Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/57152d77-6a99-38cf-9b01-31bede797d16.roa
File:                     57152d77-6a99-38cf-9b01-31bede797d16.roa (raw, json)
Hash identifier:          wz6sn6ztb/JIpEUhS5yBoddxPTGHvwD/rSjCL/L8HtY=
Subject key identifier:   8E:96:CA:DD:FF:67:C0:66:07:E0:D5:97:BA:F8:1D:61:D7:9C:73:24
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584A66C078C524E5B5880A2A5500
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/57152d77-6a99-38cf-9b01-31bede797d16.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     46241
IP address blocks:        204.25.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:78:c5:24:e5:b5:88:0a:2a:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=b853d11b-9c0e-46c6-84c0-f15a90a4c729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:52:b8:0b:5f:e1:b7:35:49:b8:ff:a5:0e:
                    5a:fc:f6:3c:d0:fc:5e:ce:43:00:84:19:67:93:65:
                    07:8a:98:9c:30:23:51:a3:d3:ac:b7:48:36:7b:af:
                    8c:7c:d0:5c:4a:98:cf:7d:8f:bd:92:5a:1f:46:86:
                    47:15:98:9f:5a:c8:27:c1:e4:48:64:48:46:dd:47:
                    89:28:68:b3:43:9b:86:f0:7a:76:06:7c:7f:cc:28:
                    93:f9:0d:c6:f1:4e:ea:fc:28:17:07:05:e4:b9:c1:
                    ef:4d:31:2e:f8:4a:ba:46:90:b4:14:77:2c:d1:95:
                    05:ce:78:49:15:09:53:b5:d4:cc:be:76:66:12:fe:
                    5b:2b:91:9e:61:d4:91:35:a4:aa:3d:a9:3b:86:ca:
                    61:12:50:04:e4:21:95:39:47:e8:78:49:c2:c8:dd:
                    51:42:f3:48:4b:ed:27:4d:23:38:75:6f:48:de:66:
                    8d:dd:7d:08:0d:d4:88:19:7d:bb:c2:14:9d:bd:05:
                    ea:79:a5:92:11:2d:c5:c5:c5:cc:13:df:bd:54:88:
                    de:09:f0:51:fa:a5:5f:1e:13:8f:a8:c1:88:0b:d8:
                    0d:e1:ad:b9:0d:6b:ac:21:1c:20:75:d8:f5:bb:33:
                    09:5b:3c:51:7c:d0:73:7c:b7:49:f5:2f:5b:e3:b5:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:96:CA:DD:FF:67:C0:66:07:E0:D5:97:BA:F8:1D:61:D7:9C:73:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/57152d77-6a99-38cf-9b01-31bede797d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:77:af:52:46:00:2a:44:e6:c2:12:14:11:39:8d:8d:2c:9e:
         52:14:89:92:db:90:13:f7:1c:b1:f4:9e:a2:97:ef:1d:8b:7a:
         6e:55:a2:5a:fa:ab:f3:c6:a1:54:19:5e:66:33:0d:b4:23:18:
         40:35:ff:07:20:d7:c1:95:73:16:2d:b6:06:c2:9b:c5:e9:82:
         bb:27:ce:2d:b6:e1:16:1f:76:6e:02:3e:10:fb:56:87:4d:35:
         5d:df:09:67:6a:16:ba:80:50:3c:69:ae:45:4e:40:cb:e0:01:
         5a:55:56:07:da:a9:69:ad:e9:cf:2d:af:6e:a6:93:5a:8f:e4:
         4b:c2:f6:3a:e3:ec:e5:62:20:3e:93:f7:5d:f8:90:ef:95:0b:
         f2:c2:3e:5b:30:ea:a3:8a:86:b2:a4:06:39:68:a6:e3:21:7f:
         1d:79:8d:01:39:9b:94:a5:aa:d6:2f:de:76:82:09:ee:50:93:
         02:89:4c:13:6d:b8:b9:29:0b:8a:bb:eb:61:45:df:c1:ef:62:
         11:bd:94:eb:67:bf:c2:44:fd:1f:4f:ca:30:37:d9:1d:24:00:
         1e:77:8a:8a:d7:ed:ab:30:1d:1f:ee:5c:d3:cc:93:54:4a:ab:
         af:d7:5e:4e:27:ff:74:0c:ad:f3:5b:e3:45:d8:08:3a:7f:e3:
         56:27:5e:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHjFJOW1iAoqVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjA2MzgxNGQtNTE4My00OWRlLTkwZWUtODRjYmJlY2Rl
NDIyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk
Yjg1M2QxMWItOWMwZS00NmM2LTg0YzAtZjE1YTkwYTRjNzI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OhSuAtf4bc1Sbj/pQ5a/PY80PxezkMAhBln
k2UHipicMCNRo9Ost0g2e6+MfNBcSpjPfY+9klofRoZHFZifWsgnweRIZEhG3UeJ
KGizQ5uG8Hp2Bnx/zCiT+Q3G8U7q/CgXBwXkucHvTTEu+Eq6RpC0FHcs0ZUFznhJ
FQlTtdTMvnZmEv5bK5GeYdSRNaSqPak7hsphElAE5CGVOUfoeEnCyN1RQvNIS+0n
TSM4dW9I3maN3X0IDdSIGX27whSdvQXqeaWSES3FxcXME9+9VIjeCfBR+qVfHhOP
qMGIC9gN4a25DWusIRwgddj1uzMJWzxRfNBzfLdJ9S9b47XloQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI6Wyt3/Z8BmB+DVl7r4HWHXnHMkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MDYz
ODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNiYmVjZGU0MjIvNTcxNTJkNzctNmE5OS0z
OGNmLTliMDEtMzFiZWRlNzk3ZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjA2MzgxNGQtNTE4My00OWRlLTkw
ZWUtODRjYmJlY2RlNDIyLzYwNjM4MTRkLTUxODMtNDlkZS05MGVlLTg0Y2JiZWNk
ZTQyMi5jcmwwHwYDVR0jBBgwFoAU+oFKWYuHd/AMGvqgYA7Dhlv3AcAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82MDYzODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNi
YmVjZGU0MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzBnIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZ3r1JGACpE5sISFBE5jY0snlIUiZLbkBP3HLH0nqKX7x2Lem5Volr6
q/PGoVQZXmYzDbQjGEA1/wcg18GVcxYttgbCm8Xpgrsnzi224RYfdm4CPhD7VodN
NV3fCWdqFrqAUDxprkVOQMvgAVpVVgfaqWmt6c8tr26mk1qP5EvC9jrj7OViID6T
9134kO+VC/LCPlsw6qOKhrKkBjlopuMhfx15jQE5m5SlqtYv3naCCe5QkwKJTBNt
uLkpC4q762FF38HvYhG9lOtnv8JE/R9PyjA32R0kAB53iorX7aswHR/uXNPMk1RK
q6/XXk4n/3QMrfNb40XYCDp/41YnXqI=
-----END CERTIFICATE-----
Generated at Thu Jul 10 11:16:25 2025 by rpki-client