Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/80755ad2-291d-3607-a051-91a54d179246.roa
File:                     80755ad2-291d-3607-a051-91a54d179246.roa (raw, json)
Hash identifier:          4HYCeWDgxrBX3hdh7dzcGJ2Y+vP4XNYk06HhwTQWDqU=
Subject key identifier:   BC:19:16:3D:E2:9F:DF:28:A8:09:97:E2:A0:9A:25:65:2E:51:76:CC
Certificate issuer:       /CN=5a060f48-6584-4864-ba80-2bac55c51550
Certificate serial:       010D0C9F43285849D85F936A598F9252DD6FAC80
Authority key identifier: 3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/80755ad2-291d-3607-a051-91a54d179246.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     22363
IP address blocks:        216.168.4.0/24 maxlen: 24
                          216.168.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:93:6a:59:8f:92:52:dd:6f:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a060f48-6584-4864-ba80-2bac55c51550
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=ceda4b1b-e9c2-4044-96b7-862e8f184211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:2d:7e:c6:bd:94:0b:b4:cf:27:8a:00:b5:
                    54:09:46:86:94:d6:44:1c:7f:93:63:2b:ab:c9:55:
                    ca:5a:4b:56:67:0d:18:ac:0f:d2:5f:74:41:7c:c1:
                    98:e0:64:e0:74:7b:71:08:3f:c2:6c:51:de:05:94:
                    e9:86:4a:be:be:8b:e8:bf:9d:9d:64:e0:e6:25:ce:
                    24:8d:2e:57:3d:92:20:86:d9:54:93:aa:b9:c9:6f:
                    25:7c:57:7f:59:93:02:3c:33:3e:48:d9:44:1b:62:
                    9f:33:dc:bf:4d:0a:5d:8c:4b:43:6b:c9:1f:e6:92:
                    b0:0d:b0:98:d5:7b:26:49:78:60:26:16:46:ca:45:
                    1a:9b:71:92:6f:fc:02:23:43:a2:57:65:49:17:88:
                    95:f8:bf:3b:c1:3d:02:ce:68:ce:9f:1e:7c:eb:e6:
                    30:1f:ef:ad:06:ca:31:66:e4:3c:d7:6e:06:33:c1:
                    d1:c6:53:07:a4:92:ee:ed:56:77:88:ab:7c:19:d8:
                    55:0b:26:d3:22:6a:68:81:89:f5:b3:89:be:1b:86:
                    48:31:c8:16:77:23:d6:87:db:21:5c:9c:54:cb:7a:
                    6d:93:25:a0:04:26:38:18:c3:bd:e0:4b:92:b6:6c:
                    f6:49:fe:2c:fa:f0:d4:8b:c5:55:d1:93:d8:a9:41:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:19:16:3D:E2:9F:DF:28:A8:09:97:E2:A0:9A:25:65:2E:51:76:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/80755ad2-291d-3607-a051-91a54d179246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550/5a060f48-6584-4864-ba80-2bac55c51550.crl

            X509v3 Authority Key Identifier:
                keyid:3F:17:D2:5D:8E:77:76:32:3A:86:89:09:DD:A4:67:8D:E7:4C:EF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a060f48-6584-4864-ba80-2bac55c51550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:a4:9a:b4:fa:df:2c:15:d0:46:ad:34:d3:2a:74:2d:ed:
         c9:39:1e:a7:b1:95:3c:f9:93:17:17:4b:08:f7:5a:71:c9:68:
         c3:84:34:1c:e1:04:02:71:d2:25:2a:98:6b:ce:a5:d2:db:99:
         32:14:45:88:72:84:d2:47:6d:ca:c9:1d:c0:8f:24:f9:18:19:
         c8:cd:db:4e:cf:11:4f:2f:db:d8:7a:f3:48:d0:33:b8:36:0b:
         b3:16:8c:18:cd:1d:e8:b1:11:41:dc:37:41:35:5b:d1:c2:7f:
         1e:2c:ab:81:d7:28:4d:d1:94:c7:68:bd:2d:bb:b1:31:85:b3:
         01:24:23:5c:06:90:6d:31:86:f0:e3:01:46:ac:ec:1c:a1:2d:
         f5:3b:09:07:6a:2e:33:b9:f1:a8:41:18:a4:47:bb:5b:ff:fd:
         01:9f:5a:54:c2:b2:56:29:ca:b3:19:a9:43:2c:5e:35:f8:89:
         96:31:09:d0:0a:0b:48:7e:9e:72:4b:56:ad:2c:12:3f:c4:1b:
         50:25:91:8e:8b:55:02:fa:80:92:dd:de:99:a7:c6:21:71:dc:
         e9:27:5f:cd:1e:f2:eb:3a:74:48:64:70:9f:f6:ef:2d:5b:36:
         8d:5c:78:ca:92:29:a9:bc:18:2a:67:4e:e6:30:e3:78:da:b0:
         11:90:05:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5NqWY+SUt1vrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWEwNjBmNDgtNjU4NC00ODY0LWJhODAtMmJhYzU1YzUx
NTUwMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
Y2VkYTRiMWItZTljMi00MDQ0LTk2YjctODYyZThmMTg0MjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQstfsa9lAu0zyeKALVUCUaGlNZEHH+TYyur
yVXKWktWZw0YrA/SX3RBfMGY4GTgdHtxCD/CbFHeBZTphkq+vovov52dZODmJc4k
jS5XPZIghtlUk6q5yW8lfFd/WZMCPDM+SNlEG2KfM9y/TQpdjEtDa8kf5pKwDbCY
1XsmSXhgJhZGykUam3GSb/wCI0OiV2VJF4iV+L87wT0CzmjOnx586+YwH++tBsox
ZuQ8124GM8HRxlMHpJLu7VZ3iKt8GdhVCybTImpogYn1s4m+G4ZIMcgWdyPWh9sh
XJxUy3ptkyWgBCY4GMO94EuStmz2Sf4s+vDUi8VV0ZPYqUGvKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLwZFj3in98oqAmX4qCaJWUuUXbMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YTA2
MGY0OC02NTg0LTQ4NjQtYmE4MC0yYmFjNTVjNTE1NTAvODA3NTVhZDItMjkxZC0z
NjA3LWEwNTEtOTFhNTRkMTc5MjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWEwNjBmNDgtNjU4NC00ODY0LWJh
ODAtMmJhYzU1YzUxNTUwLzVhMDYwZjQ4LTY1ODQtNDg2NC1iYTgwLTJiYWM1NWM1
MTU1MC5jcmwwHwYDVR0jBBgwFoAUPxfSXY53djI6hokJ3aRnjedM7wwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81YTA2MGY0OC02NTg0LTQ4NjQtYmE4MC0yYmFj
NTVjNTE1NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KgEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADnEpJq0+t8sFdBGrTTTKnQt7ck5HqexlTz5kxcXSwj3WnHJaMOENBzh
BAJx0iUqmGvOpdLbmTIURYhyhNJHbcrJHcCPJPkYGcjN207PEU8v29h680jQM7g2
C7MWjBjNHeixEUHcN0E1W9HCfx4sq4HXKE3RlMdovS27sTGFswEkI1wGkG0xhvDj
AUas7ByhLfU7CQdqLjO58ahBGKRHu1v//QGfWlTCslYpyrMZqUMsXjX4iZYxCdAK
C0h+nnJLVq0sEj/EG1AlkY6LVQL6gJLd3pmnxiFx3OknX80e8us6dEhkcJ/27y1b
No1ceMqSKam8GCpnTuYw43jasBGQBRk=
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:32:38 2025 by rpki-client