Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/16b0d617-d1af-3e51-844b-d5e315727c07.roa
File:                     16b0d617-d1af-3e51-844b-d5e315727c07.roa (raw, json)
Hash identifier:          L8hC7bMHZMYZU1eN94bNNiZR7+D0Eg4oJMxpyPoHWpM=
Subject key identifier:   DE:4E:0C:9F:EC:CF:F4:DF:E0:54:5C:38:C9:A2:69:83:93:EB:7A:29
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499DBF2489FCCF510BAD0A5D80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/16b0d617-d1af-3e51-844b-d5e315727c07.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     852
IP address blocks:        208.181.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:24:89:fc:cf:51:0b:ad:0a:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=0e14031a-4d68-452d-bbf7-a618f0faa11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:42:70:d2:65:03:62:ed:7f:04:da:4f:1a:ab:
                    ae:58:dc:1e:73:92:ab:ac:ce:5c:b9:40:ac:71:b5:
                    d6:21:04:90:dd:cb:8d:15:ae:7c:2a:0d:75:49:0f:
                    53:0c:1c:28:95:bc:a1:9c:ee:9a:e5:21:42:9f:44:
                    1d:53:73:96:7b:15:91:6a:c4:4c:7c:b9:40:97:79:
                    b7:7c:69:90:c8:28:c5:b5:3b:ae:b2:90:8b:65:c0:
                    16:ad:d3:0e:4b:49:d8:ab:b0:32:af:29:bd:49:02:
                    ea:bb:91:62:52:e0:c5:24:20:dc:c9:cd:0a:e7:88:
                    47:d6:b2:d3:3b:05:27:61:67:db:4a:a0:27:5c:24:
                    3e:88:92:46:e4:22:03:3b:21:fd:48:ea:51:75:2e:
                    56:d3:88:1c:dd:27:68:bb:35:36:cf:2e:77:8b:df:
                    35:13:18:6b:21:cb:db:ea:51:d2:9e:72:e1:09:10:
                    39:a4:aa:8c:05:bb:09:c2:b3:a6:04:1e:3b:24:8a:
                    69:5b:49:22:0a:06:ff:12:8a:24:80:09:18:0d:e6:
                    3a:b9:cd:c3:0a:c5:42:fb:e8:0c:d9:ad:73:71:17:
                    d7:a2:5a:b6:a0:f8:0f:56:37:41:e9:04:af:df:53:
                    eb:63:f5:61:ea:11:da:1d:05:e0:f9:28:e2:f4:47:
                    06:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4E:0C:9F:EC:CF:F4:DF:E0:54:5C:38:C9:A2:69:83:93:EB:7A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/16b0d617-d1af-3e51-844b-d5e315727c07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:95:f4:af:d2:ee:cb:19:17:ff:0a:91:45:60:da:ec:a8:74:
         0c:ea:34:dc:19:cf:70:3f:23:56:2d:e8:3b:c5:d1:f5:d8:04:
         4f:ce:61:15:25:5c:39:86:f4:3b:79:c0:2b:f0:e1:ca:be:8e:
         15:c3:43:47:fe:e7:0d:55:b6:23:0c:80:d9:8a:eb:de:ca:ba:
         fd:5a:ff:bf:bc:c0:9e:d6:a4:73:4a:8a:07:48:db:58:89:de:
         67:24:29:1b:2d:23:2c:79:dc:d8:6c:eb:d3:82:a5:00:d2:75:
         29:0a:98:b1:07:b3:17:68:4e:ce:a6:c1:3c:bb:1a:65:26:cf:
         92:db:25:c8:3f:7c:50:c1:3c:9f:86:ea:ff:8e:fc:e2:6b:9f:
         02:cb:3a:6d:9e:78:02:c1:64:44:ba:f5:c1:d8:36:43:9d:4e:
         67:ac:1e:aa:0f:c6:fd:b1:09:eb:e8:4e:29:11:7e:dd:90:02:
         a0:16:e1:8e:e1:86:41:ed:3b:12:49:d1:b3:8c:16:6e:55:ff:
         12:ff:b7:8c:39:d6:d1:8a:e9:f0:bd:aa:51:e8:f9:4c:06:fd:
         e8:03:31:22:d7:f3:9a:53:1c:1c:e1:42:86:e1:3f:5f:7d:61:
         dd:a0:1a:88:d0:80:c5:13:93:06:bb:82:49:cb:f3:b0:12:02:
         38:54:5a:8b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmdvySJ/M9RC60KXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk
MGUxNDAzMWEtNGQ2OC00NTJkLWJiZjctYTYxOGYwZmFhMTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EJw0mUDYu1/BNpPGquuWNwec5KrrM5cuUCs
cbXWIQSQ3cuNFa58Kg11SQ9TDBwolbyhnO6a5SFCn0QdU3OWexWRasRMfLlAl3m3
fGmQyCjFtTuuspCLZcAWrdMOS0nYq7Ayrym9SQLqu5FiUuDFJCDcyc0K54hH1rLT
OwUnYWfbSqAnXCQ+iJJG5CIDOyH9SOpRdS5W04gc3SdouzU2zy53i981ExhrIcvb
6lHSnnLhCRA5pKqMBbsJwrOmBB47JIppW0kiCgb/EookgAkYDeY6uc3DCsVC++gM
2a1zcRfXolq2oPgPVjdB6QSv31PrY/Vh6hHaHQXg+Sji9EcGDQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN5ODJ/sz/Tf4FRcOMmiaYOT63opMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTZiMGQ2MTctZDFhZi0z
ZTUxLTg0NGItZDVlMzE1NzI3YzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0LUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEJX0r9LuyxkX/wqRRWDa7Kh0DOo03BnPcD8jVi3oO8XR9dgET85hFSVc
OYb0O3nAK/Dhyr6OFcNDR/7nDVW2IwyA2Yrr3sq6/Vr/v7zAntakc0qKB0jbWIne
ZyQpGy0jLHnc2Gzr04KlANJ1KQqYsQezF2hOzqbBPLsaZSbPktslyD98UME8n4bq
/4784mufAss6bZ54AsFkRLr1wdg2Q51OZ6weqg/G/bEJ6+hOKRF+3ZACoBbhjuGG
Qe07EknRs4wWblX/Ev+3jDnW0Yrp8L2qUej5TAb96AMxItfzmlMcHOFChuE/X31h
3aAaiNCAxROTBruCScvzsBICOFRaiw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:40:29 2025 by rpki-client