Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa
File:                     c31be989-e6da-32a1-bc88-9cfec65bed62.roa (raw, json)
Hash identifier:          indYaMM8RImrIF2DvL6XTFegFZTH4UM8mQJAowwlWPQ=
Subject key identifier:   F9:B0:C0:48:19:3D:0D:4D:E5:F5:B3:1E:F3:D4:C2:D8:4A:77:74:6C
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584A07D52C65BD51901754B83C20
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     397423
IP address blocks:        104.255.173.0/24 maxlen: 24
                          155.254.16.0/23 maxlen: 24
                          155.254.28.0/23 maxlen: 24
                          2605:6c80:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:2c:65:bd:51:90:17:54:b8:3c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=16b66e39-1f2f-4a87-8bca-47d29b8f90ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:35:58:fe:bc:2c:9a:f1:7f:c7:f0:87:d5:13:
                    da:75:66:ac:19:61:a9:c2:ad:53:28:f7:81:f3:47:
                    63:04:b7:8d:2c:a2:42:b8:07:66:9c:0f:40:4b:c5:
                    45:0e:81:cd:24:6d:64:f7:01:28:6d:81:e6:13:68:
                    a7:42:6f:6a:22:c4:19:79:5c:d8:6b:57:2e:f9:d4:
                    e4:9a:c3:c0:c8:13:d9:0e:37:55:3c:76:0f:f1:51:
                    ae:5d:c1:b8:bf:af:62:53:e3:15:1e:79:13:5d:d5:
                    d4:34:70:d1:53:ee:43:45:5e:bb:49:18:74:a4:c7:
                    6e:59:99:36:22:c1:e0:cf:8f:cd:18:0f:e1:5d:86:
                    18:36:a2:15:a7:a0:56:5e:1d:11:9d:8d:23:25:ae:
                    9d:7f:61:05:33:b4:53:72:bd:bd:e9:f4:19:76:a6:
                    6b:15:6a:ac:02:c4:68:06:c0:aa:e0:b8:59:d5:53:
                    1f:ff:ed:35:23:3f:3c:b8:8d:04:5a:e4:9e:e8:0f:
                    34:20:ca:0d:a4:a5:df:20:bf:eb:00:5d:2a:2b:34:
                    f2:91:59:1b:04:2c:6b:5a:64:66:27:49:1e:6f:04:
                    46:52:49:82:b5:65:76:55:7a:7f:83:e8:4f:ad:c8:
                    7e:f0:7a:6b:0f:00:33:bd:ab:7f:c6:b8:c1:af:32:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B0:C0:48:19:3D:0D:4D:E5:F5:B3:1E:F3:D4:C2:D8:4A:77:74:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.173.0/24
                  155.254.16.0/23
                  155.254.28.0/23
                IPv6:
                  2605:6c80:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f0:b0:7c:6e:6c:d8:32:4e:b6:b0:05:f1:67:f5:c5:5e:39:
         2f:56:38:5a:da:66:c9:c1:19:d1:73:b5:e5:b1:b3:fa:1a:73:
         69:cc:70:96:22:fc:fa:4f:24:70:c7:e3:a1:6d:ae:89:1e:bd:
         53:ba:26:60:d0:42:1a:ea:a8:75:8f:f7:0e:03:a9:ce:32:f4:
         08:2e:33:38:52:6d:99:4b:ad:8f:25:dc:21:27:9d:58:04:a8:
         5c:32:9a:89:9d:2b:b4:78:6e:2c:3a:22:c8:e0:99:ea:5a:f1:
         87:60:d6:e6:fa:fc:96:95:c0:47:f9:28:e6:02:70:89:88:56:
         19:83:92:21:bd:a7:74:38:46:59:18:c8:7b:b5:6b:7f:21:33:
         c9:6a:13:78:16:39:fa:a6:51:d5:0e:46:c8:52:f0:d1:12:09:
         b8:cd:61:aa:d3:7f:97:8b:54:9d:24:2d:fc:84:b5:ec:f0:93:
         1b:a7:3f:42:46:1c:5f:73:2e:18:c7:61:1e:72:7d:33:66:00:
         e3:3e:cf:46:9a:4a:27:7a:aa:59:99:02:8e:54:d0:a2:f0:b7:
         2f:26:f3:65:d7:1f:78:cc:73:0a:e1:05:0c:a6:8d:e9:19:3c:
         f2:a1:60:b6:96:f5:be:18:9c:f7:b1:e5:83:83:67:9f:6f:1c:
         15:bd:a1:49
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIUAQ0Mn0MoWEoH1SxlvVGQF1S4PCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx
ZWViMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk
MTZiNjZlMzktMWYyZi00YTg3LThiY2EtNDdkMjliOGY5MGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTVY/rwsmvF/x/CH1RPadWasGWGpwq1TKPeB
80djBLeNLKJCuAdmnA9AS8VFDoHNJG1k9wEobYHmE2inQm9qIsQZeVzYa1cu+dTk
msPAyBPZDjdVPHYP8VGuXcG4v69iU+MVHnkTXdXUNHDRU+5DRV67SRh0pMduWZk2
IsHgz4/NGA/hXYYYNqIVp6BWXh0RnY0jJa6df2EFM7RTcr296fQZdqZrFWqsAsRo
BsCq4LhZ1VMf/+01Iz88uI0EWuSe6A80IMoNpKXfIL/rAF0qKzTykVkbBCxrWmRm
J0kebwRGUkmCtWV2VXp/g+hPrch+8HprDwAzvat/xrjBrzID0wIDAQABo4IDcjCC
A24wHQYDVR0OBBYEFPmwwEgZPQ1N5fWzHvPUwthKd3RsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj
MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvYzMxYmU5ODktZTZkYS0z
MmExLWJjODgtOWNmZWM2NWJlZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5
YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx
MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl
NjYxMTFlZWIuY2VyMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAaP+tAwQB
m/4QAwQBm/4cMA8EAgACMAkDBwAmBWyAAAYwVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAb/CwfG5s2DJOtrAF
8Wf1xV45L1Y4WtpmycEZ0XO15bGz+hpzacxwliL8+k8kcMfjoW2uiR69U7omYNBC
GuqodY/3DgOpzjL0CC4zOFJtmUutjyXcISedWASoXDKaiZ0rtHhuLDoiyOCZ6lrx
h2DW5vr8lpXAR/ko5gJwiYhWGYOSIb2ndDhGWRjIe7VrfyEzyWoTeBY5+qZR1Q5G
yFLw0RIJuM1hqtN/l4tUnSQt/IS17PCTG6c/QkYcX3MuGMdhHnJ9M2YA4z7PRppK
J3qqWZkCjlTQovC3LybzZdcfeMxzCuEFDKaN6Rk88qFgtpb1vhic97Hlg4Nnn28c
Fb2hSQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:23 2025 by rpki-client