Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/6740c892-d540-3efa-a786-63007c9c57ce.roa
File:                     6740c892-d540-3efa-a786-63007c9c57ce.roa (raw, json)
Hash identifier:          ea+zzJztnystiFvM8WwRWLm43v/1KoGn0LtzOnfj7sM=
Subject key identifier:   E6:F5:56:3E:82:FD:0E:C0:9E:83:A8:CE:4F:BA:01:BA:30:7F:A5:97
Certificate issuer:       /CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
Certificate serial:       010D0C9F432858494B6416A3E82575176ADB4280
Authority key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/6740c892-d540-3efa-a786-63007c9c57ce.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        216.250.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:16:a3:e8:25:75:17:6a:db:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=519c6114-453b-4ec6-a464-2856e725e263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:c4:3f:3a:bc:8c:8d:00:54:7f:e4:0e:bb:
                    b9:d0:61:da:b0:09:f4:23:4c:31:a3:e6:69:61:02:
                    6b:1d:a3:0a:96:ad:5d:0d:90:c6:d4:aa:09:b1:05:
                    fd:26:43:22:bb:04:c0:a5:c4:2c:47:b6:f9:92:f7:
                    1c:ff:ca:48:be:4b:a0:33:75:4c:a8:b9:84:49:37:
                    18:c7:f6:2b:c8:ab:9a:2a:aa:f1:42:64:6b:18:a6:
                    a1:4e:50:06:cd:99:57:03:76:ca:39:25:ef:f9:ba:
                    d2:04:48:0e:2c:59:b2:77:aa:97:e0:6d:4a:22:ec:
                    9d:4a:35:eb:d6:01:2c:3a:6b:8d:6f:e5:8f:3b:69:
                    e4:4a:69:9b:3c:40:a0:9d:24:aa:19:dd:91:85:79:
                    d1:e5:5e:cc:22:2b:fd:61:79:f9:0e:38:24:5b:84:
                    99:da:b8:7a:9b:26:5f:58:2b:db:2b:6f:33:d5:49:
                    04:05:d8:71:8f:2f:c6:dc:ea:aa:80:6e:04:cf:23:
                    ac:55:36:5b:ab:e0:59:66:d3:a7:7d:9b:dc:33:79:
                    b0:72:68:96:70:ce:11:ee:f8:11:00:16:ac:43:9f:
                    f8:6b:67:b6:ac:04:a1:e6:1a:58:6a:46:9c:46:2e:
                    82:9c:4b:7d:45:a7:2b:55:19:7f:a2:6b:bc:83:b6:
                    ca:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F5:56:3E:82:FD:0E:C0:9E:83:A8:CE:4F:BA:01:BA:30:7F:A5:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/6740c892-d540-3efa-a786-63007c9c57ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl

            X509v3 Authority Key Identifier:
                keyid:E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:42:b9:5f:70:3e:d1:c6:5d:8c:92:56:c2:5e:3a:23:3b:20:
         3c:89:43:6c:63:d0:92:ba:59:c7:82:49:19:4c:34:aa:be:a8:
         44:51:7c:30:0a:20:ad:4a:0e:eb:e0:4a:46:2d:0c:9d:33:0e:
         66:26:bd:97:c8:92:72:72:e2:b3:22:9c:42:d4:0e:e1:f6:77:
         a0:c5:6e:03:f9:7a:51:cf:df:b6:b1:36:0f:a6:86:14:e8:07:
         39:54:d2:45:78:89:14:e9:fd:95:5f:35:37:a6:6c:be:af:74:
         c9:20:c5:0b:82:70:c9:7f:59:d0:67:fe:34:05:b9:f5:00:ea:
         52:70:37:ea:55:c4:4d:52:9e:97:70:c2:41:36:61:80:2c:90:
         c5:e8:28:61:e8:71:c3:1c:7f:fe:dc:df:b5:c1:bc:0d:d3:00:
         54:37:c5:02:0f:21:38:11:da:ad:dd:1b:af:8a:4a:d6:70:37:
         3f:13:bd:d2:b5:0e:75:1a:4e:96:76:26:c7:bc:2f:06:17:44:
         e9:08:b9:a3:44:2b:7a:2e:3e:89:02:73:8b:6e:32:39:36:51:
         6c:b7:59:98:9a:40:a1:c5:af:2c:89:6b:60:dc:3d:3d:1b:bb:
         81:57:0f:13:33:62:72:06:b3:88:ee:bc:98:2f:3f:01:20:f4:
         9c:de:e9:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBaj6CV1F2rbQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVlNTJiMGQtYjE1Yy00YjljLWFhM2EtM2Q0YTRkMzZh
ZDIxMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
NTE5YzYxMTQtNDUzYi00ZWM2LWE0NjQtMjg1NmU3MjVlMjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6TEPzq8jI0AVH/kDru50GHasAn0I0wxo+Zp
YQJrHaMKlq1dDZDG1KoJsQX9JkMiuwTApcQsR7b5kvcc/8pIvkugM3VMqLmESTcY
x/YryKuaKqrxQmRrGKahTlAGzZlXA3bKOSXv+brSBEgOLFmyd6qX4G1KIuydSjXr
1gEsOmuNb+WPO2nkSmmbPECgnSSqGd2RhXnR5V7MIiv9YXn5DjgkW4SZ2rh6myZf
WCvbK28z1UkEBdhxjy/G3OqqgG4EzyOsVTZbq+BZZtOnfZvcM3mwcmiWcM4R7vgR
ABasQ5/4a2e2rASh5hpYakacRi6CnEt9RacrVRl/omu8g7bKUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOb1Vj6C/Q7AnoOozk+6Abowf6WXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84ZWU1
MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRhNGQzNmFkMjEvNjc0MGM4OTItZDU0MC0z
ZWZhLWE3ODYtNjMwMDdjOWM1N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGVlNTJiMGQtYjE1Yy00YjljLWFh
M2EtM2Q0YTRkMzZhZDIxLzhlZTUyYjBkLWIxNWMtNGI5Yy1hYTNhLTNkNGE0ZDM2
YWQyMS5jcmwwHwYDVR0jBBgwFoAU4HQ5KtuU5tQjNF2pYbsPKOSydtgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZWU1MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRh
NGQzNmFkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PoCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxCuV9wPtHGXYySVsJeOiM7IDyJQ2xj0JK6WceCSRlMNKq+qERRfDAK
IK1KDuvgSkYtDJ0zDmYmvZfIknJy4rMinELUDuH2d6DFbgP5elHP37axNg+mhhTo
BzlU0kV4iRTp/ZVfNTembL6vdMkgxQuCcMl/WdBn/jQFufUA6lJwN+pVxE1Snpdw
wkE2YYAskMXoKGHoccMcf/7c37XBvA3TAFQ3xQIPITgR2q3dG6+KStZwNz8TvdK1
DnUaTpZ2Jse8LwYXROkIuaNEK3ouPokCc4tuMjk2UWy3WZiaQKHFryyJa2DcPT0b
u4FXDxMzYnIGs4juvJgvPwEg9Jze6WA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:27 2025 by rpki-client