Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/5a90e6dc-3978-3b2d-8257-f3c864728875.roa
File:                     5a90e6dc-3978-3b2d-8257-f3c864728875.roa (raw, json)
Hash identifier:          5QuiTLbkYATp4bUw6PCcbQedkE6tIrhAOAhG9os2hQM=
Subject key identifier:   8A:4D:0C:6F:BC:5F:9F:07:3E:F8:E7:A9:19:CB:E9:69:8E:4E:59:99
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858491ED6DB3118BFD51009356A80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/5a90e6dc-3978-3b2d-8257-f3c864728875.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     14699
IP address blocks:        65.51.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:db:31:18:bf:d5:10:09:35:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=1e4292ef-23bc-42f7-b437-9d1119f437bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3b:a3:3f:ab:82:0b:63:93:6a:72:18:df:63:
                    ea:be:3f:c9:4b:49:53:ba:7d:df:85:41:49:fe:56:
                    63:bf:9b:26:4d:7c:6b:67:4a:a4:60:db:5e:60:93:
                    1e:a5:ee:0d:56:f4:11:27:ad:27:36:2f:80:8a:e2:
                    f2:51:92:69:4a:11:f1:3c:ad:b1:f1:30:cb:9a:85:
                    a3:3f:de:af:28:86:db:0e:94:82:16:4c:f7:90:9e:
                    fe:ee:ac:9d:ec:a3:1e:6f:9c:07:2c:f8:bb:23:87:
                    0b:1f:98:ad:e5:4e:4a:95:c8:3a:e6:e9:ae:fb:18:
                    bd:20:d3:d6:cd:ec:7c:fb:d8:77:54:46:99:db:1e:
                    e1:a6:8d:25:4c:7b:e3:11:1f:5c:04:6d:62:38:0a:
                    7a:e9:b2:92:9a:c3:8e:52:5f:9c:93:55:a1:7c:59:
                    88:b5:58:8b:95:f4:5e:a3:74:23:26:03:02:99:ee:
                    bf:4f:41:45:23:3b:11:d0:a5:af:14:fb:74:19:37:
                    d2:95:7f:63:a5:a2:70:5c:19:ca:1e:a8:ac:04:7c:
                    04:05:00:63:92:a5:70:c5:5a:9c:a4:54:cf:70:a7:
                    a4:a1:25:7e:5e:8c:cf:97:ee:a3:37:78:b2:2a:e3:
                    8e:73:3f:a5:56:da:0e:3d:cc:aa:f2:18:f4:a7:ae:
                    a2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4D:0C:6F:BC:5F:9F:07:3E:F8:E7:A9:19:CB:E9:69:8E:4E:59:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/5a90e6dc-3978-3b2d-8257-f3c864728875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:00:77:e0:e7:bd:c2:05:f8:e5:ff:97:00:18:83:4f:66:d3:
         66:a1:f0:4b:23:05:a2:c1:24:a7:ba:68:a6:41:a5:ab:23:94:
         db:b2:84:e4:7e:08:94:11:7c:1d:88:31:04:39:15:7e:36:9b:
         40:06:80:32:fb:5a:93:47:a3:c1:9c:c4:cb:7c:c7:61:44:d2:
         60:9c:8e:d8:e9:ef:b2:c2:f3:34:69:3d:79:a4:df:c9:75:d3:
         f1:5f:00:8d:ac:6e:c7:1b:a9:16:ad:36:e1:b4:02:8b:47:9b:
         21:63:f4:bd:e0:95:ff:ab:8c:d5:73:64:96:fa:ae:e9:b8:71:
         4f:b5:4f:ee:35:e6:6d:6f:0f:10:95:2c:12:38:77:96:2a:63:
         5a:cd:18:1c:5c:a9:34:8a:93:ea:10:c8:61:70:46:66:0c:77:
         81:97:8a:da:6e:8f:dd:a9:c6:5f:95:03:95:ec:d3:d1:b9:6f:
         c8:37:ff:ce:d5:34:d9:5e:8b:45:65:42:79:dd:5b:20:d8:e0:
         0d:a8:b6:6c:8e:0a:5c:c1:46:ff:f5:91:14:32:a0:78:5e:2f:
         0b:44:08:1d:a0:84:bd:0f:b0:f6:c1:9b:82:84:8f:73:84:b1:
         a9:9a:f4:3c:61:95:5d:ce:eb:4f:0a:a8:65:64:9d:bf:3c:84:
         71:83:56:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tsxGL/VEAk1aoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
MWU0MjkyZWYtMjNiYy00MmY3LWI0MzctOWQxMTE5ZjQzN2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDujP6uCC2OTanIY32Pqvj/JS0lTun3fhUFJ
/lZjv5smTXxrZ0qkYNteYJMepe4NVvQRJ60nNi+AiuLyUZJpShHxPK2x8TDLmoWj
P96vKIbbDpSCFkz3kJ7+7qyd7KMeb5wHLPi7I4cLH5it5U5Klcg65umu+xi9INPW
zex8+9h3VEaZ2x7hpo0lTHvjER9cBG1iOAp66bKSmsOOUl+ck1WhfFmItViLlfRe
o3QjJgMCme6/T0FFIzsR0KWvFPt0GTfSlX9jpaJwXBnKHqisBHwEBQBjkqVwxVqc
pFTPcKekoSV+XozPl+6jN3iyKuOOcz+lVtoOPcyq8hj0p66iTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIpNDG+8X58HPvjnqRnL6WmOTlmZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvNWE5MGU2ZGMtMzk3OC0z
YjJkLTgyNTctZjNjODY0NzI4ODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTPJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ0Ad+DnvcIF+OX/lwAYg09m02ah8EsjBaLBJKe6aKZBpasjlNuyhOR+
CJQRfB2IMQQ5FX42m0AGgDL7WpNHo8GcxMt8x2FE0mCcjtjp77LC8zRpPXmk38l1
0/FfAI2sbscbqRatNuG0AotHmyFj9L3glf+rjNVzZJb6rum4cU+1T+415m1vDxCV
LBI4d5YqY1rNGBxcqTSKk+oQyGFwRmYMd4GXitpuj92pxl+VA5Xs09G5b8g3/87V
NNlei0VlQnndWyDY4A2otmyOClzBRv/1kRQyoHheLwtECB2ghL0PsPbBm4KEj3OE
sama9DxhlV3O608KqGVknb88hHGDVvE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:52:39 2025 by rpki-client