Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c9e1684-c9b5-3aac-aedc-ef5798a4f309.roa
File:                     7c9e1684-c9b5-3aac-aedc-ef5798a4f309.roa (raw, json)
Hash identifier:          ZQGM2/h1sx7SsP9bkpwVriX2ElnTLDwVwYBYKd+Cs7I=
Subject key identifier:   29:89:3D:28:D8:DC:F4:D9:35:1A:F3:86:92:7B:C9:F2:5C:BE:37:71
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858492134441B6D5074B49E87DFA0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c9e1684-c9b5-3aac-aedc-ef5798a4f309.roa
Signing time:             Sun 09 Mar 2025 10:20:49 +0000
ROA not before:           Sun 09 Mar 2025 10:20:49 +0000
ROA not after:            Sat 07 Jun 2025 10:20:49 +0000
asID:                     36522
IP address blocks:        204.101.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:44:1b:6d:50:74:b4:9e:87:df:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:49 2025 GMT
            Not After : Jun  7 10:20:49 2025 GMT
        Subject: CN=40f159cb-e010-4859-8e4c-7f480f7c1ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:a8:2d:e2:e0:35:27:b6:85:f3:af:cc:b1:
                    86:eb:c3:c7:ee:72:54:7d:37:8c:15:e4:75:07:35:
                    b8:5c:07:9e:24:de:a7:d0:2c:33:bc:b5:11:80:a4:
                    10:1c:14:d6:49:f2:40:5a:a8:87:a4:fc:95:4c:c3:
                    e6:34:3b:61:02:ee:4f:3d:85:84:ec:7d:57:0e:f6:
                    b6:d8:95:d9:4c:15:af:96:84:6b:d3:d9:8f:35:c7:
                    c6:a2:ef:11:95:8a:e0:f6:02:e0:08:7c:9f:f0:83:
                    44:56:a3:dd:ae:1c:23:de:8c:89:77:95:1d:59:0c:
                    98:cc:93:e9:f5:c6:9d:3b:89:0d:4a:2c:5a:3c:b8:
                    94:dd:51:17:57:ae:bc:71:16:ef:5f:18:4c:45:73:
                    c5:ce:ff:c1:84:3d:fa:9f:24:c5:d8:03:ac:b0:6f:
                    0a:50:a9:8e:88:35:1e:5b:d5:52:6c:b1:69:29:15:
                    ce:6d:f7:58:7d:a5:36:6b:70:ec:1a:6c:74:d3:9a:
                    4d:2c:93:b4:d9:a7:b5:46:ac:84:ad:c0:4d:22:9a:
                    50:44:3e:25:ba:4d:3d:25:e5:39:3b:c8:44:59:b6:
                    b6:4e:40:ab:69:c8:17:2e:4b:68:48:1a:60:84:9e:
                    59:50:ad:4c:2e:db:a2:24:a2:d6:0b:b2:00:df:48:
                    df:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:89:3D:28:D8:DC:F4:D9:35:1A:F3:86:92:7B:C9:F2:5C:BE:37:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c9e1684-c9b5-3aac-aedc-ef5798a4f309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:88:7a:fb:3e:e0:e5:76:1b:4d:25:4d:23:8e:d7:8a:ee:67:
         39:49:31:b5:91:46:d3:94:ab:44:84:98:04:fa:d0:1b:12:ba:
         4d:4c:aa:65:76:5d:c8:c0:b2:5f:52:73:e8:0d:19:8f:ef:5a:
         f1:b0:28:2b:8e:2f:fd:d1:04:bb:cb:a8:8b:07:08:0f:54:85:
         6d:03:e7:f3:9c:34:c5:3a:30:17:f2:cc:4d:e1:97:4f:54:8e:
         69:35:03:07:df:34:98:01:9c:18:8d:9c:80:6a:33:70:55:a4:
         40:e9:27:32:e4:87:ba:c1:3d:1a:7f:2b:5e:3a:62:67:ee:bf:
         7d:d2:c7:91:a4:e6:6e:76:b9:59:6b:7f:9b:38:67:f6:70:c4:
         15:78:f0:c4:6e:9b:95:d1:e6:23:fd:53:9b:e1:d5:74:fc:12:
         da:ee:65:e1:74:82:80:68:ec:7b:7e:1e:8c:8c:12:14:34:2a:
         d3:05:c8:cd:8c:45:41:38:15:29:17:1f:d2:24:2e:25:8d:a1:
         95:5c:4a:68:f9:c6:e3:96:bd:b4:28:e8:0c:03:11:b5:0b:06:
         7d:17:02:8b:88:1d:53:b0:31:2e:8d:a0:e0:8b:cf:da:76:50:
         00:f1:ab:63:26:34:16:85:e5:59:ab:bf:8e:02:db:e0:df:5c:
         07:db:68:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNEQbbVB0tJ6H36AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjA0OVoXDTI1MDYwNzEwMjA0OVowLzEtMCsGA1UEAxMk
NDBmMTU5Y2ItZTAxMC00ODU5LThlNGMtN2Y0ODBmN2MxY2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxOoLeLgNSe2hfOvzLGG68PH7nJUfTeMFeR1
BzW4XAeeJN6n0CwzvLURgKQQHBTWSfJAWqiHpPyVTMPmNDthAu5PPYWE7H1XDva2
2JXZTBWvloRr09mPNcfGou8RlYrg9gLgCHyf8INEVqPdrhwj3oyJd5UdWQyYzJPp
9cadO4kNSixaPLiU3VEXV668cRbvXxhMRXPFzv/BhD36nyTF2AOssG8KUKmOiDUe
W9VSbLFpKRXObfdYfaU2a3DsGmx005pNLJO02ae1RqyErcBNIppQRD4luk09JeU5
O8hEWba2TkCracgXLktoSBpghJ5ZUK1MLtuiJKLWC7IA30jfVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmJPSjY3PTZNRrzhpJ7yfJcvjdxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvN2M5ZTE2ODQtYzliNS0z
YWFjLWFlZGMtZWY1Nzk4YTRmMzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGXIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKIevs+4OV2G00lTSOO14ruZzlJMbWRRtOUq0SEmAT60BsSuk1MqmV2
XcjAsl9Sc+gNGY/vWvGwKCuOL/3RBLvLqIsHCA9UhW0D5/OcNMU6MBfyzE3hl09U
jmk1AwffNJgBnBiNnIBqM3BVpEDpJzLkh7rBPRp/K146Ymfuv33Sx5Gk5m52uVlr
f5s4Z/ZwxBV48MRum5XR5iP9U5vh1XT8EtruZeF0goBo7Ht+HoyMEhQ0KtMFyM2M
RUE4FSkXH9IkLiWNoZVcSmj5xuOWvbQo6AwDEbULBn0XAouIHVOwMS6NoOCLz9p2
UADxq2MmNBaF5Vmrv44C2+DfXAfbaPc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:32 2025 by rpki-client