Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a3fe507d-fd7b-3e9d-981f-12f88d8f43cb.roa
File:                     a3fe507d-fd7b-3e9d-981f-12f88d8f43cb.roa (raw, json)
Hash identifier:          tarhb+cPnOP/mUPElZ5xGnoLIVY7A2tJ25FWfBEq4RU=
Subject key identifier:   B1:18:1B:4B:1D:CE:72:CD:03:FF:76:55:53:E0:79:24:C2:81:F0:AD
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584A23C01D1381021DBC844BDE80
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a3fe507d-fd7b-3e9d-981f-12f88d8f43cb.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        137.164.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:1d:13:81:02:1d:bc:84:4b:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=346ea3ae-727f-4a3b-b701-94b1d5906d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:61:d8:12:a7:34:b1:1f:9f:3b:a0:9f:bd:
                    a4:fa:7d:4e:f8:b6:a6:9c:eb:51:4f:2d:93:37:53:
                    55:69:a8:60:92:04:ac:76:33:9b:a5:25:5c:ad:ae:
                    92:bc:5a:fb:dc:41:4f:c1:ec:a4:18:0a:0f:44:c5:
                    5f:93:e4:9c:3f:42:ee:3f:4e:de:31:ea:ac:23:c0:
                    41:41:79:8d:ab:18:b5:7a:ad:65:76:46:42:83:04:
                    e1:38:27:b5:ef:42:7e:c8:d2:4b:d0:aa:0d:eb:3a:
                    23:8f:28:66:c3:4e:be:38:1d:fc:f6:87:89:07:2b:
                    10:59:60:3f:32:5a:28:10:37:e6:cb:d6:c2:94:a1:
                    5f:0a:33:6c:6a:c3:b9:11:04:42:60:03:7f:fe:73:
                    4b:14:52:7f:b6:87:45:82:bf:3a:aa:fd:49:7f:80:
                    fb:86:27:e7:01:7d:78:f8:46:b3:56:85:7b:59:b9:
                    6c:36:35:e5:1f:3c:0f:eb:30:48:ef:56:8d:0a:9b:
                    21:ef:7d:77:b8:0a:71:02:2a:c1:9c:eb:d7:c2:7f:
                    a9:1e:41:d3:24:5a:9e:06:0b:45:e2:73:38:6c:bc:
                    54:6a:9c:fe:b5:fc:04:e8:1d:8e:a5:38:7d:8f:4d:
                    2e:2e:ce:67:ed:06:d6:e0:62:93:6e:7a:a7:7d:94:
                    c2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:18:1B:4B:1D:CE:72:CD:03:FF:76:55:53:E0:79:24:C2:81:F0:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a3fe507d-fd7b-3e9d-981f-12f88d8f43cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.164.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f7:7a:cb:58:34:7c:aa:a4:7b:97:ec:7a:83:7f:ee:c1:27:
         7c:f5:e8:cb:c5:00:92:b2:f8:6a:65:59:a9:c6:bf:c3:50:d6:
         8d:39:db:85:e9:17:51:0c:46:39:7b:fc:aa:64:ee:50:53:d6:
         51:22:a6:81:b7:22:68:05:84:61:b9:e7:21:c4:3c:b6:72:b7:
         19:ca:9b:a6:02:c5:9c:aa:87:58:a1:e3:a9:6c:e7:1e:f9:8f:
         85:99:34:96:2e:6f:8a:7c:e3:52:53:6b:d3:cf:07:4b:61:1f:
         8f:5d:24:26:35:f5:2b:13:f4:76:85:e3:37:ec:e8:37:c0:d0:
         d4:6a:02:64:87:f7:a9:5c:76:fc:21:f5:06:e2:68:5f:d7:05:
         90:8d:8e:1d:a7:51:37:79:2a:b1:18:24:d4:10:7f:c2:3b:3c:
         63:d3:fb:45:96:70:8e:9d:b4:17:02:3b:ae:93:fd:5e:ed:4b:
         15:4c:af:fc:a6:4b:52:ca:39:05:e5:d3:db:ea:36:ab:55:a6:
         91:5a:de:7a:b5:01:40:61:82:78:3e:46:9c:e1:a0:ed:dd:bf:
         56:2d:85:e8:20:f6:43:80:08:f7:ad:ed:db:53:e0:23:78:6c:
         2c:53:3c:a3:6c:8f:bb:b9:a3:0e:8c:99:22:1c:ff:96:4d:e6:
         78:bd:ad:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwB0TgQIdvIRL3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4
NTQ4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk
MzQ2ZWEzYWUtNzI3Zi00YTNiLWI3MDEtOTRiMWQ1OTA2ZDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOth2BKnNLEfnzugn72k+n1O+LamnOtRTy2T
N1NVaahgkgSsdjObpSVcra6SvFr73EFPweykGAoPRMVfk+ScP0LuP07eMeqsI8BB
QXmNqxi1eq1ldkZCgwThOCe170J+yNJL0KoN6zojjyhmw06+OB389oeJBysQWWA/
MlooEDfmy9bClKFfCjNsasO5EQRCYAN//nNLFFJ/todFgr86qv1Jf4D7hifnAX14
+EazVoV7WblsNjXlHzwP6zBI71aNCpsh7313uApxAirBnOvXwn+pHkHTJFqeBgtF
4nM4bLxUapz+tfwE6B2OpTh9j00uLs5n7QbW4GKTbnqnfZTCmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLEYG0sdznLNA/92VVPgeSTCgfCtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj
YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYTNmZTUwN2QtZmQ3Yi0z
ZTlkLTk4MWYtMTJmODhkOGY0M2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4
MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2
ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi
MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJX3estYNHyqpHuX7HqDf+7BJ3z16MvFAJKy+GplWanGv8NQ1o0524Xp
F1EMRjl7/Kpk7lBT1lEipoG3ImgFhGG55yHEPLZytxnKm6YCxZyqh1ih46ls5x75
j4WZNJYub4p841JTa9PPB0thH49dJCY19SsT9HaF4zfs6DfA0NRqAmSH96lcdvwh
9QbiaF/XBZCNjh2nUTd5KrEYJNQQf8I7PGPT+0WWcI6dtBcCO66T/V7tSxVMr/ym
S1LKOQXl09vqNqtVppFa3nq1AUBhgng+RpzhoO3dv1Ythegg9kOACPet7dtT4CN4
bCxTPKNsj7u5ow6MmSIc/5ZN5ni9rTY=
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:14:24 2025 by rpki-client