Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa
File:                     b403408d-4926-31d4-9850-4a8d70ac0328.roa (raw, json)
Hash identifier:          QhXBuY6oydzdo1+lix6QBi6CLx6Pf0Ge0S2GV7pS6sA=
Subject key identifier:   A2:77:B3:46:EA:7A:DE:A1:ED:C5:4F:2B:FF:59:6B:72:2F:30:A8:8B
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F43285849F17FC544E9073547CD4F7610
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     398427
IP address blocks:        185.165.213.0/24 maxlen: 24
                          185.165.214.0/24 maxlen: 24
                          185.165.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c5:44:e9:07:35:47:cd:4f:76:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=9ba2df3a-e692-465e-a16e-28412c87453b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:53:18:d6:61:15:47:3d:5f:2f:92:2b:5d:ed:
                    2e:72:5d:1a:12:3b:fe:89:a5:83:26:a1:5a:b1:9a:
                    61:30:af:de:37:9e:fc:48:63:d1:b5:9a:e8:d0:6f:
                    68:6f:b6:7d:1e:14:9d:40:21:4f:ca:4b:5e:84:57:
                    5e:15:c8:17:14:d0:28:7b:bb:f8:67:c8:4a:db:00:
                    08:07:25:0b:5c:76:7d:65:1a:af:dd:ba:4a:a3:56:
                    e3:c5:54:23:4f:19:47:7d:8e:74:29:00:ca:b7:14:
                    7e:24:93:b8:49:60:c1:6f:84:53:11:2d:db:15:c8:
                    72:83:33:c8:62:b6:02:bc:d6:ae:f9:28:40:10:a4:
                    1e:0c:1a:13:f7:b8:ce:46:d2:06:89:0d:15:fe:60:
                    e5:34:5c:4e:bc:ae:7a:2c:58:69:dc:ec:af:42:a2:
                    cd:9e:8d:9b:98:3d:76:95:dd:52:f9:91:9b:57:ca:
                    db:e7:4a:ce:a4:7a:e6:81:d3:db:51:8d:0d:be:ed:
                    7b:71:3c:62:41:07:77:49:d4:a9:19:6a:3f:99:a0:
                    b6:64:4e:29:4e:60:17:94:9e:9a:99:7d:ed:73:e4:
                    ca:df:2d:98:9b:09:f1:b5:87:39:f2:5b:16:fc:34:
                    e0:77:ea:b1:db:df:f6:e1:8f:ed:7f:1f:ea:6d:61:
                    ff:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:77:B3:46:EA:7A:DE:A1:ED:C5:4F:2B:FF:59:6B:72:2F:30:A8:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.165.213.0-185.165.215.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:11:93:d4:5d:5e:59:a2:08:b9:f8:3f:02:94:08:21:cd:54:
         7a:49:97:71:1d:0b:4a:41:0d:4b:c5:b7:64:d5:22:ac:c1:1e:
         ab:4a:6d:31:5c:f3:cc:d9:12:e1:23:32:3c:80:50:35:fc:c7:
         56:45:48:14:99:7d:11:55:77:15:aa:cf:9f:bc:72:29:55:25:
         38:64:8c:c3:46:8c:02:7b:b7:72:c3:ee:bf:e3:c6:46:c0:87:
         ed:79:60:72:e7:2e:f3:e3:fe:ea:d8:9f:ee:8b:61:75:27:59:
         b5:5c:93:da:79:c0:a7:05:d0:23:b7:55:df:3a:6b:43:eb:a5:
         82:ab:7b:d8:dd:90:4b:38:68:a6:c3:57:6e:49:8f:98:54:58:
         c6:dd:a7:da:30:2a:e8:00:e1:cd:fe:bb:3a:25:44:2f:a1:19:
         2a:74:f5:dc:ec:33:28:9d:1c:ed:1f:93:90:84:ca:c4:c8:ff:
         f8:33:7c:7b:cb:34:27:6a:d8:b1:d2:57:aa:76:ae:66:f8:db:
         63:c1:fd:af:f0:b0:75:60:3a:94:cd:0b:6a:49:03:9e:02:57:
         0b:53:75:2a:c5:c7:14:5b:51:2d:43:98:46:0f:f8:c9:70:79:
         9a:01:8a:0c:a2:66:4d:c3:6a:42:ed:de:69:d2:49:5a:42:4a:
         d8:19:6c:6d
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEnxf8VE6Qc1R81PdhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5
OTVkMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
OWJhMmRmM2EtZTY5Mi00NjVlLWExNmUtMjg0MTJjODc0NTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVMY1mEVRz1fL5IrXe0ucl0aEjv+iaWDJqFa
sZphMK/eN578SGPRtZro0G9ob7Z9HhSdQCFPyktehFdeFcgXFNAoe7v4Z8hK2wAI
ByULXHZ9ZRqv3bpKo1bjxVQjTxlHfY50KQDKtxR+JJO4SWDBb4RTES3bFchygzPI
YrYCvNau+ShAEKQeDBoT97jORtIGiQ0V/mDlNFxOvK56LFhp3OyvQqLNno2bmD12
ld1S+ZGbV8rb50rOpHrmgdPbUY0Nvu17cTxiQQd3SdSpGWo/maC2ZE4pTmAXlJ6a
mX3tc+TK3y2YmwnxtYc58lsW/DTgd+qx29/24Y/tfx/qbWH/1wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFKJ3s0bqet6h7cVPK/9Za3IvMKiLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj
NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvYjQwMzQwOGQtNDkyNi0z
MWQ0LTk4NTAtNGE4ZDcwYWMwMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy
MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5
OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0
MTk1OTk5NWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5pdUD
BAO5pdAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAJxGT1F1eWaIIufg/ApQIIc1UekmXcR0LSkENS8W3ZNUi
rMEeq0ptMVzzzNkS4SMyPIBQNfzHVkVIFJl9EVV3FarPn7xyKVUlOGSMw0aMAnu3
csPuv+PGRsCH7Xlgcucu8+P+6tif7othdSdZtVyT2nnApwXQI7dV3zprQ+ulgqt7
2N2QSzhopsNXbkmPmFRYxt2n2jAq6ADhzf67OiVEL6EZKnT13OwzKJ0c7R+TkITK
xMj/+DN8e8s0J2rYsdJXqnauZvjbY8H9r/CwdWA6lM0LakkDngJXC1N1KsXHFFtR
LUOYRg/4yXB5mgGKDKJmTcNqQu3eadJJWkJK2BlsbQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:54:45 2025 by rpki-client