Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89e61fc5-1a37-3373-99b3-24ad97cd96c2.roa
File:                     89e61fc5-1a37-3373-99b3-24ad97cd96c2.roa (raw, json)
Hash identifier:          qr2clWYYgtAshlcSOK6OxLpSmnLTwYZy8oIh5piEn0o=
Subject key identifier:   34:57:13:02:57:55:28:68:0E:AE:19:B2:DC:68:F7:96:B2:E9:23:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0744889F5483173E45B000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89e61fc5-1a37-3373-99b3-24ad97cd96c2.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        69.141.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:44:88:9f:54:83:17:3e:45:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=63dc07ab-b959-4091-9c28-539b1dc52c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:3d:0f:99:bf:3c:fd:a7:89:c7:dd:49:e4:
                    9f:97:62:c4:40:dd:b3:c4:64:20:df:fd:18:e7:e5:
                    0a:2a:ea:7c:72:e0:15:61:2e:d1:6f:05:9d:ea:a4:
                    ad:66:17:a7:05:0d:9e:e5:d5:b3:31:97:b6:b6:34:
                    d1:a4:5f:c1:04:d6:ce:a7:1f:f7:90:d3:41:db:64:
                    21:60:c3:98:d1:3a:d6:2d:a7:49:6b:e9:50:c6:07:
                    92:fb:16:75:d0:73:c3:03:ea:d4:6d:32:4c:60:3e:
                    94:39:14:41:ce:fc:90:8e:8d:5f:f9:68:0a:39:98:
                    75:83:e6:25:49:7d:63:f7:f0:43:24:fb:77:6b:7b:
                    04:51:42:12:1d:59:68:72:42:98:7e:7d:2b:b6:8e:
                    bd:58:43:5e:05:39:52:59:4e:09:7d:ba:a6:f0:64:
                    06:f3:da:ac:ae:0d:9f:0b:35:c9:d7:a9:34:65:ba:
                    75:69:52:4f:99:37:51:9b:89:d3:6f:3d:38:7b:22:
                    06:f4:70:25:d8:0f:bf:25:db:49:91:2f:5f:f0:ab:
                    ca:e0:8d:d2:29:c5:9a:29:1e:2c:e9:6c:84:c7:f1:
                    62:cc:78:6f:96:02:f9:fb:69:71:15:85:80:8a:7d:
                    77:37:1e:8b:85:e0:23:9c:6a:4d:f4:ef:5f:8c:51:
                    68:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:57:13:02:57:55:28:68:0E:AE:19:B2:DC:68:F7:96:B2:E9:23:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89e61fc5-1a37-3373-99b3-24ad97cd96c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.141.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:1f:9e:1d:8b:23:62:11:e2:f9:5d:82:25:7a:2c:44:d1:87:
         51:6d:fb:af:45:58:1b:55:ce:51:82:c7:5a:28:21:8f:b6:25:
         c8:9c:8e:14:57:27:67:46:0f:d5:c2:d6:47:64:a9:cb:a3:0e:
         5d:74:a8:bf:f2:d0:da:0d:a0:a1:a2:cd:18:80:9d:b2:41:f8:
         58:06:92:55:98:4a:64:ca:54:d0:f3:e2:63:4f:55:4e:3d:ae:
         00:c6:b9:72:e3:8b:99:72:2e:a8:8e:bb:c4:9b:41:d3:80:db:
         92:96:56:81:fa:a5:0f:bb:0f:ef:0e:a1:f9:7a:fe:23:f4:37:
         53:97:23:09:87:92:74:2b:be:df:48:32:b9:01:8a:fe:04:a1:
         ac:1c:04:d4:ca:d8:78:e6:d8:af:23:95:81:e8:64:d4:2b:8a:
         d5:90:7e:42:a6:ea:5e:71:35:03:d3:4e:9b:e2:f8:38:2b:11:
         1c:0a:5b:a9:5f:74:c3:fd:f4:e5:59:4b:c8:78:11:df:fd:7c:
         12:4e:d8:54:ac:6a:f1:67:f5:e0:03:44:5c:34:51:b8:48:9c:
         69:7c:97:6e:17:3b:15:3a:3b:a5:64:a9:bc:9c:b1:e2:b2:11:
         bb:56:95:fe:47:f1:8d:1b:a2:fb:55:d5:3f:fc:ef:4d:61:9d:
         6e:9a:c0:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB0SIn1SDFz5FsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NjNkYzA3YWItYjk1OS00MDkxLTljMjgtNTM5YjFkYzUyYzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+49D5m/PP2nicfdSeSfl2LEQN2zxGQg3/0Y
5+UKKup8cuAVYS7RbwWd6qStZhenBQ2e5dWzMZe2tjTRpF/BBNbOpx/3kNNB22Qh
YMOY0TrWLadJa+lQxgeS+xZ10HPDA+rUbTJMYD6UORRBzvyQjo1f+WgKOZh1g+Yl
SX1j9/BDJPt3a3sEUUISHVlockKYfn0rto69WENeBTlSWU4Jfbqm8GQG89qsrg2f
CzXJ16k0Zbp1aVJPmTdRm4nTbz04eyIG9HAl2A+/JdtJkS9f8KvK4I3SKcWaKR4s
6WyEx/FizHhvlgL5+2lxFYWAin13Nx6LheAjnGpN9O9fjFFo9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDRXEwJXVShoDq4Zstxo95ay6SN7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODllNjFmYzUtMWEzNy0z
MzczLTk5YjMtMjRhZDk3Y2Q5NmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRY3sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADUfnh2LI2IR4vldgiV6LETRh1Ft+69FWBtVzlGCx1ooIY+2JcicjhRX
J2dGD9XC1kdkqcujDl10qL/y0NoNoKGizRiAnbJB+FgGklWYSmTKVNDz4mNPVU49
rgDGuXLji5lyLqiOu8SbQdOA25KWVoH6pQ+7D+8Oofl6/iP0N1OXIwmHknQrvt9I
MrkBiv4EoawcBNTK2Hjm2K8jlYHoZNQritWQfkKm6l5xNQPTTpvi+DgrERwKW6lf
dMP99OVZS8h4Ed/9fBJO2FSsavFn9eADRFw0UbhInGl8l24XOxU6O6VkqbycseKy
EbtWlf5H8Y0bovtV1T/8701hnW6awEQ=
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:50:05 2025 by rpki-client