Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/020bbcd5-7511-3005-bf01-ddf23009cad6.roa
File:                     020bbcd5-7511-3005-bf01-ddf23009cad6.roa (raw, json)
Hash identifier:          PN+yLvVH/+SjLG1dN0StOqiEuNflCfjF7+Nw8y9U4d8=
Subject key identifier:   85:A5:D7:DF:50:84:9A:49:A3:A5:A7:C7:7C:4E:27:AA:64:EA:68:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43169431FCA9AA0F464D580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/020bbcd5-7511-3005-bf01-ddf23009cad6.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        24.63.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:69:43:1f:ca:9a:a0:f4:64:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=7ba4619e-5939-48d1-9b49-e152d9b941b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3d:a5:1c:42:65:14:e3:2a:fa:be:ad:eb:b3:
                    de:38:e2:62:3d:3c:5d:7a:5a:72:47:3e:3e:68:af:
                    fb:a5:7f:50:8d:ea:86:3e:35:0e:72:03:4f:1a:80:
                    d6:d4:dc:0f:7a:a9:b9:ae:cb:ec:51:94:16:9a:a2:
                    20:a2:ac:68:4d:d4:1f:23:90:07:da:71:3d:f1:87:
                    e3:b6:db:2b:c2:5a:e2:2f:de:8f:b8:9b:8d:8a:70:
                    78:89:b7:c8:03:f2:d4:2f:e1:a3:40:f0:2d:2d:fb:
                    ad:ee:4d:f5:71:66:d0:7f:19:40:f3:ea:3f:0c:7d:
                    94:0c:4b:e1:16:0a:94:62:95:48:d4:95:2d:4f:4d:
                    17:1e:12:ed:14:ba:de:3f:25:be:83:f1:88:77:a5:
                    cf:f6:d7:47:3c:21:74:0a:b9:39:dc:15:a5:05:cb:
                    f2:f8:14:d9:35:d4:9d:b7:17:54:3a:3e:ff:33:29:
                    2f:43:35:92:02:44:87:52:54:3a:4c:ec:29:a2:2e:
                    b8:92:5a:05:7e:5b:f1:f0:15:61:7d:92:62:38:99:
                    94:59:a9:76:0f:81:48:a4:c3:64:01:af:8b:cc:b4:
                    25:74:a2:41:d9:06:0c:29:55:57:61:4e:96:a9:e0:
                    01:1d:28:16:de:e3:4a:41:9e:c3:91:d9:f7:54:bf:
                    a7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A5:D7:DF:50:84:9A:49:A3:A5:A7:C7:7C:4E:27:AA:64:EA:68:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/020bbcd5-7511-3005-bf01-ddf23009cad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.63.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4e:5c:73:23:79:e5:49:1f:19:b4:52:13:39:19:62:9f:8f:
         f9:d6:02:95:0c:2f:f2:f1:bf:2e:68:bd:77:2d:25:29:98:ea:
         1a:c3:0d:f7:2e:2c:b3:8d:4a:14:72:53:f3:c1:59:b5:94:b5:
         ef:19:d2:45:9c:1d:9a:b5:47:6b:c1:07:79:73:b9:c9:b1:4d:
         2f:39:7a:ca:40:79:85:4c:51:7c:6c:b2:25:1a:b2:f4:14:4e:
         35:2a:4e:76:4c:21:90:f0:b8:cc:61:4e:d6:93:75:0b:fd:b2:
         6f:8b:94:aa:2d:67:86:14:57:45:b3:06:f6:16:7b:f8:31:9c:
         52:ce:cd:88:d8:7b:b3:57:fe:43:56:4e:c0:81:dc:b5:7a:9f:
         3d:dc:62:62:19:21:e9:2c:7d:65:13:ea:6b:99:8e:cd:6e:9b:
         7a:f4:4c:c2:4f:98:f4:66:29:5c:0c:f9:39:91:4f:f8:2d:de:
         b0:18:f6:50:9b:7c:13:2e:13:00:00:9d:02:b5:18:19:af:9e:
         9b:fd:ad:9d:e4:2a:9b:df:bc:e5:aa:72:7b:fd:c7:40:16:d7:
         e2:14:e0:29:de:77:c7:c8:a0:e6:42:78:4e:5a:ae:92:1d:a5:
         bb:2b:97:fe:7c:e8:34:b5:18:e1:ca:1c:e1:6d:45:a9:1c:e9:
         38:c2:33:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMWlDH8qaoPRk1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
N2JhNDYxOWUtNTkzOS00OGQxLTliNDktZTE1MmQ5Yjk0MWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD2lHEJlFOMq+r6t67PeOOJiPTxdelpyRz4+
aK/7pX9QjeqGPjUOcgNPGoDW1NwPeqm5rsvsUZQWmqIgoqxoTdQfI5AH2nE98Yfj
ttsrwlriL96PuJuNinB4ibfIA/LUL+GjQPAtLfut7k31cWbQfxlA8+o/DH2UDEvh
FgqUYpVI1JUtT00XHhLtFLrePyW+g/GId6XP9tdHPCF0Crk53BWlBcvy+BTZNdSd
txdUOj7/MykvQzWSAkSHUlQ6TOwpoi64kloFflvx8BVhfZJiOJmUWal2D4FIpMNk
Aa+LzLQldKJB2QYMKVVXYU6WqeABHSgW3uNKQZ7Dkdn3VL+n0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIWl199QhJpJo6Wnx3xOJ6pk6mi9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDIwYmJjZDUtNzUxMS0z
MDA1LWJmMDEtZGRmMjMwMDljYWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGD+0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1OXHMjeeVJHxm0UhM5GWKfj/nWApUML/Lxvy5ovXctJSmY6hrDDfcu
LLONShRyU/PBWbWUte8Z0kWcHZq1R2vBB3lzucmxTS85espAeYVMUXxssiUasvQU
TjUqTnZMIZDwuMxhTtaTdQv9sm+LlKotZ4YUV0WzBvYWe/gxnFLOzYjYe7NX/kNW
TsCB3LV6nz3cYmIZIeksfWUT6muZjs1um3r0TMJPmPRmKVwM+TmRT/gt3rAY9lCb
fBMuEwAAnQK1GBmvnpv9rZ3kKpvfvOWqcnv9x0AW1+IU4Cned8fIoOZCeE5arpId
pbsrl/586DS1GOHKHOFtRakc6TjCM/k=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:07:42 2025 by rpki-client