Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f5bc50c1-b692-35fc-824c-7d516df01991.roa
File:                     f5bc50c1-b692-35fc-824c-7d516df01991.roa (raw, json)
Hash identifier:          X6XwHjdjrk0DVWxMPz6ZRsF/KTDk5jrjTTwHj0Ov8Oc=
Subject key identifier:   87:C9:D6:C7:C5:FC:91:56:F4:9C:A1:EF:AF:93:D2:31:F9:3A:33:9D
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584A10354224B9B0B9C89221FD00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f5bc50c1-b692-35fc-824c-7d516df01991.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     9009
IP address blocks:        141.193.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:42:24:b9:b0:b9:c8:92:21:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=b9520e5e-cb1c-4fb0-8578-d3e77e079771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:15:c6:de:ef:7b:bc:f5:8e:98:56:3b:7c:90:
                    22:83:a7:57:2f:5d:27:63:5c:76:49:66:db:31:e8:
                    11:18:88:7e:00:9e:b4:c3:9f:d1:b7:a0:9b:d3:bd:
                    d2:93:81:a4:23:9e:84:b1:04:52:ff:ea:bb:85:93:
                    67:d3:a1:9a:90:fe:83:e2:80:33:75:82:15:32:2b:
                    dc:26:89:93:5f:6f:e0:1c:46:dc:26:1d:d5:92:ef:
                    2f:ae:91:e6:9f:8e:02:3a:87:06:5c:c5:1f:d1:d9:
                    a8:2a:79:09:65:9b:e2:56:c4:c8:d7:32:21:24:ac:
                    f0:34:72:05:46:02:62:80:3a:06:05:37:7c:a7:68:
                    91:6e:ee:83:5e:0c:b1:15:20:47:05:52:9f:61:7f:
                    3d:5a:fd:87:fe:53:aa:08:27:44:50:d7:e0:8d:9c:
                    e5:34:3d:21:61:5f:8d:65:ac:64:09:71:13:82:9d:
                    90:cc:ef:4a:46:8b:9a:a9:49:2f:20:20:a8:c6:de:
                    09:f1:18:51:fb:8c:01:43:80:1a:9f:de:d3:51:16:
                    c0:a2:2c:8d:23:ba:e0:3c:39:b3:92:88:7d:76:4c:
                    14:75:f6:02:fa:76:f0:77:da:cd:ae:a0:ec:1d:9d:
                    48:56:fb:d6:f8:46:f3:68:b5:6f:3b:2d:ed:a7:b5:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C9:D6:C7:C5:FC:91:56:F4:9C:A1:EF:AF:93:D2:31:F9:3A:33:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f5bc50c1-b692-35fc-824c-7d516df01991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:c0:f7:c1:46:ea:26:a2:39:a6:eb:35:13:40:2b:40:ed:d9:
         22:d4:5f:01:8d:d3:39:69:5f:2a:4a:af:66:68:96:1c:72:36:
         81:c5:52:52:19:d5:d1:89:79:45:c2:46:7d:c2:c2:b5:ee:0c:
         26:2c:80:55:41:85:f9:f2:14:7f:e9:74:8e:38:31:71:bf:ce:
         47:48:b6:2d:30:31:50:ff:62:d3:48:d8:25:22:eb:88:3b:f9:
         95:35:fd:36:00:3a:fd:b4:c2:0f:49:01:3d:c1:df:15:60:7e:
         c4:26:34:c8:59:89:68:e0:da:8b:18:c9:e6:b2:d6:a1:e4:26:
         10:52:d7:5d:30:a9:1b:80:a4:a5:1a:bc:b2:04:e4:92:5b:32:
         a8:b7:cb:50:f3:15:87:10:28:d7:c5:ee:6a:1e:d5:6c:e8:b3:
         e6:14:61:fa:a4:53:ce:bd:fb:aa:ca:0e:76:f5:c6:b7:56:52:
         42:9d:1d:9b:a8:54:c9:85:60:e7:89:da:42:1a:50:4e:7a:8a:
         2b:5e:76:e3:56:f7:87:21:73:b3:e7:33:ad:bf:9c:ab:d8:72:
         45:77:e8:f9:a7:93:d8:11:52:8b:10:0c:fd:3c:01:e3:29:33:
         b6:9e:74:ca:fe:a7:e5:ca:d4:d2:e0:36:5c:42:6c:a8:d1:3f:
         f5:25:b1:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUIkubC5yJIh/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk
Yjk1MjBlNWUtY2IxYy00ZmIwLTg1NzgtZDNlNzdlMDc5NzcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhXG3u97vPWOmFY7fJAig6dXL10nY1x2SWbb
MegRGIh+AJ60w5/Rt6Cb073Sk4GkI56EsQRS/+q7hZNn06GakP6D4oAzdYIVMivc
JomTX2/gHEbcJh3Vku8vrpHmn44COocGXMUf0dmoKnkJZZviVsTI1zIhJKzwNHIF
RgJigDoGBTd8p2iRbu6DXgyxFSBHBVKfYX89Wv2H/lOqCCdEUNfgjZzlND0hYV+N
ZaxkCXETgp2QzO9KRouaqUkvICCoxt4J8RhR+4wBQ4Aan97TURbAoiyNI7rgPDmz
koh9dkwUdfYC+nbwd9rNrqDsHZ1IVvvW+EbzaLVvOy3tp7W7+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfJ1sfF/JFW9Jyh76+T0jH5OjOdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZjViYzUwYzEtYjY5Mi0z
NWZjLTgyNGMtN2Q1MTZkZjAxOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcHLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHA98FG6iaiOabrNRNAK0Dt2SLUXwGN0zlpXypKr2ZolhxyNoHFUlIZ
1dGJeUXCRn3CwrXuDCYsgFVBhfnyFH/pdI44MXG/zkdIti0wMVD/YtNI2CUi64g7
+ZU1/TYAOv20wg9JAT3B3xVgfsQmNMhZiWjg2osYyeay1qHkJhBS110wqRuApKUa
vLIE5JJbMqi3y1DzFYcQKNfF7moe1Wzos+YUYfqkU869+6rKDnb1xrdWUkKdHZuo
VMmFYOeJ2kIaUE56iiteduNW94chc7PnM62/nKvYckV36Pmnk9gRUosQDP08AeMp
M7aedMr+p+XK1NLgNlxCbKjRP/Ulsc0=
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:01:03 2025 by rpki-client