Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/e10ed7ed-a460-30b5-8436-83e581cb88dd.roa
File:                     e10ed7ed-a460-30b5-8436-83e581cb88dd.roa (raw, json)
Hash identifier:          RVr7xkG5nClzSQjKsulAewngPkDw09t3n4fT4ccdz0Q=
Subject key identifier:   92:0D:1D:63:5E:67:FC:1B:AA:32:6E:8A:CF:F6:53:A1:4E:01:95:9E
Certificate issuer:       /CN=804758a5-8bfa-463f-a66c-d50aa7237fff
Certificate serial:       010D0C9F43285849FE0FFCB80D6299DA9ECE25A0
Authority key identifier: C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/e10ed7ed-a460-30b5-8436-83e581cb88dd.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     8987
IP address blocks:        150.148.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:fc:b8:0d:62:99:da:9e:ce:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=804758a5-8bfa-463f-a66c-d50aa7237fff
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=4a29fcb7-0051-45ed-a7f7-5b9d7b379c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:62:39:c3:8d:c2:a3:18:ba:53:43:21:1c:
                    b2:4e:9f:ed:8c:20:c1:66:03:10:af:17:9a:14:cc:
                    ac:e8:df:fb:28:42:45:e5:63:db:c2:c3:f5:57:6f:
                    a2:bf:f0:bc:ba:6b:ec:a2:00:c9:f5:62:2e:83:1c:
                    ef:19:cd:d6:68:01:34:a9:17:1c:50:56:8e:7a:8c:
                    ab:3f:22:4c:d0:09:f7:4e:ca:45:62:bb:a2:54:15:
                    de:dc:8e:c6:84:78:bc:7e:3b:c4:72:75:5e:a6:19:
                    ed:97:ac:dc:d2:bd:0a:68:32:92:f9:44:9c:d8:5c:
                    d1:d6:da:27:ef:dc:86:1c:f0:87:79:61:b4:8b:e1:
                    bf:28:61:8d:c1:ac:08:fd:b7:d2:40:c9:8f:3d:71:
                    b0:b1:94:7d:09:70:8d:1a:7b:fa:ef:24:77:73:06:
                    2c:a2:95:e8:c1:0b:b1:df:a2:ea:76:75:43:c6:59:
                    5b:80:33:98:ed:41:5d:48:98:50:07:fb:55:bf:9d:
                    73:d3:e5:e5:e1:d1:b4:c6:b0:87:7a:bf:36:c5:bc:
                    70:39:56:a5:46:f8:d4:2d:eb:a8:37:a5:10:7b:a3:
                    94:14:ee:c9:20:10:bd:27:f3:4c:3f:d3:d8:22:bb:
                    74:dc:50:4b:c0:71:f2:df:02:92:4b:3c:43:6e:62:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0D:1D:63:5E:67:FC:1B:AA:32:6E:8A:CF:F6:53:A1:4E:01:95:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/e10ed7ed-a460-30b5-8436-83e581cb88dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl

            X509v3 Authority Key Identifier:
                keyid:C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.148.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:88:36:cc:ae:10:71:dc:9d:2c:e5:86:1c:a9:93:2c:c8:be:
         63:15:67:8f:d5:80:a6:a3:7e:e7:7b:16:fc:79:bf:4c:18:ad:
         1e:7b:13:11:ea:2e:c9:7f:69:a6:3f:bc:05:3e:e4:96:d3:34:
         ba:39:16:01:8a:d9:2e:5c:77:b4:37:4c:02:03:07:4c:ed:23:
         1e:b9:a7:a0:3e:d8:19:16:c3:0f:fd:0f:23:0d:e1:7a:90:da:
         e5:3f:bf:53:19:98:b6:8f:a6:dc:a2:c5:38:39:eb:12:f6:a5:
         62:18:bc:59:ed:5f:b1:58:f8:1d:ea:6b:dc:c4:88:f1:6a:7f:
         e3:d1:c2:c0:67:29:69:18:f5:80:ae:a9:d3:a9:e9:0c:40:49:
         20:13:97:6b:a7:d5:df:ae:2f:fb:72:8d:d0:d4:e4:d0:48:23:
         f7:a2:9b:17:bc:ef:14:9b:4c:eb:d3:34:3a:77:81:4a:bb:a1:
         ca:44:e3:b4:aa:da:f4:93:5b:7d:23:b8:5b:99:ed:f7:f1:01:
         7e:90:a3:31:92:ff:65:ed:48:c3:df:d1:7b:7a:ff:b4:01:b0:
         bb:fb:89:c1:50:60:3a:6e:fc:1a:2b:ba:bd:46:d6:51:de:f4:
         1b:1c:56:79:58:c9:49:2c:47:ae:87:5c:1a:b0:70:5e:65:7d:
         a2:55:8a:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/y4DWKZ2p7OJaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODA0NzU4YTUtOGJmYS00NjNmLWE2NmMtZDUwYWE3MjM3
ZmZmMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk
NGEyOWZjYjctMDA1MS00NWVkLWE3ZjctNWI5ZDdiMzc5YzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqApiOcONwqMYulNDIRyyTp/tjCDBZgMQrxea
FMys6N/7KEJF5WPbwsP1V2+iv/C8umvsogDJ9WIugxzvGc3WaAE0qRccUFaOeoyr
PyJM0An3TspFYruiVBXe3I7GhHi8fjvEcnVephntl6zc0r0KaDKS+USc2FzR1ton
79yGHPCHeWG0i+G/KGGNwawI/bfSQMmPPXGwsZR9CXCNGnv67yR3cwYsopXowQux
36LqdnVDxllbgDOY7UFdSJhQB/tVv51z0+Xl4dG0xrCHer82xbxwOValRvjULeuo
N6UQe6OUFO7JIBC9J/NMP9PYIrt03FBLwHHy3wKSSzxDbmJ4QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJINHWNeZ/wbqjJuis/2U6FOAZWeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDQ3
NThhNS04YmZhLTQ2M2YtYTY2Yy1kNTBhYTcyMzdmZmYvZTEwZWQ3ZWQtYTQ2MC0z
MGI1LTg0MzYtODNlNTgxY2I4OGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODA0NzU4YTUtOGJmYS00NjNmLWE2
NmMtZDUwYWE3MjM3ZmZmLzgwNDc1OGE1LThiZmEtNDYzZi1hNjZjLWQ1MGFhNzIz
N2ZmZi5jcmwwHwYDVR0jBBgwFoAUxaz1IQQiYxDLqnafTdkdb0m5k48wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84MDQ3NThhNS04YmZhLTQ2M2YtYTY2Yy1kNTBh
YTcyMzdmZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClpTAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2INsyuEHHcnSzlhhypkyzIvmMVZ4/VgKajfud7Fvx5v0wYrR57ExHq
Lsl/aaY/vAU+5JbTNLo5FgGK2S5cd7Q3TAIDB0ztIx65p6A+2BkWww/9DyMN4XqQ
2uU/v1MZmLaPptyixTg56xL2pWIYvFntX7FY+B3qa9zEiPFqf+PRwsBnKWkY9YCu
qdOp6QxASSATl2un1d+uL/tyjdDU5NBII/eimxe87xSbTOvTNDp3gUq7ocpE47Sq
2vSTW30juFuZ7ffxAX6QozGS/2XtSMPf0Xt6/7QBsLv7icFQYDpu/Borur1G1lHe
9BscVnlYyUksR66HXBqwcF5lfaJViko=
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:47:11 2025 by rpki-client