Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/cb96bbd6-5e71-3fc0-9217-86d9262e720e.roa
File:                     cb96bbd6-5e71-3fc0-9217-86d9262e720e.roa (raw, json)
Hash identifier:          BnQ5xYM4FYB4tGQM8NjwKgndWDCME6xD+WUbvqr27fM=
Subject key identifier:   E3:40:A2:BB:17:67:B5:0A:99:FF:BD:FB:78:37:3B:A5:86:49:66:54
Certificate issuer:       /CN=6fc3741b-deff-4ecf-bc37-262b20e1e278
Certificate serial:       010D0C9F43285849E7BA6DDBCCD6F83D96E4AFC0
Authority key identifier: E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/cb96bbd6-5e71-3fc0-9217-86d9262e720e.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        168.100.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:6d:db:cc:d6:f8:3d:96:e4:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc3741b-deff-4ecf-bc37-262b20e1e278
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=13c8f918-71b7-49cd-ae2a-bb4bd797ed25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f5:69:b2:3d:c9:1f:89:df:a1:47:c5:6d:e8:
                    11:07:ac:90:2c:b4:cd:32:9f:9e:87:96:c6:03:ab:
                    95:f7:29:01:35:4d:f6:9f:01:81:28:f5:79:68:92:
                    73:2b:03:72:08:ec:35:85:f4:57:22:53:ec:13:78:
                    29:92:3d:21:b7:d0:d9:1f:c5:16:cd:f1:d6:93:ff:
                    c1:84:a4:1c:c9:2b:25:d7:b5:cd:8f:3f:4d:6e:e6:
                    34:4d:b9:08:73:1b:f5:7f:9b:06:b7:5e:58:f6:b6:
                    57:2e:5a:bd:b5:b4:69:db:55:92:a9:9d:9c:91:1e:
                    95:f3:f1:61:a9:7a:b5:ad:e1:07:cf:d6:6d:8a:32:
                    d5:f0:6a:9e:b5:24:82:44:e1:d4:d3:bd:d1:de:79:
                    42:05:c4:84:ef:47:49:83:65:64:96:99:fd:3e:4e:
                    46:74:5e:89:65:14:36:e8:eb:e0:49:35:b3:03:36:
                    a4:ab:74:80:79:35:c8:81:28:1c:a5:cc:fc:cf:47:
                    c9:8a:02:94:76:bf:14:35:9c:e5:e6:f7:14:be:bf:
                    2e:71:ee:22:e3:0f:d9:bf:09:bb:44:05:e7:c7:ed:
                    e1:81:0f:52:be:d9:d3:b7:57:36:d2:ee:8d:5d:0a:
                    de:9f:0f:59:e6:7f:c0:24:f4:0b:6c:ab:d8:5d:d5:
                    6e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:40:A2:BB:17:67:B5:0A:99:FF:BD:FB:78:37:3B:A5:86:49:66:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/cb96bbd6-5e71-3fc0-9217-86d9262e720e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl

            X509v3 Authority Key Identifier:
                keyid:E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:76:b4:2c:16:72:9b:87:ef:39:64:85:3b:f1:fb:81:b6:aa:
         f6:18:4a:3c:17:0c:40:d5:1b:46:82:cd:36:54:60:1b:8f:39:
         8f:32:2c:be:3f:11:35:b9:76:86:24:85:a4:f6:fc:af:3b:26:
         7a:c4:78:5d:dc:a9:59:dc:83:ad:82:76:4a:3a:f1:da:cd:c7:
         fa:e4:b3:89:98:90:76:23:cf:92:61:b3:76:d0:11:42:4d:32:
         ff:af:a3:e0:ff:43:3c:1b:a3:cb:73:88:2f:fc:34:54:af:06:
         6b:ea:65:5b:f1:13:55:20:ee:43:cd:76:f3:9a:ee:33:0a:aa:
         15:c6:0e:7b:53:1e:60:c9:d4:0d:c0:78:05:e2:77:2d:4f:6b:
         b7:32:86:79:ec:5c:98:30:54:00:fe:7d:6e:db:65:f5:35:4a:
         6b:6e:83:4f:01:43:92:e8:c9:9d:9a:8d:a5:dc:a1:99:a0:61:
         be:68:0e:30:77:bb:da:f8:ba:70:6f:d4:74:62:0b:ba:11:c6:
         ba:0b:92:ed:48:16:48:42:78:6a:27:35:b0:89:36:90:d2:9a:
         9f:da:9d:bb:f7:b5:71:33:60:09:8f:52:e3:24:c5:54:39:05:
         ed:b2:d6:e3:98:5e:9d:89:86:8e:76:86:13:9a:db:09:16:d7:
         20:c7:53:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnum3bzNb4PZbkr8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmZjMzc0MWItZGVmZi00ZWNmLWJjMzctMjYyYjIwZTFl
Mjc4MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
MTNjOGY5MTgtNzFiNy00OWNkLWFlMmEtYmI0YmQ3OTdlZDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvVpsj3JH4nfoUfFbegRB6yQLLTNMp+eh5bG
A6uV9ykBNU32nwGBKPV5aJJzKwNyCOw1hfRXIlPsE3gpkj0ht9DZH8UWzfHWk//B
hKQcySsl17XNjz9NbuY0TbkIcxv1f5sGt15Y9rZXLlq9tbRp21WSqZ2ckR6V8/Fh
qXq1reEHz9ZtijLV8GqetSSCROHU073R3nlCBcSE70dJg2Vklpn9Pk5GdF6JZRQ2
6OvgSTWzAzakq3SAeTXIgSgcpcz8z0fJigKUdr8UNZzl5vcUvr8uce4i4w/Zvwm7
RAXnx+3hgQ9SvtnTt1c20u6NXQrenw9Z5n/AJPQLbKvYXdVu3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFONAorsXZ7UKmf+9+3g3O6WGSWZUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmMz
NzQxYi1kZWZmLTRlY2YtYmMzNy0yNjJiMjBlMWUyNzgvY2I5NmJiZDYtNWU3MS0z
ZmMwLTkyMTctODZkOTI2MmU3MjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmZjMzc0MWItZGVmZi00ZWNmLWJj
MzctMjYyYjIwZTFlMjc4LzZmYzM3NDFiLWRlZmYtNGVjZi1iYzM3LTI2MmIyMGUx
ZTI3OC5jcmwwHwYDVR0jBBgwFoAU48Ch8+RHuqq9mAhrsX88GNUiBEMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmMzNzQxYi1kZWZmLTRlY2YtYmMzNy0yNjJi
MjBlMWUyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACh2tCwWcpuH7zlkhTvx+4G2qvYYSjwXDEDVG0aCzTZUYBuPOY8yLL4/
ETW5doYkhaT2/K87JnrEeF3cqVncg62Cdko68drNx/rks4mYkHYjz5Jhs3bQEUJN
Mv+vo+D/Qzwbo8tziC/8NFSvBmvqZVvxE1Ug7kPNdvOa7jMKqhXGDntTHmDJ1A3A
eAXidy1Pa7cyhnnsXJgwVAD+fW7bZfU1Smtug08BQ5LoyZ2ajaXcoZmgYb5oDjB3
u9r4unBv1HRiC7oRxroLku1IFkhCeGonNbCJNpDSmp/anbv3tXEzYAmPUuMkxVQ5
Be2y1uOYXp2Jho52hhOa2wkW1yDHUz8=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:38:29 2025 by rpki-client