Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/22d9f1fa-7491-3907-a6e1-00d1e4cbde1f.roa
File:                     22d9f1fa-7491-3907-a6e1-00d1e4cbde1f.roa (raw, json)
Hash identifier:          TBPdPdriUgxGQLqmBgj6o1wNw9Gb82LlbfdAi+AIXMA=
Subject key identifier:   90:4D:7B:FF:BF:60:D1:C9:7E:37:62:7C:EE:69:6A:5A:BD:69:6F:39
Certificate issuer:       /CN=c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee
Certificate serial:       010D0C9F4328584A03A552581C9699936B7914D0
Authority key identifier: 15:C0:CD:D3:0A:7D:6D:A6:7E:2D:CD:91:EA:B4:B6:F9:62:B2:09:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/22d9f1fa-7491-3907-a6e1-00d1e4cbde1f.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     54669
IP address blocks:        192.92.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:52:58:1c:96:99:93:6b:79:14:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=5c1148a0-ecd5-4697-a39d-4aefc103d96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:04:4e:a8:26:d1:60:0b:9f:28:cc:41:05:
                    04:8c:2f:42:c4:51:6d:f3:e9:7b:9a:bd:3e:18:03:
                    71:c2:02:c5:50:d8:f9:d4:f2:4a:ff:38:23:0a:b4:
                    74:2e:27:f1:82:18:8e:20:82:f1:9f:db:36:e7:88:
                    5a:2a:12:5a:cb:d1:85:58:9d:2f:21:2a:8c:f2:83:
                    97:6c:9a:2b:01:96:89:89:34:ea:96:bc:da:f4:8e:
                    78:0b:dd:74:fc:03:5d:66:d9:a3:e6:6c:11:ea:9c:
                    f3:68:f5:8f:5d:2b:72:03:13:0f:06:60:53:2c:fb:
                    d0:f3:f6:95:ff:21:fd:e4:5e:a8:69:57:70:32:1b:
                    a1:53:71:0f:a2:56:44:c2:22:31:ba:a7:86:42:6a:
                    b4:5f:4c:d4:0e:a1:8f:da:d9:41:c0:e0:d4:d9:2c:
                    a0:59:04:98:23:0f:ae:b1:5e:71:ec:e3:fa:2b:f4:
                    6b:02:e4:81:57:e9:18:7b:90:6d:eb:9f:58:99:cc:
                    0e:37:57:e6:74:0c:fd:bc:c1:cd:16:f9:0d:c7:8d:
                    da:4b:5b:65:13:e2:4c:f7:be:1d:c7:b8:75:8a:43:
                    07:20:65:13:e7:e3:e6:b5:5d:67:61:90:66:5c:d2:
                    08:bc:49:0c:f2:8d:d5:b1:0e:01:1f:1e:c4:36:d4:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4D:7B:FF:BF:60:D1:C9:7E:37:62:7C:EE:69:6A:5A:BD:69:6F:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/22d9f1fa-7491-3907-a6e1-00d1e4cbde1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.crl

            X509v3 Authority Key Identifier:
                keyid:15:C0:CD:D3:0A:7D:6D:A6:7E:2D:CD:91:EA:B4:B6:F9:62:B2:09:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c00e9d1f-201e-41ed-8c2a-42a5ce41c4ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.92.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:1b:f5:91:df:37:08:84:0c:1b:00:00:47:97:37:c9:87:34:
         bc:9c:60:ef:da:7f:62:5f:e1:44:53:f5:1b:fb:3a:15:f7:fd:
         08:e7:36:91:54:a5:b0:98:59:40:0f:82:88:0f:13:ef:13:5d:
         bc:ed:48:a4:f6:c9:6f:7a:d5:2c:cb:5d:3e:f9:e8:d7:34:1f:
         00:92:78:8d:bd:f3:7a:c5:ee:0b:7f:6b:ee:11:5d:38:e2:51:
         56:23:b9:d1:83:ea:b2:20:c4:a4:fe:80:0e:ae:57:2b:e5:2f:
         6a:4d:8b:3a:bf:2d:c5:47:87:ab:24:91:f2:0c:44:68:fd:ef:
         3f:56:de:85:71:24:54:f2:a9:f5:9e:f5:a2:25:f4:87:07:94:
         25:26:b7:b2:2c:90:ee:6e:b4:40:65:39:10:1e:09:93:dc:39:
         96:a7:c0:e5:5f:04:49:de:e8:36:8c:99:97:38:88:de:3c:c2:
         4e:3f:64:6e:df:07:4a:12:00:49:dd:7c:bc:c8:a7:fb:80:7a:
         80:0e:af:2f:82:0e:64:c0:c4:35:24:78:a5:37:18:13:98:1d:
         be:be:1f:f1:54:e5:60:b2:34:13:e5:95:25:9e:cd:d0:9f:b3:
         2f:e2:5c:22:6c:b3:65:5a:ef:dc:45:3f:3e:ca:24:90:fb:ee:
         1b:22:58:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVJYHJaZk2t5FNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzAwZTlkMWYtMjAxZS00MWVkLThjMmEtNDJhNWNlNDFj
NGVlMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
NWMxMTQ4YTAtZWNkNS00Njk3LWEzOWQtNGFlZmMxMDNkOTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7oETqgm0WALnyjMQQUEjC9CxFFt8+l7mr0+
GANxwgLFUNj51PJK/zgjCrR0LifxghiOIILxn9s254haKhJay9GFWJ0vISqM8oOX
bJorAZaJiTTqlrza9I54C910/ANdZtmj5mwR6pzzaPWPXStyAxMPBmBTLPvQ8/aV
/yH95F6oaVdwMhuhU3EPolZEwiIxuqeGQmq0X0zUDqGP2tlBwODU2SygWQSYIw+u
sV5x7OP6K/RrAuSBV+kYe5Bt659YmcwON1fmdAz9vMHNFvkNx43aS1tlE+JM974d
x7h1ikMHIGUT5+PmtV1nYZBmXNIIvEkM8o3VsQ4BHx7ENtR6+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJBNe/+/YNHJfjdifO5palq9aW85MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jMDBl
OWQxZi0yMDFlLTQxZWQtOGMyYS00MmE1Y2U0MWM0ZWUvMjJkOWYxZmEtNzQ5MS0z
OTA3LWE2ZTEtMDBkMWU0Y2JkZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzAwZTlkMWYtMjAxZS00MWVkLThj
MmEtNDJhNWNlNDFjNGVlL2MwMGU5ZDFmLTIwMWUtNDFlZC04YzJhLTQyYTVjZTQx
YzRlZS5jcmwwHwYDVR0jBBgwFoAUFcDN0wp9baZ+Lc2R6rS2+WKyCfIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jMDBlOWQxZi0yMDFlLTQxZWQtOGMyYS00MmE1
Y2U0MWM0ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFwRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAb9ZHfNwiEDBsAAEeXN8mHNLycYO/af2Jf4URT9Rv7OhX3/QjnNpFU
pbCYWUAPgogPE+8TXbztSKT2yW961SzLXT756Nc0HwCSeI2983rF7gt/a+4RXTji
UVYjudGD6rIgxKT+gA6uVyvlL2pNizq/LcVHh6skkfIMRGj97z9W3oVxJFTyqfWe
9aIl9IcHlCUmt7IskO5utEBlORAeCZPcOZanwOVfBEne6DaMmZc4iN48wk4/ZG7f
B0oSAEndfLzIp/uAeoAOry+CDmTAxDUkeKU3GBOYHb6+H/FU5WCyNBPllSWezdCf
sy/iXCJss2Va79xFPz7KJJD77hsiWE8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:53:42 2025 by rpki-client