Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0954e518-9726-3730-b9ee-764c567d1c70.roa
File:                     0954e518-9726-3730-b9ee-764c567d1c70.roa (raw, json)
Hash identifier:          Trw7BDCRCPSvwNbH+ayktwIxf9Jk9avvYCAeO0N4GM8=
Subject key identifier:   2E:E7:73:2B:F0:03:09:C5:D1:70:50:25:70:69:30:0C:B0:4B:59:9B
Certificate issuer:       /CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
Certificate serial:       010D0C9F432858498E69EF4DAEF5A727AB424800
Authority key identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0954e518-9726-3730-b9ee-764c567d1c70.roa
Signing time:             Thu 17 Apr 2025 13:12:03 +0000
ROA not before:           Thu 17 Apr 2025 13:12:03 +0000
ROA not after:            Wed 16 Jul 2025 13:12:03 +0000
asID:                     19830
IP address blocks:        208.99.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:69:ef:4d:ae:f5:a7:27:ab:42:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
        Validity
            Not Before: Apr 17 13:12:03 2025 GMT
            Not After : Jul 16 13:12:03 2025 GMT
        Subject: CN=c8ae3203-fcd3-4cb9-9050-8d0ec09c177b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:5e:f0:42:ec:71:ff:bb:21:ec:49:c1:5a:
                    1b:df:3f:55:2d:a5:cd:3f:f2:15:c1:83:36:8e:e1:
                    45:ce:9c:ed:69:3f:ea:db:e8:c0:99:d2:e3:7e:87:
                    7d:02:5a:dd:71:01:25:5f:8e:0a:f4:8c:d2:d8:f3:
                    a8:cd:48:21:f5:c6:6b:29:6b:aa:6e:a8:18:81:9d:
                    61:9e:c8:da:bf:24:ff:58:79:29:a0:af:31:f1:c5:
                    8f:f6:93:c3:c3:32:1d:ce:b8:43:69:c6:c3:2e:27:
                    24:e8:4e:c7:c6:44:62:38:1e:0d:d9:f6:e6:39:c7:
                    84:6e:e0:1c:20:1e:25:75:9c:61:ce:44:39:95:a4:
                    01:bd:1f:3c:cc:23:8d:23:cb:ca:80:ad:bd:32:a2:
                    a7:3b:80:c4:62:7b:ba:e2:31:f8:7e:6a:a2:9d:ff:
                    6e:09:e1:3f:68:54:8c:ff:a3:0d:10:92:85:9f:2a:
                    a6:0d:62:b2:03:fd:2a:f2:a6:a2:2e:e9:09:42:3c:
                    f2:80:6b:fe:b7:fa:eb:c3:89:9c:fe:91:96:16:cf:
                    16:64:e9:df:b5:4d:c3:09:d7:bf:19:47:26:7d:11:
                    94:f1:81:6a:01:c3:eb:80:52:e9:81:89:cc:0e:1e:
                    33:8b:bf:96:d4:9f:60:4a:f1:27:4f:c4:49:d6:27:
                    5c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E7:73:2B:F0:03:09:C5:D1:70:50:25:70:69:30:0C:B0:4B:59:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0954e518-9726-3730-b9ee-764c567d1c70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl

            X509v3 Authority Key Identifier:
                keyid:06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ca:10:de:51:59:34:07:7d:28:ee:4d:cc:c7:e9:ef:fd:5b:
         be:6a:92:ce:2a:b2:3b:1b:80:24:6b:97:af:de:6d:97:11:37:
         9b:da:48:4b:4f:b6:22:11:8b:b6:85:a9:34:18:4f:d8:7f:dd:
         68:c0:61:af:17:ef:51:4e:f6:db:84:8a:42:17:d1:10:ed:0a:
         20:89:d9:25:47:26:07:48:cb:34:85:3a:55:88:35:17:60:49:
         88:a4:26:49:95:91:86:a5:a7:16:b8:a2:29:1c:e4:56:dc:dd:
         44:6b:72:21:61:c1:0e:a3:ac:62:35:90:b7:9c:32:1b:bf:5f:
         c7:8f:63:36:98:13:e3:13:8d:a4:66:f3:33:48:43:48:80:6b:
         f4:e3:f7:48:b3:f2:82:3c:91:69:18:32:04:3e:96:ee:34:88:
         c5:08:67:5f:6c:71:78:e6:8e:10:27:49:f9:89:7d:e8:bb:2e:
         8e:35:5a:08:f6:5c:a7:c1:59:5b:fd:20:55:f6:0d:59:08:74:
         13:40:fc:33:98:df:34:f3:c9:0f:62:8a:9e:d5:2d:0b:e4:d3:
         cf:d4:8b:eb:e0:d8:62:08:0a:71:ef:b0:22:bd:e9:e9:46:fe:
         71:a8:d0:2d:d2:3a:c2:1f:ff:4a:e5:93:80:68:1f:d8:56:92:
         46:71:22:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOae9NrvWnJ6tCSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZhZDUyNmMtYjcwNS00ZjRlLWEyZGEtNmI3ZjEyZjFm
N2UzMB4XDTI1MDQxNzEzMTIwM1oXDTI1MDcxNjEzMTIwM1owLzEtMCsGA1UEAxMk
YzhhZTMyMDMtZmNkMy00Y2I5LTkwNTAtOGQwZWMwOWMxNzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh1e8ELscf+7IexJwVob3z9VLaXNP/IVwYM2
juFFzpztaT/q2+jAmdLjfod9AlrdcQElX44K9IzS2POozUgh9cZrKWuqbqgYgZ1h
nsjavyT/WHkpoK8x8cWP9pPDwzIdzrhDacbDLick6E7HxkRiOB4N2fbmOceEbuAc
IB4ldZxhzkQ5laQBvR88zCONI8vKgK29MqKnO4DEYnu64jH4fmqinf9uCeE/aFSM
/6MNEJKFnyqmDWKyA/0q8qaiLukJQjzygGv+t/rrw4mc/pGWFs8WZOnftU3DCde/
GUcmfRGU8YFqAcPrgFLpgYnMDh4zi7+W1J9gSvEnT8RJ1idcBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7ncyvwAwnF0XBQJXBpMAywS1mbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmFk
NTI2Yy1iNzA1LTRmNGUtYTJkYS02YjdmMTJmMWY3ZTMvMDk1NGU1MTgtOTcyNi0z
NzMwLWI5ZWUtNzY0YzU2N2QxYzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDZhZDUyNmMtYjcwNS00ZjRlLWEy
ZGEtNmI3ZjEyZjFmN2UzL2Q2YWQ1MjZjLWI3MDUtNGY0ZS1hMmRhLTZiN2YxMmYx
ZjdlMy5jcmwwHwYDVR0jBBgwFoAUBvT0Cc5djoyVc2kUIs8qf7mRo54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kNmFkNTI2Yy1iNzA1LTRmNGUtYTJkYS02Yjdm
MTJmMWY3ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GNgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXKEN5RWTQHfSjuTczH6e/9W75qks4qsjsbgCRrl6/ebZcRN5vaSEtP
tiIRi7aFqTQYT9h/3WjAYa8X71FO9tuEikIX0RDtCiCJ2SVHJgdIyzSFOlWINRdg
SYikJkmVkYalpxa4oikc5Fbc3URrciFhwQ6jrGI1kLecMhu/X8ePYzaYE+MTjaRm
8zNIQ0iAa/Tj90iz8oI8kWkYMgQ+lu40iMUIZ19scXjmjhAnSfmJfei7Lo41Wgj2
XKfBWVv9IFX2DVkIdBNA/DOY3zTzyQ9iip7VLQvk08/Ui+vg2GIICnHvsCK96elG
/nGo0C3SOsIf/0rlk4BoH9hWkkZxIho=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:31:01 2025 by rpki-client