Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/c5348b71-f872-3312-b8b7-af9e5854fe26.roa
File:                     c5348b71-f872-3312-b8b7-af9e5854fe26.roa (raw, json)
Hash identifier:          qUMx1KZdYvhc784sIsOz8fmbcX18gzFzJ4K4XjxCgKc=
Subject key identifier:   3E:EC:9D:90:76:0A:48:84:96:D7:E1:31:FA:75:0C:E0:90:B1:76:E7
Certificate issuer:       /CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c
Certificate serial:       010D0C9F4328584A1035371FA6F52CDCD2C29940
Authority key identifier: C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/c5348b71-f872-3312-b8b7-af9e5854fe26.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     396982
IP address blocks:        108.174.252.0/24 maxlen: 24
                          108.174.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:37:1f:a6:f5:2c:dc:d2:c2:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=3f3a2f5a-5bb7-494d-8c17-20e77204ab70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:38:a0:69:8f:e0:c4:6c:5e:af:b5:df:3b:
                    4c:2f:59:61:e1:76:08:e5:8f:4a:1e:ee:dc:f5:ee:
                    7a:51:5f:f5:6e:57:d4:76:1a:54:36:7d:8b:fd:f8:
                    8e:37:31:ed:24:2a:2b:e6:9d:f4:6d:03:85:7f:b7:
                    8a:57:c0:00:5d:8e:3b:a9:06:59:28:83:f1:03:08:
                    98:e2:a7:b5:83:68:52:70:2f:8a:a2:78:77:e5:e9:
                    a9:92:b9:9b:97:c3:ca:a4:1b:b2:4e:06:77:bd:0b:
                    16:e5:57:c4:1b:2a:c8:eb:8e:e1:07:5a:03:5b:b1:
                    e2:da:43:d0:bb:a7:80:90:f2:3a:ea:91:43:1b:00:
                    ec:f0:5a:3d:5a:65:dd:f0:34:23:79:e4:e9:5b:7c:
                    fd:a2:0a:df:5c:bc:d5:e4:e5:ca:97:69:fa:a7:a6:
                    f4:12:3e:c6:ed:22:05:b8:f1:07:89:91:91:65:33:
                    53:5f:21:d6:24:c8:2b:11:ca:c6:88:23:e1:17:2b:
                    18:75:2d:05:df:05:57:9f:ab:6d:3f:97:c7:17:9a:
                    97:73:94:96:09:5e:5c:f6:7d:dd:d8:6a:74:5c:12:
                    55:db:f4:cd:47:c3:ec:42:b9:6a:fd:80:75:71:e9:
                    ef:ef:e2:17:03:15:68:30:79:ea:a5:9d:5d:19:aa:
                    85:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EC:9D:90:76:0A:48:84:96:D7:E1:31:FA:75:0C:E0:90:B1:76:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/c5348b71-f872-3312-b8b7-af9e5854fe26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl

            X509v3 Authority Key Identifier:
                keyid:C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.174.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ee:d2:2f:38:8b:c2:f2:24:1c:77:81:c5:a5:ee:41:21:43:
         64:1d:c7:50:8b:7c:6e:74:ec:9e:30:e7:4d:b4:07:05:a5:7b:
         b7:31:73:d0:c8:2c:c2:70:84:69:43:23:98:81:40:57:b4:3d:
         52:0a:26:04:3f:21:c0:0d:07:3f:2f:e9:80:01:47:b8:5b:16:
         fb:66:cf:a1:23:4a:28:77:42:94:ef:07:4c:d6:29:40:0a:20:
         4e:ff:05:90:5c:4d:b4:33:cf:02:44:4d:94:5b:97:28:4d:4e:
         d9:2a:6c:13:61:72:59:f4:ef:cd:0b:fc:4d:d0:dd:1c:91:62:
         ae:72:dd:bc:f9:44:15:ee:62:39:c0:04:42:f0:0d:57:1c:e8:
         62:ba:5b:cc:83:c6:67:d9:44:6b:1e:85:ce:ef:5e:d0:f6:ce:
         b1:c6:5c:51:f6:18:86:e2:44:8a:87:32:83:e8:28:54:da:0e:
         2d:98:8d:aa:f0:ff:87:ef:83:7e:f2:02:36:e5:62:78:a5:87:
         fb:c3:a3:3e:2f:19:4a:6b:bd:bc:89:86:8b:f6:a8:f1:9f:4f:
         84:20:25:90:11:80:77:19:9a:49:be:fd:f2:32:5b:40:39:3a:
         d5:da:58:26:0e:ba:9b:fa:07:66:a0:08:d4:3d:d5:cd:75:73:
         ae:b0:91:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNTcfpvUs3NLCmUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWI0MzRhYTYtYjY4Zi00MWU3LThkNGItOWM4MzEyNTVm
MTFjMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk
M2YzYTJmNWEtNWJiNy00OTRkLThjMTctMjBlNzcyMDRhYjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYU4oGmP4MRsXq+13ztML1lh4XYI5Y9KHu7c
9e56UV/1blfUdhpUNn2L/fiONzHtJCor5p30bQOFf7eKV8AAXY47qQZZKIPxAwiY
4qe1g2hScC+Konh35empkrmbl8PKpBuyTgZ3vQsW5VfEGyrI647hB1oDW7Hi2kPQ
u6eAkPI66pFDGwDs8Fo9WmXd8DQjeeTpW3z9ogrfXLzV5OXKl2n6p6b0Ej7G7SIF
uPEHiZGRZTNTXyHWJMgrEcrGiCPhFysYdS0F3wVXn6ttP5fHF5qXc5SWCV5c9n3d
2Gp0XBJV2/TNR8PsQrlq/YB1cenv7+IXAxVoMHnqpZ1dGaqFFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD7snZB2CkiEltfhMfp1DOCQsXbnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjQz
NGFhNi1iNjhmLTQxZTctOGQ0Yi05YzgzMTI1NWYxMWMvYzUzNDhiNzEtZjg3Mi0z
MzEyLWI4YjctYWY5ZTU4NTRmZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWI0MzRhYTYtYjY4Zi00MWU3LThk
NGItOWM4MzEyNTVmMTFjLzliNDM0YWE2LWI2OGYtNDFlNy04ZDRiLTljODMxMjU1
ZjExYy5jcmwwHwYDVR0jBBgwFoAUxEt0dIPMmHr/sBSEs9h6dG0fLGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjQzNGFhNi1iNjhmLTQxZTctOGQ0Yi05Yzgz
MTI1NWYxMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbK78MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDu0i84i8LyJBx3gcWl7kEhQ2Qdx1CLfG507J4w5020BwWle7cxc9DI
LMJwhGlDI5iBQFe0PVIKJgQ/IcANBz8v6YABR7hbFvtmz6EjSih3QpTvB0zWKUAK
IE7/BZBcTbQzzwJETZRblyhNTtkqbBNhcln0780L/E3Q3RyRYq5y3bz5RBXuYjnA
BELwDVcc6GK6W8yDxmfZRGsehc7vXtD2zrHGXFH2GIbiRIqHMoPoKFTaDi2Yjarw
/4fvg37yAjblYnilh/vDoz4vGUprvbyJhov2qPGfT4QgJZARgHcZmkm+/fIyW0A5
OtXaWCYOupv6B2agCNQ91c11c66wkQY=
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:43:01 2025 by rpki-client