Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de/48930e91-1dbb-386e-810f-ee2e399cada4.roa
File:                     48930e91-1dbb-386e-810f-ee2e399cada4.roa (raw, json)
Hash identifier:          5T9VvtglQH5eo1R4Au9YGK7bbkFms7VSkZE0Vu//4h0=
Subject key identifier:   CD:F8:8D:2E:1C:F0:6E:9C:C3:AC:87:51:8B:CF:EA:21:80:C8:25:7C
Certificate issuer:       /CN=7c4e1acf-ba7c-4e3b-906f-1adfd49a92de
Certificate serial:       010D0C9F4328584A2ABADCD5D057449B20650280
Authority key identifier: B4:A7:4E:33:70:B7:74:2F:2E:96:FC:5C:98:73:09:91:F4:18:9F:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de/48930e91-1dbb-386e-810f-ee2e399cada4.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     19782
IP address blocks:        69.51.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:dc:d5:d0:57:44:9b:20:65:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4e1acf-ba7c-4e3b-906f-1adfd49a92de
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=53f2eba1-ae94-40a4-966c-32683f239a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:4d:4b:bd:47:09:25:80:30:0a:19:ed:4a:
                    9c:de:79:b3:c4:f1:f9:14:af:6c:e4:c3:0c:bf:a0:
                    2f:4f:ea:26:df:aa:49:88:02:19:21:f5:ed:01:1b:
                    92:51:53:62:31:95:d0:e8:ec:06:2b:65:15:96:93:
                    6c:38:9f:0b:77:48:5d:d0:cd:19:58:e7:c6:73:6b:
                    94:f8:81:a6:d3:60:e7:3b:d0:3d:cb:80:26:11:b2:
                    92:7f:17:e4:4b:44:b8:85:9b:31:41:1c:96:73:dd:
                    60:13:eb:9e:5e:32:1e:77:af:58:b2:59:e8:9c:a4:
                    0b:89:4a:ab:4b:71:2a:f1:8d:86:be:8f:54:d6:6e:
                    46:03:0d:aa:59:c1:f8:f0:43:98:54:d0:00:03:a8:
                    1f:2e:61:df:31:f1:72:04:d6:20:cd:67:c6:d7:85:
                    02:74:f4:e8:56:25:4f:4c:7d:e5:c1:c0:f9:e4:83:
                    f1:c8:66:46:96:56:25:e6:58:2c:ef:ac:d1:ec:5d:
                    51:14:77:0c:9f:36:ec:6f:20:17:f6:71:68:70:e8:
                    fe:84:ce:ff:e5:c9:da:d2:5b:81:0a:0e:48:42:54:
                    4b:8d:11:e7:30:01:36:c7:d5:43:04:76:52:3b:58:
                    25:63:fd:9d:5e:0b:e9:65:84:04:de:7e:86:06:50:
                    51:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F8:8D:2E:1C:F0:6E:9C:C3:AC:87:51:8B:CF:EA:21:80:C8:25:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de/48930e91-1dbb-386e-810f-ee2e399cada4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A7:4E:33:70:B7:74:2F:2E:96:FC:5C:98:73:09:91:F4:18:9F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7c4e1acf-ba7c-4e3b-906f-1adfd49a92de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:53:c4:31:5a:9d:f7:c5:ef:7a:05:55:9c:99:c0:b4:30:36:
         56:78:4d:13:b4:c3:ce:ea:8e:7b:12:9c:1f:18:05:43:0a:a1:
         be:ae:6c:27:c3:9e:72:61:42:6c:30:86:c7:bc:d7:76:a6:77:
         6b:95:1b:50:5f:42:a5:a9:3b:e1:77:5d:ab:96:81:42:2d:7f:
         67:4c:90:af:74:94:31:59:cc:94:8b:45:94:ac:b5:e7:df:d2:
         3e:81:c1:ef:54:ef:86:ba:35:73:4a:e7:28:0c:3e:35:40:cf:
         27:c8:67:22:09:56:d8:a6:bc:c9:75:eb:27:fe:27:65:1b:9f:
         a3:4b:f3:d7:b6:40:37:17:9c:2d:72:b0:85:d0:ab:b1:36:2f:
         de:24:be:16:ac:fa:70:05:10:bf:da:65:52:65:5b:90:e9:5a:
         c4:5c:7c:1b:ea:f4:a9:bd:f7:ae:d3:3a:b8:16:d3:5f:d7:c7:
         49:6e:c0:07:bf:aa:df:a0:1e:0e:79:4e:a2:27:4e:3d:02:f4:
         31:6e:51:4a:01:19:b7:4d:1e:84:dc:76:3f:41:af:4e:f0:8e:
         46:ea:97:a5:2c:c2:92:c0:45:5b:1f:ff:56:89:40:56:71:59:
         4c:76:9e:07:62:0b:00:b5:55:d3:0f:32:01:0f:7b:8d:84:4b:
         87:7c:d5:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutzV0FdEmyBlAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2M0ZTFhY2YtYmE3Yy00ZTNiLTkwNmYtMWFkZmQ0OWE5
MmRlMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
NTNmMmViYTEtYWU5NC00MGE0LTk2NmMtMzI2ODNmMjM5YTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKpNS71HCSWAMAoZ7Uqc3nmzxPH5FK9s5MMM
v6AvT+om36pJiAIZIfXtARuSUVNiMZXQ6OwGK2UVlpNsOJ8Ld0hd0M0ZWOfGc2uU
+IGm02DnO9A9y4AmEbKSfxfkS0S4hZsxQRyWc91gE+ueXjIed69YslnonKQLiUqr
S3Eq8Y2Gvo9U1m5GAw2qWcH48EOYVNAAA6gfLmHfMfFyBNYgzWfG14UCdPToViVP
TH3lwcD55IPxyGZGllYl5lgs76zR7F1RFHcMnzbsbyAX9nFocOj+hM7/5cna0luB
Cg5IQlRLjRHnMAE2x9VDBHZSO1glY/2dXgvpZYQE3n6GBlBRfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM34jS4c8G6cw6yHUYvP6iGAyCV8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83YzRl
MWFjZi1iYTdjLTRlM2ItOTA2Zi0xYWRmZDQ5YTkyZGUvNDg5MzBlOTEtMWRiYi0z
ODZlLTgxMGYtZWUyZTM5OWNhZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvN2M0ZTFhY2YtYmE3Yy00ZTNiLTkw
NmYtMWFkZmQ0OWE5MmRlLzdjNGUxYWNmLWJhN2MtNGUzYi05MDZmLTFhZGZkNDlh
OTJkZS5jcmwwHwYDVR0jBBgwFoAUtKdOM3C3dC8ulvxcmHMJkfQYn4wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83YzRlMWFjZi1iYTdjLTRlM2ItOTA2Zi0xYWRm
ZDQ5YTkyZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRTOgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJTxDFanffF73oFVZyZwLQwNlZ4TRO0w87qjnsSnB8YBUMKob6ubCfD
nnJhQmwwhse813amd2uVG1BfQqWpO+F3XauWgUItf2dMkK90lDFZzJSLRZSsteff
0j6Bwe9U74a6NXNK5ygMPjVAzyfIZyIJVtimvMl16yf+J2Ubn6NL89e2QDcXnC1y
sIXQq7E2L94kvhas+nAFEL/aZVJlW5DpWsRcfBvq9Km9967TOrgW01/Xx0luwAe/
qt+gHg55TqInTj0C9DFuUUoBGbdNHoTcdj9Br07wjkbql6UswpLARVsf/1aJQFZx
WUx2ngdiCwC1VdMPMgEPe42ES4d81dg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:13 2025 by rpki-client