Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/5caadf24-de09-380d-9e89-16b27055bebb.roa
File:                     5caadf24-de09-380d-9e89-16b27055bebb.roa (raw, json)
Hash identifier:          QtmgfqA39+IRVxdNoa1ODrYH0aidYjW6RjHcmyVzqZo=
Subject key identifier:   82:55:E4:6E:04:01:F7:E8:61:8E:6A:00:60:CD:EA:90:CD:00:CD:70
Certificate issuer:       /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial:       010D0C9F43285849CBCF97DB6CD802D4137DAB60
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/5caadf24-de09-380d-9e89-16b27055bebb.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        131.232.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:97:db:6c:d8:02:d4:13:7d:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=6b89b9c5-6b88-430b-a8ef-e504586dffa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:51:c9:15:f9:09:ff:70:1d:49:b5:47:37:ae:
                    8d:08:62:52:02:82:32:b1:85:7e:e4:61:17:fa:c3:
                    21:b8:11:3b:bd:ec:6f:de:da:30:5b:d7:eb:32:bc:
                    b8:f4:16:71:f9:e6:5f:08:66:b9:d8:68:d5:cc:94:
                    53:36:9f:c6:d7:06:41:cf:05:19:02:c0:05:16:10:
                    c8:da:52:90:6e:98:47:ed:07:cf:0c:fb:cf:70:e2:
                    b5:52:8c:af:9c:32:94:ca:30:8d:ac:3b:31:63:61:
                    94:fe:7f:07:26:3a:46:55:72:bf:c2:8e:04:2a:20:
                    77:36:3d:7c:47:1c:09:4d:1a:5d:b2:72:dd:13:57:
                    df:42:ec:ec:5e:8f:38:71:0e:3a:41:f1:f1:9f:1c:
                    f2:13:38:14:33:db:7d:5b:91:6b:3a:28:4a:dc:2c:
                    ba:ba:04:82:90:96:06:15:8f:7e:43:0e:06:a8:e7:
                    06:c4:09:cf:b1:f5:1c:cd:d1:b0:b0:0a:39:db:ee:
                    8e:79:e6:3d:87:18:b2:c2:fc:10:af:a7:26:cf:3e:
                    d6:b8:90:b3:b8:dd:39:0d:55:ec:f3:ef:52:e1:19:
                    b1:6e:97:b1:41:3b:13:de:b0:82:74:19:81:68:09:
                    52:63:d1:5b:60:41:6a:34:a8:4b:58:4c:68:c3:0d:
                    40:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:55:E4:6E:04:01:F7:E8:61:8E:6A:00:60:CD:EA:90:CD:00:CD:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/5caadf24-de09-380d-9e89-16b27055bebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl

            X509v3 Authority Key Identifier:
                keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:0b:40:ba:56:47:ff:1c:ae:13:b7:58:c7:d2:0b:00:dc:30:
         12:ae:05:e8:fc:1f:7c:5c:ec:3a:00:72:0e:22:25:b8:8a:85:
         c5:d0:30:93:82:86:01:1b:ee:b1:b2:ac:b5:e5:bf:e2:bb:d4:
         5a:ad:ba:0f:25:d3:3b:a5:96:b0:00:fd:c5:ee:88:fc:80:f9:
         df:18:55:92:c6:7b:0b:d7:41:85:2e:8e:86:b9:c0:70:70:37:
         88:2d:84:fe:da:e3:83:5f:64:30:9c:b5:0e:d5:db:d2:e8:85:
         9e:70:7e:f2:7f:8e:cc:f5:b1:87:c9:61:00:c3:57:64:19:88:
         1d:de:14:4e:aa:1a:fe:1a:33:b0:c6:5a:65:b0:2e:ee:cb:2f:
         4d:41:9a:be:40:7e:f3:7a:43:5a:b8:3d:58:4c:b9:1c:ca:63:
         39:41:8c:96:19:d1:f4:e3:ad:dd:43:14:47:2b:96:4d:b7:67:
         a6:33:ba:24:b0:c7:81:be:38:c7:ba:61:3e:3d:3c:a8:3e:a5:
         00:b9:6e:5f:61:52:6d:af:c7:d8:a6:6d:eb:2f:ab:fa:e3:1b:
         95:0e:f0:ca:db:15:8b:f3:45:66:92:8b:41:21:d8:5c:ca:45:
         65:d6:f1:e8:2e:be:35:a7:95:08:e6:c1:42:9f:2d:48:6e:b6:
         e2:37:3f:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5fbbNgC1BN9q2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdlNjRiNjYtODRkZi00NjY1LWE0ZmItZWIzYjhhZGQz
NjVlMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk
NmI4OWI5YzUtNmI4OC00MzBiLWE4ZWYtZTUwNDU4NmRmZmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFHJFfkJ/3AdSbVHN66NCGJSAoIysYV+5GEX
+sMhuBE7vexv3towW9frMry49BZx+eZfCGa52GjVzJRTNp/G1wZBzwUZAsAFFhDI
2lKQbphH7QfPDPvPcOK1UoyvnDKUyjCNrDsxY2GU/n8HJjpGVXK/wo4EKiB3Nj18
RxwJTRpdsnLdE1ffQuzsXo84cQ46QfHxnxzyEzgUM9t9W5FrOihK3Cy6ugSCkJYG
FY9+Qw4GqOcGxAnPsfUczdGwsAo52+6OeeY9hxiywvwQr6cmzz7WuJCzuN05DVXs
8+9S4RmxbpexQTsT3rCCdBmBaAlSY9FbYEFqNKhLWExoww1AOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIJV5G4EAffoYY5qAGDN6pDNAM1wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2
NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNiOGFkZDM2NWUvNWNhYWRmMjQtZGUwOS0z
ODBkLTllODktMTZiMjcwNTViZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlNjRiNjYtODRkZi00NjY1LWE0
ZmItZWIzYjhhZGQzNjVlL2E3ZTY0YjY2LTg0ZGYtNDY2NS1hNGZiLWViM2I4YWRk
MzY1ZS5jcmwwHwYDVR0jBBgwFoAURD98KgLjgWbdKUOAz3Mgib/DGEAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNi
OGFkZDM2NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+glMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMALQLpWR/8crhO3WMfSCwDcMBKuBej8H3xc7DoAcg4iJbiKhcXQMJOC
hgEb7rGyrLXlv+K71Fqtug8l0zullrAA/cXuiPyA+d8YVZLGewvXQYUujoa5wHBw
N4gthP7a44NfZDCctQ7V29LohZ5wfvJ/jsz1sYfJYQDDV2QZiB3eFE6qGv4aM7DG
WmWwLu7LL01Bmr5AfvN6Q1q4PVhMuRzKYzlBjJYZ0fTjrd1DFEcrlk23Z6YzuiSw
x4G+OMe6YT49PKg+pQC5bl9hUm2vx9imbesvq/rjG5UO8MrbFYvzRWaSi0Eh2FzK
RWXW8eguvjWnlQjmwUKfLUhutuI3P/M=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:21:14 2025 by rpki-client