Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10ee14ab-625c-36d9-8450-245893eff1c8.roa
File:                     10ee14ab-625c-36d9-8450-245893eff1c8.roa (raw, json)
Hash identifier:          w7L9+CbmfeXU+joGgAz7L7197OhXMTFrVzIgA5mONKw=
Subject key identifier:   7B:99:7F:F7:7A:D0:F5:65:48:E3:93:8F:95:A9:F9:06:EA:1E:9B:42
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A03A554A5F16AD32006352340
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10ee14ab-625c-36d9-8450-245893eff1c8.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     7018
IP address blocks:        209.163.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:54:a5:f1:6a:d3:20:06:35:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=ffe88a59-7402-437b-b95e-23277ff8cff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dc:0b:a6:25:8c:67:86:52:31:3d:43:8e:43:
                    e1:69:a0:f6:74:d4:56:a5:79:80:85:8a:9b:4a:58:
                    ad:c3:d9:31:30:ae:67:03:4c:8a:4e:00:3e:f5:66:
                    c3:85:dd:91:09:c9:63:7b:d7:16:c8:32:af:94:5e:
                    02:5d:3e:f8:2d:7a:44:8e:0c:5f:d4:73:70:ae:7d:
                    47:2b:ca:20:74:29:e0:00:7e:d5:b2:2f:d5:1d:fa:
                    68:ec:f2:ee:1d:69:19:74:41:f3:9c:e6:8f:b9:15:
                    f1:95:02:9a:18:f4:4d:5e:5a:bb:2c:19:6e:29:f9:
                    92:9b:47:fb:9a:1f:74:7f:60:e8:06:26:7f:40:44:
                    27:75:7e:96:8c:a2:7f:4d:53:4c:13:6f:42:ca:c1:
                    25:79:0c:b3:38:d6:bd:0a:8b:5d:e5:6a:23:27:3a:
                    fb:a6:f3:d3:6a:61:b2:a2:81:30:58:ac:ca:e0:bf:
                    07:f9:e4:fc:aa:b2:e1:0e:2a:2d:8c:01:cd:3a:06:
                    d6:d9:53:8d:61:34:90:c4:ce:b8:31:09:93:6b:88:
                    d2:6e:e7:06:29:c7:ca:26:a3:c2:9a:7c:fe:f4:d9:
                    14:86:ae:4b:40:a2:32:3a:3a:03:16:b2:85:47:99:
                    cd:59:87:2b:87:5a:d8:03:90:3f:01:b7:9a:f3:82:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:99:7F:F7:7A:D0:F5:65:48:E3:93:8F:95:A9:F9:06:EA:1E:9B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10ee14ab-625c-36d9-8450-245893eff1c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:82:47:0f:70:ef:f5:82:9d:1d:15:e3:5a:7c:4e:00:6d:1d:
         3b:57:11:5c:a9:e4:39:73:f1:13:1c:7d:cd:9a:1c:b9:fa:1c:
         79:73:19:2e:8c:14:09:ff:41:27:c2:9b:88:e3:5b:dc:a9:bd:
         a3:0b:f7:4f:6f:09:57:3d:39:38:c0:b5:5e:84:6e:6f:e8:12:
         d5:9b:a9:62:5e:56:ca:d0:df:ca:9c:19:16:c8:74:19:18:0f:
         a2:55:54:ed:36:c1:20:49:12:de:34:b6:01:75:b1:b8:50:49:
         cf:d4:5f:96:9c:e3:8a:d6:69:1e:4d:b4:32:cb:fd:09:e7:78:
         30:79:ee:db:ea:5b:b0:73:06:32:b5:64:2f:8a:d1:28:4a:ee:
         8a:59:29:2d:48:22:3d:b2:9e:0f:fb:27:c4:3e:a8:fd:b3:62:
         40:55:69:04:ee:78:95:2b:ee:7c:46:db:bf:16:48:51:50:2e:
         ec:53:fb:7a:4e:80:5f:f1:23:48:b6:22:f2:f3:2a:ad:30:e2:
         29:c6:5f:64:7e:50:a9:f3:8b:a8:75:15:ac:df:fd:25:2b:0a:
         5c:c0:9b:81:71:d4:b1:da:cd:85:13:40:8d:a9:a0:90:24:e2:
         13:77:3e:64:fc:e1:88:5f:13:9d:eb:2f:d6:e9:db:18:ad:fb:
         d4:4a:33:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVSl8WrTIAY1I0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
ZmZlODhhNTktNzQwMi00MzdiLWI5NWUtMjMyNzdmZjhjZmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltwLpiWMZ4ZSMT1DjkPhaaD2dNRWpXmAhYqb
Slitw9kxMK5nA0yKTgA+9WbDhd2RCclje9cWyDKvlF4CXT74LXpEjgxf1HNwrn1H
K8ogdCngAH7Vsi/VHfpo7PLuHWkZdEHznOaPuRXxlQKaGPRNXlq7LBluKfmSm0f7
mh90f2DoBiZ/QEQndX6WjKJ/TVNME29CysEleQyzONa9Cotd5WojJzr7pvPTamGy
ooEwWKzK4L8H+eT8qrLhDiotjAHNOgbW2VONYTSQxM64MQmTa4jSbucGKcfKJqPC
mnz+9NkUhq5LQKIyOjoDFrKFR5nNWYcrh1rYA5A/Abea84IbqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHuZf/d60PVlSOOTj5Wp+QbqHptCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMTBlZTE0YWItNjI1Yy0z
NmQ5LTg0NTAtMjQ1ODkzZWZmMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aN1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmCRw9w7/WCnR0V41p8TgBtHTtXEVyp5Dlz8RMcfc2aHLn6HHlzGS6M
FAn/QSfCm4jjW9ypvaML909vCVc9OTjAtV6Ebm/oEtWbqWJeVsrQ38qcGRbIdBkY
D6JVVO02wSBJEt40tgF1sbhQSc/UX5ac44rWaR5NtDLL/QnneDB57tvqW7BzBjK1
ZC+K0ShK7opZKS1IIj2yng/7J8Q+qP2zYkBVaQTueJUr7nxG278WSFFQLuxT+3pO
gF/xI0i2IvLzKq0w4inGX2R+UKnzi6h1Fazf/SUrClzAm4Fx1LHazYUTQI2poJAk
4hN3PmT84YhfE53rL9bp2xit+9RKMy8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:25:46 2025 by rpki-client