Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/55cebe45-5dc5-3dc6-99aa-6ab761008e5c.roa
File:                     55cebe45-5dc5-3dc6-99aa-6ab761008e5c.roa (raw, json)
Hash identifier:          fWMk+isJsiDDGAm8F5GF9h9f7go1cAL6aKyfvhSVVjk=
Subject key identifier:   B2:69:2A:78:1C:65:1B:33:9E:F7:BE:72:B2:27:3A:86:F2:33:38:58
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584953C41029BB454BCD9800A9C0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/55cebe45-5dc5-3dc6-99aa-6ab761008e5c.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        208.95.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:10:29:bb:45:4b:cd:98:00:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=81ddf7bb-658f-491b-90a6-a430c4e27e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b5:dc:e4:82:34:40:98:b2:40:ac:b1:6d:2e:
                    89:91:3c:97:db:f0:da:4a:10:79:13:78:50:8a:fa:
                    98:54:82:ce:3e:2c:e2:41:be:a8:bf:b1:44:24:ee:
                    51:e1:09:0f:b5:ca:30:01:02:bd:34:fa:59:b9:6a:
                    04:ac:3b:4c:65:28:64:1f:68:84:bf:35:21:63:7a:
                    de:63:b3:c1:d5:aa:dd:72:94:4b:4b:78:04:73:4c:
                    d0:3b:44:a3:47:24:84:8c:00:af:fe:c7:b0:cb:ed:
                    68:b5:86:7e:6b:35:bc:da:7c:e7:52:fb:07:74:dc:
                    12:f3:a1:0c:8d:ad:84:ed:7c:f2:26:d5:e1:9a:b3:
                    ad:14:85:eb:88:5a:c0:54:b2:85:e3:ad:5d:5e:e6:
                    58:bc:42:ff:dd:80:f0:d3:2c:ac:39:16:2c:12:d8:
                    13:11:2e:4d:56:f8:f4:f5:32:cf:67:d9:6d:70:7c:
                    c7:57:c2:85:51:eb:0d:6f:30:e8:80:7b:c1:92:09:
                    68:21:33:81:01:db:ae:a4:db:2f:c5:60:ff:a2:d3:
                    09:aa:c3:ac:c8:bc:ff:44:cd:e4:a7:a4:98:e2:b1:
                    04:22:6f:05:5c:e0:4f:38:b9:3a:ce:5e:ed:80:fd:
                    30:36:92:c3:fe:d1:a3:26:a9:84:fc:54:19:3b:9c:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:69:2A:78:1C:65:1B:33:9E:F7:BE:72:B2:27:3A:86:F2:33:38:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/55cebe45-5dc5-3dc6-99aa-6ab761008e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:30:6b:02:b5:f1:fb:6c:aa:75:26:e5:ee:64:07:52:36:38:
         fc:6c:ed:66:8f:af:ab:25:18:e0:b1:d5:54:b3:e3:82:51:bd:
         de:6c:4f:c9:62:9b:58:b7:0e:20:b5:33:ac:35:63:7f:20:c1:
         43:ab:c2:60:c2:62:a1:15:02:fc:f5:98:0d:f1:c0:09:e9:22:
         8b:59:96:5c:3b:74:a6:40:80:fa:39:bf:67:ca:b0:5a:98:76:
         48:64:bd:6b:c1:f6:2d:1b:1a:92:4e:4a:a1:df:16:95:da:14:
         68:05:61:9f:ae:4c:b4:5e:b1:db:a4:29:fa:61:62:b5:0d:d7:
         ad:e5:a3:fb:b8:12:bc:2a:d9:64:ab:11:6c:f5:bb:7b:7e:b3:
         12:11:d4:bb:f5:a2:be:b5:ac:e7:0b:0e:80:be:69:ba:72:52:
         6a:09:ec:77:44:0d:ea:2c:ca:7e:1b:b1:8e:e3:ce:1f:11:b7:
         06:e8:b7:ee:fd:ab:de:35:93:ba:96:db:3a:c6:97:1d:28:8d:
         a9:2c:0d:46:af:b6:5e:5d:83:37:f8:2f:65:06:5d:38:39:45:
         a8:ae:b8:37:df:9a:de:9b:33:c7:bf:ec:89:3a:55:03:7e:13:
         bd:32:8f:8f:70:de:90:3c:03:12:83:78:1a:6d:dd:3c:02:b0:
         f7:37:df:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBApu0VLzZgAqcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4
MWQwMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ODFkZGY3YmItNjU4Zi00OTFiLTkwYTYtYTQzMGM0ZTI3ZTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbXc5II0QJiyQKyxbS6JkTyX2/DaShB5E3hQ
ivqYVILOPiziQb6ov7FEJO5R4QkPtcowAQK9NPpZuWoErDtMZShkH2iEvzUhY3re
Y7PB1ardcpRLS3gEc0zQO0SjRySEjACv/sewy+1otYZ+azW82nznUvsHdNwS86EM
ja2E7XzyJtXhmrOtFIXriFrAVLKF461dXuZYvEL/3YDw0yysORYsEtgTES5NVvj0
9TLPZ9ltcHzHV8KFUesNbzDogHvBkgloITOBAduupNsvxWD/otMJqsOsyLz/RM3k
p6SY4rEEIm8FXOBPOLk6zl7tgP0wNpLD/tGjJqmE/FQZO5yHbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJpKngcZRsznve+crInOobyMzhYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk
YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNTVjZWJlNDUtNWRjNS0z
ZGM2LTk5YWEtNmFiNzYxMDA4ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh
NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk
ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4
MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8wawK18ftsqnUm5e5kB1I2OPxs7WaPr6slGOCx1VSz44JRvd5sT8li
m1i3DiC1M6w1Y38gwUOrwmDCYqEVAvz1mA3xwAnpIotZllw7dKZAgPo5v2fKsFqY
dkhkvWvB9i0bGpJOSqHfFpXaFGgFYZ+uTLResdukKfphYrUN163lo/u4Erwq2WSr
EWz1u3t+sxIR1Lv1or61rOcLDoC+abpyUmoJ7HdEDeosyn4bsY7jzh8Rtwbot+79
q941k7qW2zrGlx0ojaksDUavtl5dgzf4L2UGXTg5RaiuuDffmt6bM8e/7Ik6VQN+
E70yj49w3pA8AxKDeBpt3TwCsPc3308=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:16 2025 by rpki-client