Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5849f610-95c6-395f-845b-1a4a889cb28e.roa
File:                     5849f610-95c6-395f-845b-1a4a889cb28e.roa (raw, json)
Hash identifier:          RRwzgulkXW3bjRXepScGigvYtMnbSvLNd3w4P8g1M1Q=
Subject key identifier:   F7:DC:A3:66:25:0B:45:9C:B0:DE:97:9D:C2:01:82:1F:AF:35:34:C2
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849F9DFBF2CEA8DEFA5A8232A40
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5849f610-95c6-395f-845b-1a4a889cb28e.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        134.224.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:bf:2c:ea:8d:ef:a5:a8:23:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=de60f600-eb14-439d-8f89-347f04a2c757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:34:81:23:18:86:ec:67:2d:1b:b0:78:6c:1c:
                    91:a2:e1:5c:d1:f7:b2:3a:d2:50:96:df:7b:be:05:
                    38:f0:0d:a7:c2:10:ff:d9:e3:f0:ec:ac:a1:b2:dd:
                    a5:f5:0e:8a:c3:be:06:ad:cf:b3:71:c7:c5:60:63:
                    84:5d:67:0b:8d:f1:c0:33:5f:15:ba:be:23:93:61:
                    95:0c:02:32:11:87:eb:fb:6d:52:6b:9c:99:c5:b1:
                    19:81:e1:1f:c0:a6:2c:c6:c2:b7:88:0d:43:ed:fc:
                    4e:20:14:9f:9e:bb:a9:4b:d6:2d:4d:cf:6c:22:2a:
                    51:47:30:04:24:4f:d5:92:4c:9e:a9:0d:45:e5:51:
                    a0:e6:7e:74:4b:65:38:94:18:ec:a6:a6:f5:7b:f3:
                    bf:d1:f0:ee:c9:0f:20:37:26:83:18:32:4f:90:12:
                    72:39:9c:74:7f:b2:8f:85:66:de:66:1d:d3:07:0b:
                    66:cc:ae:a7:75:a7:c4:42:c8:52:6e:43:38:d2:a3:
                    50:7c:c2:1a:ec:1a:f9:94:6c:40:a1:27:1c:d1:0f:
                    37:44:9e:d8:2a:11:e8:d2:0c:3e:22:45:4a:9e:3a:
                    2b:0a:d7:35:c0:58:92:f3:a8:12:ad:4c:ea:fe:99:
                    0f:87:02:fb:eb:f5:e6:99:4c:14:56:82:17:cf:91:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DC:A3:66:25:0B:45:9C:B0:DE:97:9D:C2:01:82:1F:AF:35:34:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5849f610-95c6-395f-845b-1a4a889cb28e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:11:6f:ba:ba:7d:e4:d1:27:18:23:6f:3b:7e:fa:12:33:3e:
         08:3c:ec:b9:e5:08:82:db:6f:62:4d:d5:ae:78:6a:bc:d0:2c:
         97:a0:cd:d4:bb:3e:b5:a2:60:cd:92:20:db:94:4e:78:80:b0:
         51:7c:70:59:13:08:b8:dd:31:95:f3:30:cb:eb:70:0c:f7:98:
         d6:15:92:45:e3:db:49:d9:a1:e4:b3:47:ae:1a:30:f7:69:a6:
         06:aa:92:c8:74:c0:f5:7a:bc:4b:37:e3:b2:7f:dd:ea:7b:70:
         c0:db:d4:d0:9c:b2:03:d4:fb:6c:41:a4:9a:7f:65:2c:f7:79:
         b8:2f:04:e8:88:6e:dd:50:f2:d1:a2:9a:9e:76:89:41:fb:4d:
         0d:c2:4b:a1:a6:8b:28:9e:ce:22:1a:2b:23:c6:94:bb:cc:47:
         4f:58:20:80:44:96:94:b7:d5:74:b0:90:48:63:06:a7:63:5c:
         b6:87:c6:b1:a0:e4:5e:91:ee:67:aa:a5:42:08:11:1b:d2:23:
         66:c0:9e:fa:a2:32:df:8b:39:ab:f0:e9:98:26:56:b0:4e:74:
         56:d9:4a:9c:e0:a6:bf:47:5e:4d:f3:f4:38:35:7f:48:27:d8:
         69:c5:c1:2e:e0:18:37:52:29:cf:31:0e:3c:78:70:47:d2:60:
         20:22:09:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn5378s6o3vpagjKkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
ZGU2MGY2MDAtZWIxNC00MzlkLThmODktMzQ3ZjA0YTJjNzU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTSBIxiG7GctG7B4bByRouFc0feyOtJQlt97
vgU48A2nwhD/2ePw7Kyhst2l9Q6Kw74Grc+zccfFYGOEXWcLjfHAM18Vur4jk2GV
DAIyEYfr+21Sa5yZxbEZgeEfwKYsxsK3iA1D7fxOIBSfnrupS9YtTc9sIipRRzAE
JE/VkkyeqQ1F5VGg5n50S2U4lBjspqb1e/O/0fDuyQ8gNyaDGDJPkBJyOZx0f7KP
hWbeZh3TBwtmzK6ndafEQshSbkM40qNQfMIa7Br5lGxAoScc0Q83RJ7YKhHo0gw+
IkVKnjorCtc1wFiS86gSrUzq/pkPhwL76/XmmUwUVoIXz5GtOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPfco2YlC0WcsN6XncIBgh+vNTTCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNTg0OWY2MTAtOTVjNi0z
OTVmLTg0NWItMWE0YTg4OWNiMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhuCvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADoRb7q6feTRJxgjbzt++hIzPgg87LnlCILbb2JN1a54arzQLJegzdS7
PrWiYM2SINuUTniAsFF8cFkTCLjdMZXzMMvrcAz3mNYVkkXj20nZoeSzR64aMPdp
pgaqksh0wPV6vEs347J/3ep7cMDb1NCcsgPU+2xBpJp/ZSz3ebgvBOiIbt1Q8tGi
mp52iUH7TQ3CS6GmiyieziIaKyPGlLvMR09YIIBElpS31XSwkEhjBqdjXLaHxrGg
5F6R7meqpUIIERvSI2bAnvqiMt+LOavw6ZgmVrBOdFbZSpzgpr9HXk3z9Dg1f0gn
2GnFwS7gGDdSKc8xDjx4cEfSYCAiCcw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:34:16 2025 by rpki-client