Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/65b97efe-ed18-362d-843f-eac5d56e88c1.roa
File:                     65b97efe-ed18-362d-843f-eac5d56e88c1.roa (raw, json)
Hash identifier:          anr0Nq0ooI2Q3P9rbjYmT05IJLZgk1lrQY6I3WZqaMM=
Subject key identifier:   20:90:ED:59:63:2F:CA:D6:41:D3:73:BA:92:02:17:7A:A4:58:12:13
Certificate issuer:       /CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2
Certificate serial:       010D0C9F43285849C904DE62B7B74370E1569440
Authority key identifier: 56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/65b97efe-ed18-362d-843f-eac5d56e88c1.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        147.160.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:de:62:b7:b7:43:70:e1:56:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=a05ac5ae-153f-4e13-9dec-44fa66566110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:39:21:e8:68:3c:8c:99:98:18:c5:cd:0b:07:
                    59:d4:16:c7:97:e7:30:8d:81:06:47:62:9f:fb:aa:
                    97:81:d4:bf:6f:3c:b7:f4:78:23:1a:e0:fc:9f:f2:
                    7b:7f:b5:52:f5:03:4e:3c:90:ae:8c:b2:0b:56:8d:
                    c0:72:00:43:2c:71:0c:51:4b:11:c3:8d:52:e8:23:
                    e0:73:d0:a4:3d:14:07:59:16:70:a1:7c:c5:a6:09:
                    6b:99:3d:a8:eb:ca:33:e8:a1:11:3f:cf:80:e5:87:
                    f7:44:c0:42:a3:fe:ad:d9:1a:af:64:ab:ea:c3:e8:
                    a4:d1:06:7b:33:18:a5:cd:5e:4c:66:bf:f5:fe:70:
                    15:72:6d:83:20:0f:ba:0b:37:2b:c6:b2:aa:29:14:
                    b0:3c:97:10:9c:36:76:b9:a1:23:10:e4:9a:2b:e4:
                    9c:2e:49:e0:79:ea:7e:28:0d:3a:4b:dd:ce:b4:1c:
                    45:10:1a:66:fb:00:77:b9:46:e3:f8:27:a0:83:70:
                    5d:b3:ef:38:1e:68:af:5e:9d:ef:49:d4:31:5e:3c:
                    66:69:70:a1:d0:e0:39:76:15:85:4e:22:fb:bc:41:
                    36:d4:92:3e:db:f0:fd:ca:7b:19:67:8e:c6:02:c2:
                    48:5e:89:02:61:34:ef:54:64:3a:5b:02:26:d3:33:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:90:ED:59:63:2F:CA:D6:41:D3:73:BA:92:02:17:7A:A4:58:12:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/65b97efe-ed18-362d-843f-eac5d56e88c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl

            X509v3 Authority Key Identifier:
                keyid:56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ee:72:cc:83:8f:c3:dd:6e:c5:dc:c3:d2:ea:01:ae:aa:77:
         23:31:d6:0b:95:b6:d8:9e:79:54:ea:4d:f2:86:c5:08:8c:5f:
         3a:c4:1b:cd:6b:bd:4e:8f:cf:12:e0:77:4c:e7:e7:4a:70:d9:
         a5:b3:9a:fe:8a:1c:41:d2:c9:0d:d8:47:19:ac:25:6a:a8:80:
         02:98:d6:ff:5a:8a:82:eb:ce:18:4e:bd:1b:83:9d:83:40:a8:
         85:18:25:3e:c9:93:8f:35:5d:09:e9:8d:fe:59:1c:2c:cf:c0:
         15:ed:4b:ef:24:fe:53:a5:9f:a3:21:b2:79:38:42:2d:e0:06:
         9e:0a:34:54:07:cc:b4:27:fa:5b:81:0b:6a:5a:bd:ea:9c:b3:
         2d:b5:24:cb:17:0f:5e:bd:4c:40:b2:94:36:5c:3b:94:3a:44:
         46:be:8a:c5:2a:c2:96:b0:13:ef:db:e7:31:6a:6e:f2:f8:f5:
         cc:3a:47:1a:b5:98:a6:24:a5:b9:a4:0f:90:70:c8:22:9c:20:
         e3:65:b8:b8:77:11:47:02:5d:a8:08:44:ab:b1:c1:d0:62:6e:
         7c:42:35:59:35:38:5c:17:5c:03:52:6c:d1:17:04:31:4b:89:
         98:88:8e:09:b3:51:6a:4e:7f:d1:d1:d0:ae:28:bf:1d:e0:b5:
         b5:44:4d:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBN5it7dDcOFWlEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjUwZWJjZTMtZGRmNS00ZmIwLWI4ZWQtYjlhNDVkOGI0
NmIyMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
YTA1YWM1YWUtMTUzZi00ZTEzLTlkZWMtNDRmYTY2NTY2MTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTkh6Gg8jJmYGMXNCwdZ1BbHl+cwjYEGR2Kf
+6qXgdS/bzy39HgjGuD8n/J7f7VS9QNOPJCujLILVo3AcgBDLHEMUUsRw41S6CPg
c9CkPRQHWRZwoXzFpglrmT2o68oz6KERP8+A5Yf3RMBCo/6t2RqvZKvqw+ik0QZ7
MxilzV5MZr/1/nAVcm2DIA+6CzcrxrKqKRSwPJcQnDZ2uaEjEOSaK+ScLkngeep+
KA06S93OtBxFEBpm+wB3uUbj+Cegg3Bds+84HmivXp3vSdQxXjxmaXCh0OA5dhWF
TiL7vEE21JI+2/D9ynsZZ47GAsJIXokCYTTvVGQ6WwIm0zO7vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCCQ7VljL8rWQdNzupICF3qkWBITMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNTBl
YmNlMy1kZGY1LTRmYjAtYjhlZC1iOWE0NWQ4YjQ2YjIvNjViOTdlZmUtZWQxOC0z
NjJkLTg0M2YtZWFjNWQ1NmU4OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjUwZWJjZTMtZGRmNS00ZmIwLWI4
ZWQtYjlhNDVkOGI0NmIyL2I1MGViY2UzLWRkZjUtNGZiMC1iOGVkLWI5YTQ1ZDhi
NDZiMi5jcmwwHwYDVR0jBBgwFoAUVs/TeO1FMPG70WFTkaT81Dem6iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNTBlYmNlMy1kZGY1LTRmYjAtYjhlZC1iOWE0
NWQ4YjQ2YjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6CnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbucsyDj8PdbsXcw9LqAa6qdyMx1guVttieeVTqTfKGxQiMXzrEG81r
vU6PzxLgd0zn50pw2aWzmv6KHEHSyQ3YRxmsJWqogAKY1v9aioLrzhhOvRuDnYNA
qIUYJT7Jk481XQnpjf5ZHCzPwBXtS+8k/lOln6Mhsnk4Qi3gBp4KNFQHzLQn+luB
C2paveqcsy21JMsXD169TECylDZcO5Q6REa+isUqwpawE+/b5zFqbvL49cw6Rxq1
mKYkpbmkD5BwyCKcIONluLh3EUcCXagIRKuxwdBibnxCNVk1OFwXXANSbNEXBDFL
iZiIjgmzUWpOf9HR0K4ovx3gtbVETYo=
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:50:46 2025 by rpki-client