Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e368ec70-4232-3726-a703-f33943637976.roa
File:                     e368ec70-4232-3726-a703-f33943637976.roa (raw, json)
Hash identifier:          uPnLAicSbdo2iUgSOVlEDGALzVL3VtyrsQS/maQ2loM=
Subject key identifier:   08:5A:66:D6:E7:FC:47:7F:FC:1C:54:F3:B8:48:A4:FD:72:75:11:71
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584AA3083DC98E456B5CF59FAE00
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e368ec70-4232-3726-a703-f33943637976.roa
Signing time:             Fri 25 Jul 2025 15:14:08 +0000
ROA not before:           Fri 25 Jul 2025 15:14:08 +0000
ROA not after:            Thu 23 Oct 2025 15:14:08 +0000
asID:                     153371
IP address blocks:        209.178.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a3:08:3d:c9:8e:45:6b:5c:f5:9f:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Jul 25 15:14:08 2025 GMT
            Not After : Oct 23 15:14:08 2025 GMT
        Subject: CN=694520ac-6b1f-466d-913b-90c2c7094315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:eb:47:7a:eb:21:44:7f:52:8b:1c:6e:2e:52:
                    90:97:73:0b:41:94:55:b6:1d:2c:b5:77:41:2d:60:
                    83:44:7d:36:c9:f4:79:49:cd:6c:ea:68:cf:69:31:
                    42:9b:6f:82:a1:cd:df:5b:d3:04:5b:2d:be:d1:29:
                    23:7e:9e:03:03:95:75:39:c6:9c:1e:68:61:ac:17:
                    60:ee:05:20:31:af:45:d5:d2:a8:61:f2:f2:1a:6e:
                    f1:6e:df:71:d6:53:e5:b7:cb:49:19:89:bb:13:64:
                    f1:9e:a3:bc:29:a0:b1:bd:f3:cd:3b:ee:0f:b9:b7:
                    a9:37:cc:ed:37:3b:28:ee:e6:dc:9c:5c:2e:4f:70:
                    6a:5b:60:d5:20:a9:8f:e9:05:04:ee:12:34:f2:04:
                    07:54:28:f9:18:e6:2c:f6:74:fb:05:04:9e:23:0f:
                    bb:a7:2b:4b:e2:a0:ad:67:c6:10:5b:de:3b:2b:29:
                    ef:00:e6:43:a6:13:aa:f1:2e:e8:40:91:5a:73:98:
                    b1:08:24:c3:cf:87:2e:1e:36:5f:55:26:62:22:b4:
                    88:50:d2:83:57:12:9a:53:d0:37:0f:c3:ad:af:96:
                    b8:1c:5c:c8:f0:9c:db:ee:88:61:76:4f:82:88:3a:
                    3d:61:dd:c6:e8:5b:42:bb:4b:91:ea:fe:e0:2a:23:
                    0c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5A:66:D6:E7:FC:47:7F:FC:1C:54:F3:B8:48:A4:FD:72:75:11:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e368ec70-4232-3726-a703-f33943637976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:47:65:62:1f:1a:69:46:68:4c:48:7d:a0:67:10:97:6a:a6:
         f5:3a:18:73:c6:f9:5e:ba:22:7d:4f:d6:13:8f:7f:c1:8d:1e:
         95:69:04:e8:19:30:9a:0c:ff:43:ea:b1:f8:5d:64:07:ac:ac:
         cc:56:29:ad:0b:4d:14:8b:85:cd:4d:69:b5:2d:95:ab:ed:31:
         1a:7e:16:62:d3:bf:aa:f4:2c:42:f8:52:65:73:a0:87:5c:3a:
         03:c2:31:bf:ab:fe:9c:d8:48:64:d6:ac:98:19:bf:d7:e1:30:
         81:ee:e3:4a:20:3c:b0:d5:69:9a:a9:e9:65:d2:c1:2f:76:43:
         c4:9f:ad:5e:cf:80:e9:0e:d0:a4:af:4f:2a:3d:46:35:a6:14:
         db:88:66:0b:ca:33:d1:50:88:90:d8:d9:48:dc:c0:65:20:c5:
         e2:58:f9:82:63:1a:29:6b:b2:e2:0b:19:3e:4c:d3:4f:47:8a:
         c2:ba:d1:a6:ef:29:4a:71:bb:51:97:2e:e9:ff:7c:ba:54:e7:
         2f:52:36:1e:76:5f:40:31:fd:29:09:07:95:2c:04:93:d8:ae:
         9f:4e:53:f4:2c:7d:df:7f:e8:03:88:92:4e:3a:df:1c:ba:58:
         9f:0b:fb:25:48:34:b1:71:8c:dc:5f:70:51:3b:d0:48:ff:9b:
         73:67:a7:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqjCD3JjkVrXPWfrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTI1MDcyNTE1MTQwOFoXDTI1MTAyMzE1MTQwOFowLzEtMCsGA1UEAxMk
Njk0NTIwYWMtNmIxZi00NjZkLTkxM2ItOTBjMmM3MDk0MzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+tHeushRH9SixxuLlKQl3MLQZRVth0stXdB
LWCDRH02yfR5Sc1s6mjPaTFCm2+Coc3fW9MEWy2+0Skjfp4DA5V1OcacHmhhrBdg
7gUgMa9F1dKoYfLyGm7xbt9x1lPlt8tJGYm7E2TxnqO8KaCxvfPNO+4PubepN8zt
Nzso7ubcnFwuT3BqW2DVIKmP6QUE7hI08gQHVCj5GOYs9nT7BQSeIw+7pytL4qCt
Z8YQW947KynvAOZDphOq8S7oQJFac5ixCCTDz4cuHjZfVSZiIrSIUNKDVxKaU9A3
D8Otr5a4HFzI8Jzb7ohhdk+CiDo9Yd3G6FtCu0uR6v7gKiMMtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAhaZtbn/Ed//BxU87hIpP1ydRFxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZTM2OGVjNzAtNDIzMi0z
NzI2LWE3MDMtZjMzOTQzNjM3OTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHBHZWIfGmlGaExIfaBnEJdqpvU6GHPG+V66In1P1hOPf8GNHpVpBOgZ
MJoM/0PqsfhdZAesrMxWKa0LTRSLhc1NabUtlavtMRp+FmLTv6r0LEL4UmVzoIdc
OgPCMb+r/pzYSGTWrJgZv9fhMIHu40ogPLDVaZqp6WXSwS92Q8SfrV7PgOkO0KSv
Tyo9RjWmFNuIZgvKM9FQiJDY2UjcwGUgxeJY+YJjGilrsuILGT5M009HisK60abv
KUpxu1GXLun/fLpU5y9SNh52X0Ax/SkJB5UsBJPYrp9OU/Qsfd9/6AOIkk463xy6
WJ8L+yVINLFxjNxfcFE70Ej/m3Nnp+k=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:20 2025 by rpki-client