Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/1b0b012c-d798-3ba9-924a-e7db90989295.roa
File:                     1b0b012c-d798-3ba9-924a-e7db90989295.roa (raw, json)
Hash identifier:          b4seiQn9+g6dIDpLGwt1xK1YGCDW8JlO0NmEDyNNUo0=
Subject key identifier:   10:40:B2:3C:B2:D5:DC:04:F4:4F:28:18:72:C2:B2:A8:64:60:9C:B3
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584A03A547E4DD56D3627BD16EC0
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/1b0b012c-d798-3ba9-924a-e7db90989295.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     16904
IP address blocks:        209.237.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:47:e4:dd:56:d3:62:7b:d1:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=5a9e0e80-b9e0-4751-9774-3f0edd74e771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:a6:7c:ad:a9:5c:3f:cb:14:9b:12:ae:41:
                    2f:ce:cd:c5:05:b6:b9:14:27:37:c0:b7:ea:fa:39:
                    ca:97:30:b2:35:21:20:aa:d2:9d:ed:b2:3c:70:9e:
                    1a:8d:e3:79:a5:2e:3f:5c:6f:45:27:04:4b:30:10:
                    f1:84:d8:c8:9c:eb:dc:14:29:9d:e9:0e:cc:47:1f:
                    51:19:71:cf:b6:ca:32:25:53:90:57:99:74:d0:69:
                    00:f8:1e:68:0f:0c:09:7b:68:f9:20:df:03:99:ab:
                    0d:a6:fc:9b:71:2a:be:f6:c6:bc:05:c0:48:83:1b:
                    01:bf:f8:c0:6c:7c:cc:bf:e8:5b:b8:41:d6:45:77:
                    f6:ea:46:99:cf:5a:f8:be:13:ba:68:61:93:d1:76:
                    35:68:b8:3d:d4:64:f7:d8:15:d2:a3:53:1b:b0:5c:
                    86:5d:87:04:ef:9c:57:b5:77:89:df:a3:43:f1:56:
                    e1:91:04:b8:81:db:c8:f6:03:22:92:ce:08:cd:c0:
                    c4:32:85:d2:b6:06:46:d5:bd:99:36:92:a7:49:26:
                    a2:c5:df:cf:60:68:88:89:48:91:64:ef:39:23:77:
                    3b:42:e2:7f:95:ed:15:89:83:24:85:0e:44:b9:59:
                    14:30:53:ff:7f:d5:86:4c:b2:11:d6:ce:c3:ab:2c:
                    c4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:40:B2:3C:B2:D5:DC:04:F4:4F:28:18:72:C2:B2:A8:64:60:9C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/1b0b012c-d798-3ba9-924a-e7db90989295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5f:20:e8:27:1a:18:dc:2d:b2:0a:ed:bb:67:dd:1e:57:14:
         c7:34:a0:d2:cb:54:a3:1a:5a:d4:a6:1b:a9:df:26:93:96:6f:
         3e:86:69:08:f6:0d:f4:24:59:07:59:47:31:d7:7e:87:26:22:
         72:0a:bf:39:96:4e:de:66:e8:f3:44:21:81:e1:be:11:20:26:
         a6:1c:fd:c8:4f:cf:2e:7c:c8:85:1e:73:b1:50:da:1f:aa:88:
         e6:b1:fb:e7:27:3e:24:d7:dc:f8:b8:44:58:4c:21:31:a1:01:
         85:e7:d8:e8:f9:cb:fa:09:00:dc:93:ca:0d:36:a2:a0:76:00:
         8e:6b:3d:5e:1e:70:4e:5e:41:4d:e3:3c:0c:f3:d8:0f:fb:7e:
         7f:13:d8:ce:c3:b6:99:0d:6a:cd:29:c8:96:79:62:a9:bc:2c:
         4c:e7:e4:db:f6:9f:5c:2f:f7:42:1e:33:9a:26:3d:1e:bd:a5:
         42:8d:36:39:b6:1c:51:7d:a3:76:ca:92:28:df:95:5f:d7:45:
         03:ed:85:a4:95:ad:b8:a1:a7:f5:8a:ed:f2:20:fe:63:bd:f4:
         00:b8:ca:1b:9b:28:75:52:3b:5f:a8:22:75:25:79:99:61:cb:
         33:f7:ef:be:ea:16:65:56:05:8b:b5:a8:02:1f:33:58:7c:db:
         3b:c1:c2:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUfk3VbTYnvRbsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
NWE5ZTBlODAtYjllMC00NzUxLTk3NzQtM2YwZWRkNzRlNzcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdCmfK2pXD/LFJsSrkEvzs3FBba5FCc3wLfq
+jnKlzCyNSEgqtKd7bI8cJ4ajeN5pS4/XG9FJwRLMBDxhNjInOvcFCmd6Q7MRx9R
GXHPtsoyJVOQV5l00GkA+B5oDwwJe2j5IN8DmasNpvybcSq+9sa8BcBIgxsBv/jA
bHzMv+hbuEHWRXf26kaZz1r4vhO6aGGT0XY1aLg91GT32BXSo1MbsFyGXYcE75xX
tXeJ36ND8VbhkQS4gdvI9gMiks4IzcDEMoXStgZG1b2ZNpKnSSaixd/PYGiIiUiR
ZO85I3c7QuJ/le0ViYMkhQ5EuVkUMFP/f9WGTLIR1s7DqyzESQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBBAsjyy1dwE9E8oGHLCsqhkYJyzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvMWIwYjAxMmMtZDc5OC0z
YmE5LTkyNGEtZTdkYjkwOTg5Mjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpfIOgnGhjcLbIK7btn3R5XFMc0oNLLVKMaWtSmG6nfJpOWbz6GaQj2
DfQkWQdZRzHXfocmInIKvzmWTt5m6PNEIYHhvhEgJqYc/chPzy58yIUec7FQ2h+q
iOax++cnPiTX3Pi4RFhMITGhAYXn2Oj5y/oJANyTyg02oqB2AI5rPV4ecE5eQU3j
PAzz2A/7fn8T2M7DtpkNas0pyJZ5Yqm8LEzn5Nv2n1wv90IeM5omPR69pUKNNjm2
HFF9o3bKkijflV/XRQPthaSVrbihp/WK7fIg/mO99AC4yhubKHVSO1+oInUleZlh
yzP3777qFmVWBYu1qAIfM1h82zvBwjQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:00:56 2025 by rpki-client