Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d0a75ca1-051f-369c-b105-552f8ae90755.roa
File:                     d0a75ca1-051f-369c-b105-552f8ae90755.roa (raw, json)
Hash identifier:          EOYMvUYpqG7hbCVTI2vYu17NlaahX7N3F+2kUx4DTdE=
Subject key identifier:   48:05:FE:36:CC:90:9E:44:55:E9:C2:63:80:29:B7:58:AB:8F:66:E8
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285849AA4F6826ECE2C34742901D20
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d0a75ca1-051f-369c-b105-552f8ae90755.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     54994
IP address blocks:        174.35.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:68:26:ec:e2:c3:47:42:90:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=606d38ac-42c5-4d90-94f5-333698b08595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:61:e8:86:b4:70:b3:df:44:e2:2c:22:0b:84:
                    42:23:2b:7a:97:46:66:5b:0a:ad:a3:d2:a0:ec:cf:
                    d3:70:24:4a:de:6f:b6:25:32:fd:85:c6:8c:74:6a:
                    da:e2:4d:19:16:e4:2c:2b:88:15:76:b7:07:ad:ae:
                    87:04:3f:6a:ac:1b:d5:61:30:75:55:30:aa:a6:8d:
                    72:b4:33:cd:94:fa:fe:da:89:9e:64:d7:a9:36:0a:
                    b6:fb:59:d2:ba:9d:3f:d1:0b:f8:03:ec:50:89:b5:
                    6d:cf:f9:82:c4:cb:f6:cf:17:a4:cb:00:32:a0:68:
                    b1:a3:c6:7e:58:69:90:c3:ee:07:c3:bf:1f:27:b6:
                    e1:7f:8b:7f:4f:4e:10:76:8a:3f:32:22:6b:8e:7b:
                    d4:15:10:63:41:25:e6:fb:7d:68:1d:65:55:ef:ee:
                    81:64:34:40:60:81:27:f8:df:6f:33:68:5c:76:02:
                    a4:bb:60:46:4f:71:ab:88:09:e2:f5:2f:3d:52:c8:
                    ee:1a:f0:f7:66:38:ce:40:96:ff:15:92:75:95:9a:
                    75:eb:89:1a:fd:f9:c5:99:46:ca:6b:65:37:3e:a8:
                    b3:ff:ef:10:df:66:6a:85:12:2b:70:ba:8d:ba:d8:
                    3e:ca:e5:ef:43:c6:6c:45:05:6d:ce:19:33:82:20:
                    97:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:05:FE:36:CC:90:9E:44:55:E9:C2:63:80:29:B7:58:AB:8F:66:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d0a75ca1-051f-369c-b105-552f8ae90755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a9:99:aa:18:14:92:fb:73:71:d4:8c:f9:6d:ba:3b:8f:2d:
         2a:41:c0:b8:51:97:61:1a:aa:3c:a3:b1:f6:d2:79:18:be:08:
         28:ba:71:d1:91:16:b9:89:f9:73:82:31:95:ec:45:62:15:61:
         a2:8d:2e:b8:77:16:50:b9:00:d3:fc:af:33:5b:8a:ea:7f:a8:
         72:ef:9a:26:18:10:c5:00:ac:84:74:7d:d6:1b:53:3f:0d:79:
         71:6f:59:f7:17:e8:e8:c2:32:e8:1b:09:ed:8d:14:81:0b:ae:
         d6:5f:be:ad:90:4f:ce:d9:27:db:c1:5c:a5:a7:ab:0d:ba:5d:
         3c:8a:a3:a3:e2:13:9f:0a:d4:ac:44:fb:d8:7c:11:8c:f6:3f:
         4a:0c:07:6d:00:84:c3:fb:cb:df:f4:81:a8:51:ef:6e:2d:a8:
         02:e0:71:07:2a:ac:11:4b:25:51:cd:5c:5c:fc:d9:8e:0e:21:
         f8:6d:aa:29:52:67:c7:eb:90:4f:4e:05:cf:cf:e7:0f:2b:81:
         c5:8f:3b:45:4c:25:ac:b0:ab:33:0a:af:8f:e9:2c:a5:04:f4:
         2c:e7:f1:e3:0a:c0:ae:49:ee:c0:76:2e:01:74:f0:9d:a6:9f:
         75:6f:84:94:56:75:c8:ea:6d:70:db:e6:fd:4e:b9:ae:c9:2a:
         36:63:8f:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2gm7OLDR0KQHSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk
NjA2ZDM4YWMtNDJjNS00ZDkwLTk0ZjUtMzMzNjk4YjA4NTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2HohrRws99E4iwiC4RCIyt6l0ZmWwqto9Kg
7M/TcCRK3m+2JTL9hcaMdGra4k0ZFuQsK4gVdrcHra6HBD9qrBvVYTB1VTCqpo1y
tDPNlPr+2omeZNepNgq2+1nSup0/0Qv4A+xQibVtz/mCxMv2zxekywAyoGixo8Z+
WGmQw+4Hw78fJ7bhf4t/T04Qdoo/MiJrjnvUFRBjQSXm+31oHWVV7+6BZDRAYIEn
+N9vM2hcdgKku2BGT3GriAni9S89UsjuGvD3ZjjOQJb/FZJ1lZp164ka/fnFmUbK
a2U3Pqiz/+8Q32ZqhRIrcLqNutg+yuXvQ8ZsRQVtzhkzgiCXJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgF/jbMkJ5EVenCY4Apt1irj2boMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvZDBhNzVjYTEtMDUxZi0z
NjljLWIxMDUtNTUyZjhhZTkwNzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriMFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFKpmaoYFJL7c3HUjPltujuPLSpBwLhRl2EaqjyjsfbSeRi+CCi6cdGR
FrmJ+XOCMZXsRWIVYaKNLrh3FlC5ANP8rzNbiup/qHLvmiYYEMUArIR0fdYbUz8N
eXFvWfcX6OjCMugbCe2NFIELrtZfvq2QT87ZJ9vBXKWnqw26XTyKo6PiE58K1KxE
+9h8EYz2P0oMB20AhMP7y9/0gahR724tqALgcQcqrBFLJVHNXFz82Y4OIfhtqilS
Z8frkE9OBc/P5w8rgcWPO0VMJaywqzMKr4/pLKUE9Czn8eMKwK5J7sB2LgF08J2m
n3VvhJRWdcjqbXDb5v1Oua7JKjZjj88=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:01:41 2025 by rpki-client