Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/36a0e461-6ed4-317b-929b-188d5c54a0c1.roa
File:                     36a0e461-6ed4-317b-929b-188d5c54a0c1.roa (raw, json)
Hash identifier:          GjfqNQRqtDPl/YOjJoV2qGPNCkUko8GV9vi9BNBl+jc=
Subject key identifier:   97:D2:EA:65:B6:82:EE:2E:64:3E:ED:5F:1A:B0:2B:40:FA:3A:B9:28
Certificate issuer:       /CN=e2213668-8973-4471-a19a-d7e8374ada63
Certificate serial:       010D0C9F43285849D85F9B57F5205E930B684E00
Authority key identifier: C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/36a0e461-6ed4-317b-929b-188d5c54a0c1.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        69.64.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:9b:57:f5:20:5e:93:0b:68:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=aafe48cc-49de-4f08-99ae-4c4e5af25638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:2e:57:e3:a2:9e:77:ad:fe:62:37:78:23:
                    e2:8d:25:49:97:96:4f:53:05:6d:c6:ce:bd:12:1c:
                    d4:8d:a3:b7:3b:74:73:a6:48:1d:31:cc:4d:94:1c:
                    85:e2:4e:57:16:e4:0f:0d:8f:d2:10:6b:87:a4:c5:
                    03:61:6d:11:23:c9:3a:22:ab:ed:63:1d:ed:2e:31:
                    a4:38:c1:01:12:3f:f5:c1:d8:5e:31:b7:35:64:b1:
                    85:79:b6:b4:92:11:f1:5d:49:f3:0d:3c:9e:9a:b7:
                    d8:b9:12:45:93:e7:11:c7:c7:3d:08:d1:57:c3:02:
                    3a:83:79:26:c4:db:80:e9:c6:9e:72:45:15:3a:da:
                    91:e7:23:3c:a5:4c:b5:db:64:a1:da:0c:a5:b4:bf:
                    cb:9f:00:e7:df:6f:c3:5f:57:3e:99:7f:db:6b:e4:
                    9c:70:8e:f7:98:bc:87:c0:ab:b8:af:2f:06:3d:20:
                    53:9a:27:dc:93:c9:9e:8c:de:f9:ba:a3:f5:f7:fa:
                    3b:0f:36:a0:60:72:68:1d:37:50:7a:53:bb:b9:59:
                    58:fc:fd:c4:7a:0c:d3:61:86:31:53:df:ec:8a:3b:
                    69:7d:07:be:ef:59:31:37:8e:52:50:c2:e9:f0:4d:
                    8e:0c:84:5c:f6:3c:a9:ac:b7:be:77:4b:79:25:a4:
                    b3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D2:EA:65:B6:82:EE:2E:64:3E:ED:5F:1A:B0:2B:40:FA:3A:B9:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/36a0e461-6ed4-317b-929b-188d5c54a0c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl

            X509v3 Authority Key Identifier:
                keyid:C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ef:4e:0a:f0:8a:1d:49:57:89:45:b3:74:db:67:ec:ad:55:
         76:50:f4:ee:66:3d:71:b3:e8:fc:b1:06:f7:89:67:2d:66:bf:
         89:bd:9f:f7:93:36:5c:31:f1:32:33:e0:f4:4d:c5:b1:95:1c:
         eb:49:7e:50:36:9e:5c:51:f8:f2:0e:94:10:bd:27:c2:b6:7d:
         e1:b4:7c:05:f1:0f:64:b3:69:73:95:22:20:b0:11:0a:85:4f:
         e2:19:ec:ed:89:7d:5c:c0:d2:f9:84:56:31:c9:f9:0e:9b:86:
         d8:b3:6d:17:39:3a:89:82:b8:c4:91:48:7a:cb:df:4d:45:ec:
         a4:f2:f3:e0:52:87:db:86:49:c6:d1:9c:d3:bc:06:95:9b:ec:
         10:c5:d5:7a:87:38:ad:9d:b7:fb:c5:45:e2:16:8e:82:00:36:
         ac:e4:31:a6:cc:ca:6b:52:ed:ed:9c:63:b3:1e:92:ef:dc:10:
         c9:a9:b1:01:39:e2:3c:c6:08:40:03:b1:fe:b0:23:6a:29:5b:
         b8:26:55:37:67:44:da:c8:81:a3:15:44:77:59:5c:07:97:bf:
         37:25:37:1b:0c:be:c3:b8:05:bb:f2:26:a4:5a:97:ea:d9:f3:
         aa:b9:94:45:f0:61:16:01:ff:69:0e:63:01:ee:8c:fb:10:c7:
         b8:0b:82:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5tX9SBekwtoTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIyMTM2NjgtODk3My00NDcxLWExOWEtZDdlODM3NGFk
YTYzMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
YWFmZTQ4Y2MtNDlkZS00ZjA4LTk5YWUtNGM0ZTVhZjI1NjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMUuV+Oinnet/mI3eCPijSVJl5ZPUwVtxs69
EhzUjaO3O3RzpkgdMcxNlByF4k5XFuQPDY/SEGuHpMUDYW0RI8k6IqvtYx3tLjGk
OMEBEj/1wdheMbc1ZLGFeba0khHxXUnzDTyemrfYuRJFk+cRx8c9CNFXwwI6g3km
xNuA6caeckUVOtqR5yM8pUy122Sh2gyltL/LnwDn32/DX1c+mX/ba+SccI73mLyH
wKu4ry8GPSBTmifck8mejN75uqP19/o7DzagYHJoHTdQelO7uVlY/P3EegzTYYYx
U9/sijtpfQe+71kxN45SUMLp8E2ODIRc9jyprLe+d0t5JaSzewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJfS6mW2gu4uZD7tXxqwK0D6OrkoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lMjIx
MzY2OC04OTczLTQ0NzEtYTE5YS1kN2U4Mzc0YWRhNjMvMzZhMGU0NjEtNmVkNC0z
MTdiLTkyOWItMTg4ZDVjNTRhMGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTIyMTM2NjgtODk3My00NDcxLWEx
OWEtZDdlODM3NGFkYTYzL2UyMjEzNjY4LTg5NzMtNDQ3MS1hMTlhLWQ3ZTgzNzRh
ZGE2My5jcmwwHwYDVR0jBBgwFoAUxMJnBDYTO2dfpfUComBVEY+E5xMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lMjIxMzY2OC04OTczLTQ0NzEtYTE5YS1kN2U4
Mzc0YWRhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUCZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADnvTgrwih1JV4lFs3TbZ+ytVXZQ9O5mPXGz6PyxBveJZy1mv4m9n/eT
Nlwx8TIz4PRNxbGVHOtJflA2nlxR+PIOlBC9J8K2feG0fAXxD2SzaXOVIiCwEQqF
T+IZ7O2JfVzA0vmEVjHJ+Q6bhtizbRc5OomCuMSRSHrL301F7KTy8+BSh9uGScbR
nNO8BpWb7BDF1XqHOK2dt/vFReIWjoIANqzkMabMymtS7e2cY7Meku/cEMmpsQE5
4jzGCEADsf6wI2opW7gmVTdnRNrIgaMVRHdZXAeXvzclNxsMvsO4BbvyJqRal+rZ
86q5lEXwYRYB/2kOYwHujPsQx7gLgkU=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:36:30 2025 by rpki-client