Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f10d358d-bbb1-3d43-8ce3-017933e45c6f.roa
File:                     f10d358d-bbb1-3d43-8ce3-017933e45c6f.roa (raw, json)
Hash identifier:          v05qMif3lHaoNJRCe6rPLzMdWi+ZI77s7F4oaab6dcw=
Subject key identifier:   BF:EF:08:EB:9A:EC:B7:EE:B0:31:DB:A0:4E:CF:6E:58:03:7A:D3:69
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849E7BA6F38EC932304E3F90E80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f10d358d-bbb1-3d43-8ce3-017933e45c6f.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     20454
IP address blocks:        209.188.15.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:6f:38:ec:93:23:04:e3:f9:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=3093d7ca-5204-45b3-ab92-4256065f07f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:be:e2:6b:8b:5c:c1:77:0a:bf:20:f1:bd:0a:
                    5e:43:4a:04:11:3e:13:56:2c:49:69:f6:66:5c:13:
                    32:13:c4:12:52:34:31:c2:57:5a:7e:c2:9a:bc:b3:
                    c2:b1:b2:8a:02:68:7f:b0:e6:8a:fa:63:90:a3:ba:
                    dd:84:3f:14:04:59:96:a7:0f:ee:ce:59:57:85:cc:
                    57:61:10:89:8c:ec:7e:5a:61:23:21:09:3d:0d:25:
                    88:69:00:e9:95:18:a0:db:1e:8e:cd:4d:62:96:2f:
                    14:1e:90:d0:f5:d4:eb:77:a1:e6:84:1b:5a:e8:a2:
                    27:af:d0:76:d2:ce:89:c5:05:57:82:e8:13:c5:90:
                    17:9e:04:9e:a6:8e:05:92:bb:68:3f:5e:5b:a2:4e:
                    ee:30:d2:95:df:37:dd:c9:fa:d6:7f:a0:d2:ac:5a:
                    e8:ca:09:8f:66:bb:05:aa:26:8f:84:c5:0e:a8:28:
                    77:96:25:bd:96:b5:58:ad:7f:31:6b:b3:19:4b:fb:
                    81:fb:3b:ad:ad:58:78:60:ca:10:f0:a4:49:47:1a:
                    84:e9:25:ac:67:8a:61:87:20:b5:aa:dc:6e:8a:71:
                    59:b1:c3:4f:25:be:59:b9:75:99:be:fe:d8:c2:48:
                    50:23:97:89:3e:34:51:14:76:6b:5e:10:67:12:2e:
                    db:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EF:08:EB:9A:EC:B7:EE:B0:31:DB:A0:4E:CF:6E:58:03:7A:D3:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f10d358d-bbb1-3d43-8ce3-017933e45c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a2:5e:40:b4:38:b6:24:46:93:91:a0:1a:49:cd:da:ea:f4:
         77:49:bb:53:76:14:cb:d8:45:2c:e8:16:b8:5c:eb:dc:59:36:
         37:d1:40:e1:15:3f:d8:4c:02:40:d2:a1:5f:81:e8:c4:6a:2d:
         24:e0:58:43:07:b2:3f:91:bc:fc:c8:56:92:fc:43:18:65:b2:
         22:e0:f1:21:2c:b1:1c:0c:7e:c3:12:2c:85:4e:6b:07:a4:4d:
         70:d2:a4:da:03:de:e2:cf:9c:e1:84:8a:a4:96:1e:4c:d7:52:
         bb:c5:14:e8:41:f3:77:79:ee:2b:ed:68:c4:c5:f2:3c:ac:94:
         6b:12:a1:c0:ee:4b:81:c8:c5:8b:1b:a6:d7:d9:e7:1b:70:eb:
         10:5f:ea:1b:bf:ad:54:17:36:fc:14:aa:ba:18:b7:43:52:75:
         29:d2:37:1f:57:4d:67:3d:30:c2:1f:fb:5d:7f:ff:dc:b3:8e:
         62:df:97:70:89:ee:df:e8:6b:b9:15:43:87:70:f7:a8:15:05:
         d6:00:33:8e:a0:f7:a6:6c:3d:46:f5:31:3d:fc:f4:04:90:41:
         fc:e8:18:45:e3:03:ea:8a:5f:8f:74:21:57:89:d7:ee:ed:58:
         cd:07:b4:8c:2e:70:eb:71:23:27:79:ea:f0:9e:d8:25:28:2f:
         f7:64:3c:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnum847JMjBOP5DoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
MzA5M2Q3Y2EtNTIwNC00NWIzLWFiOTItNDI1NjA2NWYwN2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu77ia4tcwXcKvyDxvQpeQ0oEET4TVixJafZm
XBMyE8QSUjQxwldafsKavLPCsbKKAmh/sOaK+mOQo7rdhD8UBFmWpw/uzllXhcxX
YRCJjOx+WmEjIQk9DSWIaQDplRig2x6OzU1ili8UHpDQ9dTrd6HmhBta6KInr9B2
0s6JxQVXgugTxZAXngSepo4FkrtoP15bok7uMNKV3zfdyfrWf6DSrFroygmPZrsF
qiaPhMUOqCh3liW9lrVYrX8xa7MZS/uB+zutrVh4YMoQ8KRJRxqE6SWsZ4phhyC1
qtxuinFZscNPJb5ZuXWZvv7YwkhQI5eJPjRRFHZrXhBnEi7b3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/vCOua7LfusDHboE7PblgDetNpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjEwZDM1OGQtYmJiMS0z
ZDQzLThjZTMtMDE3OTMzZTQ1YzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bwPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByiXkC0OLYkRpORoBpJzdrq9HdJu1N2FMvYRSzoFrhc69xZNjfRQOEV
P9hMAkDSoV+B6MRqLSTgWEMHsj+RvPzIVpL8QxhlsiLg8SEssRwMfsMSLIVOawek
TXDSpNoD3uLPnOGEiqSWHkzXUrvFFOhB83d57ivtaMTF8jyslGsSocDuS4HIxYsb
ptfZ5xtw6xBf6hu/rVQXNvwUqroYt0NSdSnSNx9XTWc9MMIf+11//9yzjmLfl3CJ
7t/oa7kVQ4dw96gVBdYAM46g96ZsPUb1MT389ASQQfzoGEXjA+qKX490IVeJ1+7t
WM0HtIwucOtxIyd56vCe2CUoL/dkPHQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:49:05 2025 by rpki-client