Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/59401f7c-af88-37e4-b7e8-44bc381ea339.roa
File:                     59401f7c-af88-37e4-b7e8-44bc381ea339.roa (raw, json)
Hash identifier:          4tfgv/IcdqEAJ2x2dJ/QYoa7TuB7vXOF0d2ooHqaR5A=
Subject key identifier:   F3:46:51:04:33:CD:E6:43:C0:F9:80:56:11:08:D4:11:5A:A5:05:B1
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A8B0B5BA6B8497B7C46586D80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/59401f7c-af88-37e4-b7e8-44bc381ea339.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     64267
IP address blocks:        152.44.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:5b:a6:b8:49:7b:7c:46:58:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=f5343d94-6a49-42b0-84f6-97de0e385aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:06:73:b7:ff:d9:ae:78:f4:32:04:13:3b:
                    fc:9f:58:df:73:49:90:fe:63:7f:40:7b:ff:ee:d9:
                    a0:c6:55:88:de:b4:14:0c:7f:98:6c:bb:7a:fd:aa:
                    0b:4b:ff:71:36:1e:5e:29:a6:44:6c:ad:7e:cc:c3:
                    12:44:3a:c3:ca:6f:a4:71:3b:c4:22:1d:a3:59:90:
                    f8:a8:7e:e5:b7:06:6d:a3:78:84:23:ab:cb:e8:7b:
                    db:15:ec:61:13:9a:d8:ad:12:c1:01:5d:e1:45:2b:
                    1b:92:05:aa:15:a8:92:de:d6:60:14:79:09:ee:03:
                    3f:88:fb:c4:a1:3c:84:3d:b5:e4:f4:65:7e:7e:22:
                    58:36:60:39:7a:11:eb:26:7b:a4:75:5a:b3:2a:4f:
                    f3:8e:7c:12:5f:05:a0:61:3a:a2:ba:3f:94:7c:8d:
                    6a:66:f6:f8:f8:b2:41:9b:a6:7d:34:52:8c:87:82:
                    c7:5f:7d:d8:ab:6a:29:54:90:7c:1d:de:23:10:17:
                    57:a0:76:b0:4e:ad:a9:7f:de:42:c8:0b:30:a2:16:
                    a9:c5:c3:4d:f0:c4:f7:65:81:b3:56:c0:d1:35:34:
                    a6:34:10:2d:21:5c:59:a6:3a:86:f8:a4:f1:4f:9d:
                    b6:3f:1d:90:78:2d:84:0f:5d:19:97:fb:d6:3a:ee:
                    9e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:46:51:04:33:CD:E6:43:C0:F9:80:56:11:08:D4:11:5A:A5:05:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/59401f7c-af88-37e4-b7e8-44bc381ea339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f1:6d:f4:73:e3:b8:f4:94:d2:db:89:e2:b1:e5:1d:fb:c6:
         85:87:26:c7:4e:4c:90:b9:9f:55:80:df:b1:6b:56:4f:92:72:
         3a:4f:bf:df:ee:41:68:a4:64:73:b3:b5:97:91:ee:24:c1:7d:
         de:4d:67:da:17:4d:38:9a:c8:97:03:ad:34:95:3c:cf:9b:6b:
         8b:04:33:2f:92:03:88:0a:8b:56:07:15:37:7e:05:8b:7e:f2:
         68:85:e8:ec:25:7e:c1:e2:5f:c2:1d:4c:6e:7e:04:2a:06:1c:
         ca:91:4b:4b:75:90:d3:07:55:64:40:ad:2c:c9:10:ff:e1:8c:
         9c:07:28:eb:8c:ec:7f:a4:d9:dc:c8:95:04:e2:24:3a:c9:b5:
         71:45:31:a7:37:1c:7d:a6:34:c3:87:b1:ba:ba:a8:12:55:79:
         bf:d1:c1:29:4a:ed:11:d7:3f:2f:c7:7f:31:f2:05:4c:a0:92:
         b7:19:61:2e:f7:c9:1a:82:a7:69:44:f4:ae:0b:f2:d7:01:9a:
         56:d2:00:2e:74:93:07:f2:39:e9:e7:e1:e3:86:cd:ec:57:20:
         d2:9a:92:7f:9a:e8:fb:06:44:54:96:92:01:f4:d5:a1:f1:a7:
         7f:39:94:4f:0e:0d:b5:74:39:dd:dc:d6:a1:41:29:57:34:8c:
         65:e9:a9:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1umuEl7fEZYbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk
ZjUzNDNkOTQtNmE0OS00MmIwLTg0ZjYtOTdkZTBlMzg1YWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlckGc7f/2a549DIEEzv8n1jfc0mQ/mN/QHv/
7tmgxlWI3rQUDH+YbLt6/aoLS/9xNh5eKaZEbK1+zMMSRDrDym+kcTvEIh2jWZD4
qH7ltwZto3iEI6vL6HvbFexhE5rYrRLBAV3hRSsbkgWqFaiS3tZgFHkJ7gM/iPvE
oTyEPbXk9GV+fiJYNmA5ehHrJnukdVqzKk/zjnwSXwWgYTqiuj+UfI1qZvb4+LJB
m6Z9NFKMh4LHX33Yq2opVJB8Hd4jEBdXoHawTq2pf95CyAswohapxcNN8MT3ZYGz
VsDRNTSmNBAtIVxZpjqG+KTxT522Px2QeC2ED10Zl/vWOu6esQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPNGUQQzzeZDwPmAVhEI1BFapQWxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNTk0MDFmN2MtYWY4OC0z
N2U0LWI3ZTgtNDRiYzM4MWVhMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCxoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjxbfRz47j0lNLbieKx5R37xoWHJsdOTJC5n1WA37FrVk+ScjpPv9/u
QWikZHOztZeR7iTBfd5NZ9oXTTiayJcDrTSVPM+ba4sEMy+SA4gKi1YHFTd+BYt+
8miF6OwlfsHiX8IdTG5+BCoGHMqRS0t1kNMHVWRArSzJEP/hjJwHKOuM7H+k2dzI
lQTiJDrJtXFFMac3HH2mNMOHsbq6qBJVeb/RwSlK7RHXPy/HfzHyBUygkrcZYS73
yRqCp2lE9K4L8tcBmlbSAC50kwfyOenn4eOGzexXINKakn+a6PsGRFSWkgH01aHx
p385lE8ODbV0Od3c1qFBKVc0jGXpqU0=
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:29:02 2025 by rpki-client