Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/c61bddb8-a297-3640-9c26-a15815d614a9.roa
File:                     c61bddb8-a297-3640-9c26-a15815d614a9.roa (raw, json)
Hash identifier:          CVGdGL54pWWj62xfPYJku8vH2p7WvWg8Hx6RG0mbHGM=
Subject key identifier:   BD:EB:13:15:87:39:F9:9A:37:AE:75:E6:D4:72:11:E0:9C:EA:03:17
Certificate issuer:       /CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
Certificate serial:       010D0C9F432858497DA46D6A76755892246FD480
Authority key identifier: E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/c61bddb8-a297-3640-9c26-a15815d614a9.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     6456
IP address blocks:        208.90.168.0/22 maxlen: 23
                          208.90.170.0/24 maxlen: 24
                          208.90.171.0/24 maxlen: 24
                          2620:0:cf0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:6d:6a:76:75:58:92:24:6f:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=24a0d536-0a74-4cbe-ad0b-eef084afd733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:28:44:90:5e:76:4a:45:e0:96:b5:00:c7:bb:
                    ab:53:5d:c1:3c:c3:f0:39:10:df:af:61:92:49:2c:
                    d9:60:5e:fc:3e:85:7d:92:64:b7:51:6f:33:3f:d2:
                    9e:b7:4b:2f:68:5d:d6:c8:3c:5b:b9:b3:d7:66:53:
                    89:da:59:e2:b4:15:e2:c4:ce:31:1f:71:62:45:06:
                    cc:a5:d2:ac:bc:4d:e8:08:c8:03:09:75:4b:55:53:
                    59:ba:cb:06:e4:7c:e5:b0:25:3b:54:b8:18:56:26:
                    c7:66:58:ff:a4:98:f0:c3:45:b4:9b:f2:0e:64:ec:
                    9f:fd:a3:95:90:61:ce:b3:ae:2d:d6:81:3b:92:14:
                    aa:4b:67:52:f4:d7:8f:ba:d4:ec:0d:cc:ca:91:74:
                    eb:49:5d:88:d0:ae:e1:d1:ea:f9:92:ec:3f:75:c5:
                    b9:4b:31:1f:30:f3:d3:ae:ba:70:58:0b:78:90:a1:
                    cb:f1:36:98:9b:af:74:24:93:63:5e:aa:59:6c:fe:
                    f2:89:16:18:e6:30:19:85:ef:a5:aa:66:76:20:a4:
                    32:a4:c7:60:eb:2d:ca:26:3a:d1:42:39:3e:5d:2f:
                    2f:97:de:94:fd:fb:ef:e2:fd:c4:54:3d:cb:2d:67:
                    75:c7:0a:03:18:b7:16:34:4d:09:6c:f7:0e:3a:68:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EB:13:15:87:39:F9:9A:37:AE:75:E6:D4:72:11:E0:9C:EA:03:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/c61bddb8-a297-3640-9c26-a15815d614a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.168.0/22
                IPv6:
                  2620:0:cf0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:8f:59:c2:fd:67:7d:e7:ec:65:4e:69:ab:fd:01:29:0a:53:
         39:1f:0f:0d:69:33:3e:61:de:06:0a:79:2c:4a:a1:80:cc:6e:
         f1:dd:54:b6:56:d0:1d:80:8b:6a:90:cf:72:fb:d2:0a:65:ec:
         b1:00:d1:02:cc:71:5a:b8:dd:4d:c5:68:5f:3c:ac:22:47:19:
         cf:88:f2:fc:93:3f:01:9f:53:7e:3d:98:86:9b:04:04:9a:ce:
         c0:ff:32:9b:77:67:1d:03:0f:31:17:a4:14:36:14:6d:ea:ee:
         31:4b:b6:e7:69:35:a9:1e:62:e8:19:cd:dd:ee:3f:f3:ea:7b:
         77:2d:fe:bb:23:dc:8f:73:14:ab:e1:da:fb:53:ee:51:e1:57:
         b6:e2:c9:bb:0b:ed:7c:1c:44:e2:c7:22:58:3d:29:6f:ef:85:
         77:45:1a:70:eb:3c:7e:fd:d2:52:39:f6:b6:4c:c1:67:12:fb:
         f0:85:d3:02:32:35:fc:b9:61:21:eb:d8:e1:6d:ec:15:a2:36:
         1e:dd:1e:8e:41:51:52:f9:9d:99:d1:6e:48:a6:f8:0f:82:f3:
         6d:89:23:68:9a:6b:95:a0:ed:2a:9d:1d:40:24:4a:cf:35:c2:
         db:9c:cc:fb:f1:16:cd:80:08:99:f8:b7:36:42:ec:64:1a:60:
         39:e9:ab:6b
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEl9pG1qdnVYkiRv1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU5YjVlN2MtMDVlYi00ZDU1LWEwZjAtY2E4MjQwMGE5
MjFiMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MjRhMGQ1MzYtMGE3NC00Y2JlLWFkMGItZWVmMDg0YWZkNzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ihEkF52SkXglrUAx7urU13BPMPwORDfr2GS
SSzZYF78PoV9kmS3UW8zP9Ket0svaF3WyDxbubPXZlOJ2lnitBXixM4xH3FiRQbM
pdKsvE3oCMgDCXVLVVNZussG5HzlsCU7VLgYVibHZlj/pJjww0W0m/IOZOyf/aOV
kGHOs64t1oE7khSqS2dS9NePutTsDczKkXTrSV2I0K7h0er5kuw/dcW5SzEfMPPT
rrpwWAt4kKHL8TaYm690JJNjXqpZbP7yiRYY5jAZhe+lqmZ2IKQypMdg6y3KJjrR
Qjk+XS8vl96U/fvv4v3EVD3LLWd1xwoDGLcWNE0JbPcOOmhHKQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFL3rExWHOfmaN6515tRyEeCc6gMXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTli
NWU3Yy0wNWViLTRkNTUtYTBmMC1jYTgyNDAwYTkyMWIvYzYxYmRkYjgtYTI5Ny0z
NjQwLTljMjYtYTE1ODE1ZDYxNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTU5YjVlN2MtMDVlYi00ZDU1LWEw
ZjAtY2E4MjQwMGE5MjFiLzE1OWI1ZTdjLTA1ZWItNGQ1NS1hMGYwLWNhODI0MDBh
OTIxYi5jcmwwHwYDVR0jBBgwFoAU5dNxoaOlsJ92LA5E885zsc4eL20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTliNWU3Yy0wNWViLTRkNTUtYTBmMC1jYTgy
NDAwYTkyMWIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQC0FqoMA8E
AgACMAkDBwAmIAAADPAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqI9Zwv1nfefsZU5pq/0BKQpTOR8PDWkz
PmHeBgp5LEqhgMxu8d1UtlbQHYCLapDPcvvSCmXssQDRAsxxWrjdTcVoXzysIkcZ
z4jy/JM/AZ9Tfj2YhpsEBJrOwP8ym3dnHQMPMRekFDYUberuMUu252k1qR5i6BnN
3e4/8+p7dy3+uyPcj3MUq+Ha+1PuUeFXtuLJuwvtfBxE4sciWD0pb++Fd0UacOs8
fv3SUjn2tkzBZxL78IXTAjI1/LlhIevY4W3sFaI2Ht0ejkFRUvmdmdFuSKb4D4Lz
bYkjaJprlaDtKp0dQCRKzzXC25zM+/EWzYAImfi3NkLsZBpgOemraw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 11:41:20 2025 by rpki-client