Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa
File:                     e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa (raw, json)
Hash identifier:          uYeputOaPzCr0ylhwVaXwnVC2B2JqqnZO2L2yrLO8NY=
Subject key identifier:   9F:90:4F:18:B2:A3:0B:80:C0:49:9E:A1:4E:35:91:E9:5B:1A:EF:44
Certificate issuer:       /CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
Certificate serial:       010D0C9F43285849C0A4D3D3A241F97D5853D010
Authority key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     62827
IP address blocks:        158.51.232.0/22 maxlen: 22
                          198.17.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:d3:d3:a2:41:f9:7d:58:53:d0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=cb3b1f75-9cd8-405e-a828-6a2fdaa18062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:d9:0c:d4:fd:92:cf:1e:2d:2f:bb:05:c8:
                    52:54:0a:68:d0:c8:b6:57:20:9e:30:90:03:9b:24:
                    36:31:43:ea:73:4e:c9:8f:7b:26:38:71:be:0c:cf:
                    db:21:39:62:8d:4f:f7:e1:5d:4c:6e:a1:eb:20:75:
                    96:ba:2e:6b:ee:cf:f7:ee:06:f0:17:43:5c:4f:b5:
                    df:52:7a:82:ea:dc:cc:e2:89:26:87:cf:3d:99:27:
                    1b:a0:da:95:3d:70:52:51:27:27:58:13:0d:c7:f7:
                    aa:a2:49:dc:3c:3e:79:33:55:fe:ef:3b:5e:f7:dc:
                    fa:90:83:b7:4a:a2:5a:1f:5d:26:94:fd:4a:b9:db:
                    2f:be:61:ca:b6:41:c2:86:2c:98:24:c8:4c:3b:61:
                    3b:41:0f:7b:6f:e8:56:e2:2d:c4:a6:5b:b6:a7:cc:
                    e1:7a:10:cc:78:b0:78:4b:7f:3e:6c:60:f5:b1:f0:
                    21:b9:0e:2c:69:7f:1e:80:26:36:e1:5f:2a:69:af:
                    4c:0e:de:b0:1e:2a:bc:c5:02:b5:b1:80:6d:bf:2b:
                    16:57:5c:9b:20:57:60:bd:0a:82:20:a3:85:95:e6:
                    6e:e6:b5:0f:06:c6:af:a4:35:ee:57:c1:a2:76:c7:
                    38:4a:48:5d:5c:e7:fc:b8:16:2b:73:5c:e3:e0:37:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:90:4F:18:B2:A3:0B:80:C0:49:9E:A1:4E:35:91:E9:5B:1A:EF:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl

            X509v3 Authority Key Identifier:
                keyid:7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.232.0/22
                  198.17.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:16:2d:bf:3a:af:9b:60:14:2d:02:6a:3b:7e:cb:0c:42:
         91:6d:1c:11:04:af:a2:f8:c1:33:b5:ff:10:61:d4:4a:e1:be:
         dc:71:d7:3c:11:3c:f1:65:9e:1f:3f:0a:3f:07:53:a0:fa:de:
         2b:d7:ee:aa:7a:bb:d7:67:a4:54:dd:6c:af:15:42:49:5c:12:
         69:ff:fb:d8:84:a9:fa:cd:cd:7f:13:32:8e:6c:a2:bc:11:cd:
         1a:eb:4c:c1:11:b6:7b:24:8d:38:ff:fe:ac:5c:c8:3f:9a:2a:
         bd:6c:2b:76:2e:56:c6:94:cd:83:f0:ab:ee:3a:50:cc:d7:95:
         79:72:06:98:29:f6:f3:b8:52:35:71:a9:80:a6:7e:32:82:94:
         4c:af:93:42:b0:1b:4b:51:32:71:77:03:86:5b:84:94:aa:81:
         92:c1:eb:60:23:d4:ee:b5:13:6b:1c:26:71:ce:57:93:30:10:
         0f:ec:54:37:8f:d5:9d:69:d8:47:d2:03:6a:fc:18:10:b1:ea:
         a7:6d:e2:c1:59:ad:41:ec:8a:2f:a3:35:ad:60:78:ae:b6:23:
         af:03:b8:f9:12:e7:d6:2e:0b:ef:51:e3:0a:2d:b0:3a:58:78:
         a2:b0:7a:98:33:31:d4:56:fa:b8:a6:d3:d0:ac:cf:7e:9a:de:
         19:e2:34:99
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnApNPTokH5fVhT0BAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjA0YmM3ZmQtNTMzNC00NWVlLTlhNDgtM2ZmYjExN2Fk
NGYzMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk
Y2IzYjFmNzUtOWNkOC00MDVlLWE4MjgtNmEyZmRhYTE4MDYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK/ZDNT9ks8eLS+7BchSVApo0Mi2VyCeMJAD
myQ2MUPqc07Jj3smOHG+DM/bITlijU/34V1MbqHrIHWWui5r7s/37gbwF0NcT7Xf
UnqC6tzM4okmh889mScboNqVPXBSUScnWBMNx/eqokncPD55M1X+7zte99z6kIO3
SqJaH10mlP1KudsvvmHKtkHChiyYJMhMO2E7QQ97b+hW4i3Eplu2p8zhehDMeLB4
S38+bGD1sfAhuQ4saX8egCY24V8qaa9MDt6wHiq8xQK1sYBtvysWV1ybIFdgvQqC
IKOFleZu5rUPBsavpDXuV8Gidsc4SkhdXOf8uBYrc1zj4DdImQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJ+QTxiyowuAwEmeoU41kelbGu9EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRi
YzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZiMTE3YWQ0ZjMvZTU2OThhYjctMmEwZi0z
NDk1LThmY2ItYjE2Y2FiZWRjMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjA0YmM3ZmQtNTMzNC00NWVlLTlh
NDgtM2ZmYjExN2FkNGYzL2YwNGJjN2ZkLTUzMzQtNDVlZS05YTQ4LTNmZmIxMTdh
ZDRmMy5jcmwwHwYDVR0jBBgwFoAUe2AW/SJ5rexO1KDn29yN44VzpwYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRiYzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZi
MTE3YWQ0ZjMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCnjPoAwQA
xhHTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACuLFi2/Oq+bYBQtAmo7fssMQpFtHBEEr6L4wTO1/xBh1Erh
vtxx1zwRPPFlnh8/Cj8HU6D63ivX7qp6u9dnpFTdbK8VQklcEmn/+9iEqfrNzX8T
Mo5sorwRzRrrTMERtnskjTj//qxcyD+aKr1sK3YuVsaUzYPwq+46UMzXlXlyBpgp
9vO4UjVxqYCmfjKClEyvk0KwG0tRMnF3A4ZbhJSqgZLB62Aj1O61E2scJnHOV5Mw
EA/sVDeP1Z1p2EfSA2r8GBCx6qdt4sFZrUHsii+jNa1geK62I68DuPkS59YuC+9R
4wotsDpYeKKwepgzMdRW+rim09Csz36a3hniNJk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:53 2025 by rpki-client