cde466a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:0c:11:71:76:f7:09:75:d2:db:33:1b:c6:
                    11:c9:29:c6:a4:76:e5:0f:41:c3:39:9c:8f:ab:4d:
                    e5:ce:8b:9d:8c:62:8f:b0:5f:29:4d:95:46:20:aa:
                    40:48:84:8b:c3:29:5d:be:d4:1e:95:fc:c1:26:20:
                    2c:a1:1d:8e:d2:cb:d3:76:1b:cd:03:a6:bd:51:a9:
                    7b:69:74:35:cb:35:c5:d3:f1:5e:0d:57:75:21:d2:
                    63:fe:ac:da:1a:76:7a:da:1d:a0:a7:6b:c4:18:a4:
                    16:18:38:80:de:34:c4:2d:47:a6:27:93:80:66:7e:
                    7c:7e:4a:fc:08:d4:94:7e:7b:7c:8e:0d:fc:6e:4e:
                    82:0c:10:d8:49:d7:96:bb:ca:cd:21:d1:00:f7:13:
                    e2:80:85:d6:78:7b:c0:45:e9:7c:56:33:61:6e:df:
                    56:89:0c:9e:c3:fe:28:ed:c1:cf:51:f7:57:ce:22:
                    44:8e:7d:4e:a6:0f:ca:bb:d5:63:c4:39:b9:88:be:
                    4e:10:43:b9:49:42:c9:e5:02:9c:f4:37:5e:74:93:
                    1d:2c:6d:a3:58:ee:7d:0d:d7:c0:cd:64:05:d4:f0:
                    0b:84:03:47:4d:7d:44:e4:33:03:18:dd:fc:01:30:
                    f2:8b:0d:b9:af:4f:72:6e:b9:05:6d:80:57:10:63:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AB:83:B4:4F:73:8E:7D:8C:85:6F:7B:E7:90:30:EA:91:FA:E9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/29cf5bff-91e4-3cf7-ad96-22dc1c2fcf34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:5d:1e:c4:53:40:30:90:b2:61:06:8a:84:a6:99:c7:cc:56:
         be:e0:db:0e:c0:0d:af:36:15:61:c8:dd:71:16:3a:9c:0b:f4:
         1a:a2:bd:f3:33:b6:40:85:8c:87:c6:4f:79:9d:17:df:ac:65:
         df:7d:dc:87:59:25:02:b9:9e:58:a5:85:4e:6a:5b:5a:48:14:
         7d:93:a2:d1:fd:e9:5f:a3:8b:c3:0e:ec:be:73:a2:bc:75:16:
         41:e5:7f:75:a6:be:1b:d8:25:26:f7:a9:75:40:a0:4d:7b:cd:
         eb:ce:28:c1:8b:d6:bc:13:d2:76:27:99:70:b1:6c:aa:20:80:
         77:a3:61:b4:e6:93:86:62:89:2c:aa:a2:99:71:3c:49:d3:61:
         cf:11:9d:85:f8:ae:b9:95:46:0a:d8:85:d8:ae:88:f4:5a:b7:
         14:2e:1d:f9:67:3f:f7:11:38:3f:8e:fc:5c:b3:ce:a6:4a:ca:
         b4:bd:dc:c4:b6:4f:8d:68:d6:36:9d:90:48:c8:19:0c:ad:6c:
         1e:71:6d:e8:29:3d:1b:cd:e1:c7:3e:a8:a1:09:ee:6a:55:16:
         58:ce:53:ed:50:d6:75:78:b4:75:af:5f:d5:21:8d:87:d7:8f:
         ec:2f:2b:71:d3:11:f3:e7:63:e1:7b:e3:0a:c6:a0:46:ad:8f:
         1f:78:b1:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCND/BZEcJQSR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk
ZTY4OWZjZGMtMjQ4Ny00ODY0LTgwNmQtMzZhMDJjZGU0NjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDUMEXF29wl10tszG8YRySnGpHblD0HDOZyP
q03lzoudjGKPsF8pTZVGIKpASISLwyldvtQelfzBJiAsoR2O0svTdhvNA6a9Ual7
aXQ1yzXF0/FeDVd1IdJj/qzaGnZ62h2gp2vEGKQWGDiA3jTELUemJ5OAZn58fkr8
CNSUfnt8jg38bk6CDBDYSdeWu8rNIdEA9xPigIXWeHvARel8VjNhbt9WiQyew/4o
7cHPUfdXziJEjn1Opg/Ku9VjxDm5iL5OEEO5SULJ5QKc9DdedJMdLG2jWO59DdfA
zWQF1PALhANHTX1E5DMDGN38ATDyiw25r09ybrkFbYBXEGOzCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCrg7RPc459jIVve+eQMOqR+um/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMjljZjViZmYtOTFlNC0z
Y2Y3LWFkOTYtMjJkYzFjMmZjZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVNmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAABdHsRTQDCQsmEGioSmmcfMVr7g2w7ADa82FWHI3XEWOpwL9BqivfMz
tkCFjIfGT3mdF9+sZd993IdZJQK5nlilhU5qW1pIFH2TotH96V+ji8MO7L5zorx1
FkHlf3WmvhvYJSb3qXVAoE17zevOKMGL1rwT0nYnmXCxbKoggHejYbTmk4ZiiSyq
oplxPEnTYc8RnYX4rrmVRgrYhdiuiPRatxQuHflnP/cROD+O/FyzzqZKyrS93MS2
T41o1jadkEjIGQytbB5xbegpPRvN4cc+qKEJ7mpVFljOU+1Q1nV4tHWvX9UhjYfX
j+wvK3HTEfPnY+F74wrGoEatjx94sYg=
-----END CERTIFICATE-----
Generated at Tue Jun 17 10:59:58 2025 by rpki-client