Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4616037c-cdea-398b-a7bf-bec79f1006c5.roa
File:                     4616037c-cdea-398b-a7bf-bec79f1006c5.roa (raw, json)
Hash identifier:          MitwivTOpkTftAr+X00+FiQs2hZfVkyzuz3/xihASBQ=
Subject key identifier:   FF:7E:9A:48:AF:06:B0:B5:A2:0F:56:12:EC:78:43:F6:E5:67:23:F9
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849D52EED331E8743B9A74F5DC0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4616037c-cdea-398b-a7bf-bec79f1006c5.roa
Signing time:             Mon 12 May 2025 21:35:33 +0000
ROA not before:           Mon 12 May 2025 21:35:33 +0000
ROA not after:            Sun 10 Aug 2025 21:35:33 +0000
asID:                     31898
IP address blocks:        170.114.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:2e:ed:33:1e:87:43:b9:a7:4f:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May 12 21:35:33 2025 GMT
            Not After : Aug 10 21:35:33 2025 GMT
        Subject: CN=711f8686-5749-4c82-a4b8-4fffdfe22f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:6e:fb:12:f8:6b:ab:1a:df:00:4d:01:af:
                    38:9a:5c:69:c2:d1:16:a8:3b:c4:1e:ea:84:9f:9e:
                    ec:86:5e:07:6d:3c:60:25:d0:08:d0:d7:1a:9e:07:
                    3c:82:1b:28:0b:30:9f:24:48:a3:55:2b:95:e5:9c:
                    bd:82:16:72:8e:dc:ac:5f:68:a4:59:39:79:39:88:
                    1e:3e:95:ca:5f:4b:b5:96:0b:4f:e1:82:ea:b8:50:
                    35:1e:28:92:31:5d:a5:06:a4:59:58:40:5d:7d:3d:
                    7e:a0:76:00:8a:05:29:23:f6:41:d3:a5:b3:50:fc:
                    e4:31:f6:fd:d5:39:e9:67:2d:c5:36:c7:cf:0e:35:
                    4c:3b:73:22:09:d0:77:db:9a:fe:1d:3f:cc:95:db:
                    da:82:c6:b4:90:02:1d:e7:fe:a5:02:db:ba:65:29:
                    f8:bd:31:25:df:ea:a6:71:c9:1c:0b:42:4f:22:80:
                    93:51:8c:d2:0c:33:34:0d:ba:03:09:3a:80:a3:1b:
                    10:f7:3f:30:b4:6e:ab:40:7e:78:c9:44:e9:31:66:
                    87:51:f9:74:b6:55:07:56:65:19:bc:bf:93:4e:31:
                    ef:2f:e8:10:5d:75:aa:a7:1a:b6:02:74:26:fe:dd:
                    2b:06:99:22:a1:97:6d:47:1c:c8:4d:78:69:56:97:
                    05:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7E:9A:48:AF:06:B0:B5:A2:0F:56:12:EC:78:43:F6:E5:67:23:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4616037c-cdea-398b-a7bf-bec79f1006c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:75:08:61:19:d3:c3:9e:dd:1f:2c:e8:7f:8e:f0:12:b5:d0:
         d5:48:75:6a:9d:ae:3e:80:35:37:34:2c:dc:dd:67:85:0e:ae:
         79:9f:33:78:3b:3c:d6:de:a7:39:c3:b9:21:8f:a4:0b:90:74:
         f4:11:01:49:27:6e:ce:73:8f:22:9e:d6:ef:e7:3f:97:d0:5c:
         36:ee:00:82:dc:af:3c:bd:02:3a:0e:eb:f4:af:ab:58:f0:36:
         13:9b:2d:2e:8e:67:1e:9b:c6:01:bb:71:40:21:0c:03:6a:9b:
         2f:ca:cc:23:74:ab:ec:01:e7:68:db:d6:87:69:97:49:4a:32:
         73:33:e6:0c:eb:24:f5:5e:98:1f:43:11:49:3a:3f:ad:b4:30:
         d3:53:8f:f0:74:96:08:71:c5:90:d3:07:3f:ab:3f:40:cb:f6:
         a2:31:2c:40:8e:18:6c:c3:e9:e2:d2:aa:76:ab:41:8f:15:81:
         e1:ec:25:0c:f7:aa:d4:ea:98:48:0d:66:67:97:37:94:b9:53:
         5f:f8:f8:4d:79:f4:ed:af:fb:e8:bb:61:b2:bc:88:48:f7:97:
         92:98:65:4f:fa:f7:5a:00:58:11:89:2f:be:f2:68:61:6f:a2:
         b2:ff:7b:45:df:fb:4e:6a:95:bb:e4:a1:d0:14:99:47:60:fb:
         95:5d:ce:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVLu0zHodDuadPXcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDUxMjIxMzUzM1oXDTI1MDgxMDIxMzUzM1owLzEtMCsGA1UEAxMk
NzExZjg2ODYtNTc0OS00YzgyLWE0YjgtNGZmZmRmZTIyZjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWxu+xL4a6sa3wBNAa84mlxpwtEWqDvEHuqE
n57shl4HbTxgJdAI0Ncangc8ghsoCzCfJEijVSuV5Zy9ghZyjtysX2ikWTl5OYge
PpXKX0u1lgtP4YLquFA1HiiSMV2lBqRZWEBdfT1+oHYAigUpI/ZB06WzUPzkMfb9
1TnpZy3FNsfPDjVMO3MiCdB325r+HT/Mldvagsa0kAId5/6lAtu6ZSn4vTEl3+qm
cckcC0JPIoCTUYzSDDM0DboDCTqAoxsQ9z8wtG6rQH54yUTpMWaHUfl0tlUHVmUZ
vL+TTjHvL+gQXXWqpxq2AnQm/t0rBpkioZdtRxzITXhpVpcFFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP9+mkivBrC1og9WEux4Q/blZyP5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNDYxNjAzN2MtY2RlYS0z
OThiLWE3YmYtYmVjNzlmMTAwNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnI8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEx1CGEZ08Oe3R8s6H+O8BK10NVIdWqdrj6ANTc0LNzdZ4UOrnmfM3g7
PNbepznDuSGPpAuQdPQRAUknbs5zjyKe1u/nP5fQXDbuAILcrzy9AjoO6/Svq1jw
NhObLS6OZx6bxgG7cUAhDANqmy/KzCN0q+wB52jb1odpl0lKMnMz5gzrJPVemB9D
EUk6P620MNNTj/B0lghxxZDTBz+rP0DL9qIxLECOGGzD6eLSqnarQY8VgeHsJQz3
qtTqmEgNZmeXN5S5U1/4+E159O2v++i7YbK8iEj3l5KYZU/691oAWBGJL77yaGFv
orL/e0Xf+05qlbvkodAUmUdg+5Vdzmo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:44:41 2025 by rpki-client