Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/f70e090b-3e20-3bb7-aa11-cb1155ff8999.roa
File:                     f70e090b-3e20-3bb7-aa11-cb1155ff8999.roa (raw, json)
Hash identifier:          200tOPBkth3L+U6fGSU53j0uvaIYTh+ROsKw0RZL3KU=
Subject key identifier:   E8:C0:5D:F8:D3:FC:47:C3:3E:C9:07:79:69:AB:5F:EC:CA:0D:79:CF
Certificate issuer:       /CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
Certificate serial:       010D0C9F432858495C243F271F9CFD31646DE040
Authority key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/f70e090b-3e20-3bb7-aa11-cb1155ff8999.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     26284
IP address blocks:        216.250.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:3f:27:1f:9c:fd:31:64:6d:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=e05e8f4a-c454-4076-85d9-03d8d35a8225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:9a:28:35:f3:15:0e:80:2b:33:73:e0:0d:
                    5f:e6:a6:f8:d1:be:a4:5e:21:76:18:5e:ad:81:db:
                    af:a7:00:f9:9b:40:57:71:43:81:fc:79:5f:18:13:
                    7b:cf:75:1d:e6:2d:c6:c6:95:56:3a:59:20:16:f3:
                    99:5d:00:02:c4:e0:f3:46:2f:95:ea:08:78:af:07:
                    1d:46:24:6d:e5:24:ee:43:0a:9c:49:9d:df:e0:7c:
                    9b:30:da:63:5a:3e:07:da:5a:9e:36:ec:62:a3:9c:
                    05:92:5e:c4:2f:47:dd:eb:b7:cc:0a:c9:56:45:e5:
                    af:4a:01:fd:49:a8:51:8e:2b:36:d0:fa:60:3b:82:
                    71:90:7f:0c:6c:53:3a:af:0e:68:ea:2e:1b:b9:89:
                    b7:2d:4e:17:e6:e2:46:8a:9a:cb:06:37:ab:01:6d:
                    07:3c:66:c2:06:61:50:ba:58:34:7a:99:03:65:6c:
                    06:6a:a3:00:39:70:de:3a:59:17:31:98:7e:b2:14:
                    ce:db:99:d2:5e:72:07:7e:e7:51:bd:55:b2:9f:68:
                    37:c3:45:98:c4:9b:e4:cb:44:05:89:12:39:bf:d4:
                    53:a6:30:3a:a8:c0:89:29:b1:f6:f3:14:28:b4:98:
                    ef:2e:f9:d0:49:17:8e:0f:91:3e:3a:e5:e4:98:43:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C0:5D:F8:D3:FC:47:C3:3E:C9:07:79:69:AB:5F:EC:CA:0D:79:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/f70e090b-3e20-3bb7-aa11-cb1155ff8999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl

            X509v3 Authority Key Identifier:
                keyid:E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:05:77:99:45:bc:22:4c:d3:e0:00:03:79:80:0d:b2:f7:61:
         e6:da:0a:1b:c9:33:eb:bf:48:cf:70:b6:de:73:2b:38:43:72:
         bf:a0:77:eb:b9:ac:ed:53:e0:41:fe:e9:eb:b9:69:b7:8b:32:
         28:15:b4:b0:a2:ad:02:d8:91:a0:f3:d6:bf:ed:5c:74:30:53:
         4b:87:7a:09:94:4d:d7:0b:4f:15:5a:94:f9:02:e9:03:f4:30:
         e2:68:e9:20:5c:b3:84:4a:7f:ae:f1:f9:03:19:c7:4c:a7:6d:
         4b:1f:8d:b3:20:3e:24:f8:ef:0f:00:1d:c2:a4:53:38:b2:5e:
         31:a4:0d:02:f9:58:e3:bb:51:10:7a:e6:fc:d2:00:ce:58:f2:
         ed:b9:9c:41:a3:3b:2a:e6:c6:3b:a7:bf:82:2c:92:f7:c6:91:
         35:93:61:20:79:e4:60:8d:0f:e8:d8:07:6c:6c:83:5c:f1:30:
         38:71:7a:71:50:06:f5:a7:3d:f4:da:5a:e0:fb:13:34:b7:6d:
         e4:a9:80:ca:c0:95:13:b8:62:fa:51:e3:e9:9c:8f:44:91:f8:
         45:06:28:e9:a4:f7:57:6c:80:a7:6a:d6:91:2a:30:b3:e2:60:
         63:ac:6f:74:2f:34:ab:1f:d2:a4:15:27:24:0b:5a:87:a0:a0:
         49:7b:6c:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJD8nH5z9MWRt4EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVlNTJiMGQtYjE1Yy00YjljLWFhM2EtM2Q0YTRkMzZh
ZDIxMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
ZTA1ZThmNGEtYzQ1NC00MDc2LTg1ZDktMDNkOGQzNWE4MjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfaaKDXzFQ6AKzNz4A1f5qb40b6kXiF2GF6t
gduvpwD5m0BXcUOB/HlfGBN7z3Ud5i3GxpVWOlkgFvOZXQACxODzRi+V6gh4rwcd
RiRt5STuQwqcSZ3f4HybMNpjWj4H2lqeNuxio5wFkl7EL0fd67fMCslWReWvSgH9
SahRjis20PpgO4JxkH8MbFM6rw5o6i4buYm3LU4X5uJGiprLBjerAW0HPGbCBmFQ
ulg0epkDZWwGaqMAOXDeOlkXMZh+shTO25nSXnIHfudRvVWyn2g3w0WYxJvky0QF
iRI5v9RTpjA6qMCJKbH28xQotJjvLvnQSReOD5E+OuXkmEN3MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjAXfjT/EfDPskHeWmrX+zKDXnPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84ZWU1
MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRhNGQzNmFkMjEvZjcwZTA5MGItM2UyMC0z
YmI3LWFhMTEtY2IxMTU1ZmY4OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGVlNTJiMGQtYjE1Yy00YjljLWFh
M2EtM2Q0YTRkMzZhZDIxLzhlZTUyYjBkLWIxNWMtNGI5Yy1hYTNhLTNkNGE0ZDM2
YWQyMS5jcmwwHwYDVR0jBBgwFoAU4HQ5KtuU5tQjNF2pYbsPKOSydtgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZWU1MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRh
NGQzNmFkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsFd5lFvCJM0+AAA3mADbL3YebaChvJM+u/SM9wtt5zKzhDcr+gd+u5
rO1T4EH+6eu5abeLMigVtLCirQLYkaDz1r/tXHQwU0uHegmUTdcLTxValPkC6QP0
MOJo6SBcs4RKf67x+QMZx0ynbUsfjbMgPiT47w8AHcKkUziyXjGkDQL5WOO7URB6
5vzSAM5Y8u25nEGjOyrmxjunv4IskvfGkTWTYSB55GCND+jYB2xsg1zxMDhxenFQ
BvWnPfTaWuD7EzS3beSpgMrAlRO4YvpR4+mcj0SR+EUGKOmk91dsgKdq1pEqMLPi
YGOsb3QvNKsf0qQVJyQLWoegoEl7bDM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:55:18 2025 by rpki-client