Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/f5e36dbb-98c8-3e27-879e-1b7b6e55e171.roa
File:                     f5e36dbb-98c8-3e27-879e-1b7b6e55e171.roa (raw, json)
Hash identifier:          swXBdmibh53UUmlzflCeYi9u7qz9GX4oIta6xcxG5rk=
Subject key identifier:   C6:48:F1:B5:9D:BC:90:DE:EA:BF:A8:3C:55:34:A5:90:C0:13:E9:77
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F43285849FCAA7C1BFA1BDCB22BD2B7C0
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/f5e36dbb-98c8-3e27-879e-1b7b6e55e171.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     7979
IP address blocks:        172.84.181.0/24 maxlen: 24
                          172.84.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:7c:1b:fa:1b:dc:b2:2b:d2:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=fa51edf2-33d8-493d-ae8b-dfd724d8e13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:28:4d:b7:45:85:7b:a8:15:23:1c:de:d2:98:
                    e7:be:27:ae:d5:0d:49:e0:39:f4:f4:3c:25:04:41:
                    06:55:7e:9a:77:95:0e:7e:a9:18:49:90:74:11:52:
                    fb:f1:c2:ed:a4:32:c0:e9:2a:c5:f4:7d:ec:36:4f:
                    59:8b:24:b8:e9:e5:db:13:48:b1:d4:9e:8e:69:b6:
                    74:8b:31:f5:64:92:a6:e9:1a:ca:99:22:2b:02:5a:
                    f6:3a:f0:3d:fd:72:f5:5f:54:f0:32:24:0a:eb:ee:
                    71:ce:f1:b1:63:b5:4f:b6:89:79:9b:8a:45:cf:0d:
                    0e:44:3c:73:69:1a:2a:d6:74:0e:a9:86:cf:95:be:
                    df:58:b3:c9:5e:93:98:46:7d:d6:19:3c:ce:85:85:
                    14:31:82:2e:b7:c7:bc:df:5d:c3:d9:b3:97:7a:a4:
                    53:c6:e1:f0:69:33:96:73:20:3a:ca:31:41:77:47:
                    b0:40:72:94:cc:99:13:1f:6a:4b:d7:aa:43:22:42:
                    3e:12:03:6a:4a:a6:af:6d:6c:7b:e2:b2:dc:1a:27:
                    47:b6:df:34:f2:44:b8:cc:7e:3a:da:47:94:a0:3b:
                    dd:3b:a9:8a:e6:aa:d1:eb:c6:5d:d7:24:00:55:32:
                    e7:79:4c:4b:68:7f:5d:19:8d:78:af:fb:04:e7:3b:
                    c9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:48:F1:B5:9D:BC:90:DE:EA:BF:A8:3C:55:34:A5:90:C0:13:E9:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/f5e36dbb-98c8-3e27-879e-1b7b6e55e171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.181.0/24
                  172.84.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:6d:98:5b:ac:d7:0d:52:50:ed:1e:11:c8:95:7b:ff:7f:de:
         d9:ac:8c:b8:62:e6:64:9e:85:51:c8:49:98:41:fa:59:5f:c6:
         b9:4a:e4:87:b9:aa:90:1f:ad:aa:f3:e3:43:5e:01:d3:9a:a9:
         fb:f3:72:79:0f:c2:f0:cf:b6:23:b8:bd:20:21:23:d9:12:6d:
         b1:80:e1:0c:3f:5f:97:e4:2a:73:8d:58:1b:8e:3f:ce:02:7f:
         26:97:89:bd:af:a4:f3:ef:a8:60:9f:d6:64:7a:60:6b:9e:f8:
         bb:36:c1:4f:24:a4:e5:d0:bc:8a:3a:c7:09:2a:6f:35:2a:a9:
         aa:a3:dd:4f:44:fa:b5:a3:43:ce:ec:93:f7:2a:ee:00:6d:6a:
         63:26:4a:6d:59:fd:92:a4:2a:7c:dd:58:8d:f5:21:b2:23:de:
         f2:9d:cb:47:12:6d:e0:71:91:29:9f:7c:ad:8c:19:33:7b:61:
         55:4e:1d:93:3a:41:b8:44:60:cb:e2:fb:95:7f:be:e0:f8:78:
         d9:4e:cc:6c:ba:74:58:62:a3:e1:cf:6e:09:11:72:e6:70:e2:
         ae:ef:96:84:d6:73:d6:4b:3d:89:c7:c2:af:ee:2a:1e:f4:7e:
         45:00:40:60:ff:7c:a6:67:9f:90:15:d8:77:1b:ea:25:06:88:
         0f:1b:2b:82
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEn8qnwb+hvcsivSt8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw
ZDcwMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
ZmE1MWVkZjItMzNkOC00OTNkLWFlOGItZGZkNzI0ZDhlMTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkChNt0WFe6gVIxze0pjnvieu1Q1J4Dn09Dwl
BEEGVX6ad5UOfqkYSZB0EVL78cLtpDLA6SrF9H3sNk9ZiyS46eXbE0ix1J6OabZ0
izH1ZJKm6RrKmSIrAlr2OvA9/XL1X1TwMiQK6+5xzvGxY7VPtol5m4pFzw0ORDxz
aRoq1nQOqYbPlb7fWLPJXpOYRn3WGTzOhYUUMYIut8e8313D2bOXeqRTxuHwaTOW
cyA6yjFBd0ewQHKUzJkTH2pL16pDIkI+EgNqSqavbWx74rLcGidHtt808kS4zH46
2keUoDvdO6mK5qrR68Zd1yQAVTLneUxLaH9dGY14r/sE5zvJ2QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMZI8bWdvJDe6r+oPFU0pZDAE+l3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0
OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvZjVlMzZkYmItOThjOC0z
ZTI3LTg3OWUtMWI3YjZlNTVlMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl
MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1
MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk
YzNhNTBkNzAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArFS1AwQA
rFS/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACptmFus1w1SUO0eEciVe/9/3tmsjLhi5mSehVHISZhB+llf
xrlK5Ie5qpAfrarz40NeAdOaqfvzcnkPwvDPtiO4vSAhI9kSbbGA4Qw/X5fkKnON
WBuOP84CfyaXib2vpPPvqGCf1mR6YGue+Ls2wU8kpOXQvIo6xwkqbzUqqaqj3U9E
+rWjQ87sk/cq7gBtamMmSm1Z/ZKkKnzdWI31IbIj3vKdy0cSbeBxkSmffK2MGTN7
YVVOHZM6QbhEYMvi+5V/vuD4eNlOzGy6dFhio+HPbgkRcuZw4q7vloTWc9ZLPYnH
wq/uKh70fkUAQGD/fKZnn5AV2Hcb6iUGiA8bK4I=
-----END CERTIFICATE-----
Generated at Fri Jun 6 23:55:30 2025 by rpki-client