Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a626c8f4-745d-30f5-87ff-dee2b9654671.roa
File:                     a626c8f4-745d-30f5-87ff-dee2b9654671.roa (raw, json)
Hash identifier:          dURLEmJFXUjGfBJqtWFqS17hubqpgrLOncbL/CPjB6o=
Subject key identifier:   4B:8E:1B:F0:D6:74:47:21:35:C2:FE:62:6F:07:6D:70:3B:C9:58:03
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FFD22B0B0D4019B333900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a626c8f4-745d-30f5-87ff-dee2b9654671.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        24.2.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:fd:22:b0:b0:d4:01:9b:33:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=9ef72f60-12f0-439d-9c50-cf16544f068c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:62:b1:87:ce:19:73:c5:cc:4c:bf:06:aa:
                    ec:45:d8:fa:0b:54:88:25:09:d2:05:63:3f:b5:80:
                    ca:72:c7:50:45:8f:06:ea:53:08:f7:3b:8d:87:bb:
                    88:0f:c6:b6:a5:aa:8e:87:b7:9d:f5:ce:81:1e:0f:
                    99:e9:d4:c1:5f:c1:c9:36:0e:0e:34:c1:a5:24:b3:
                    2f:ea:0a:2b:e2:17:f8:84:c2:bd:2d:63:fe:ad:11:
                    77:14:47:37:9b:f7:58:6c:31:94:13:fe:4d:e2:c4:
                    2f:83:7d:b3:96:e8:49:c5:bb:0e:be:f4:64:9c:4f:
                    4d:6a:e2:5a:fa:6f:6a:7e:ab:26:94:6c:5a:0f:1a:
                    ef:1f:31:d2:57:38:4d:85:2c:76:a1:3e:b5:64:ce:
                    51:cc:7e:2e:04:73:c0:4a:68:eb:5c:17:52:b9:e9:
                    d1:86:23:3b:25:db:16:b5:0b:31:72:9e:ac:43:51:
                    03:3c:ad:3b:e8:9c:51:1d:8e:71:d3:65:51:76:d7:
                    9c:d6:55:05:62:73:89:33:eb:28:d2:53:66:1e:ac:
                    70:0e:46:0b:c3:39:6e:bb:0e:7b:7f:52:94:af:b7:
                    80:a0:75:18:f7:af:c2:3e:24:f6:4d:b9:72:e9:c3:
                    6c:df:09:9b:58:43:b7:a4:d8:66:fc:33:a9:d9:a3:
                    29:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8E:1B:F0:D6:74:47:21:35:C2:FE:62:6F:07:6D:70:3B:C9:58:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a626c8f4-745d-30f5-87ff-dee2b9654671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.2.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d8:e7:ad:83:8b:46:56:55:d2:de:c3:bc:e1:2b:bb:5b:2e:
         a0:d1:c8:b3:0b:d2:94:71:57:8a:66:17:e9:ae:ed:84:da:48:
         6b:05:0b:db:3f:c9:64:0c:af:d1:db:04:12:fa:f8:d8:ae:aa:
         2f:55:e0:b6:8b:a1:29:ef:4e:f1:9a:a5:ba:f0:81:67:14:0c:
         a3:68:4a:3b:15:b5:6f:19:be:18:a5:17:e6:23:59:ed:5b:61:
         f4:b3:da:a1:d7:82:aa:ea:ec:f7:ea:69:28:cb:f0:07:af:8f:
         d7:6c:5d:fe:c3:90:e1:b1:5a:bf:38:68:c7:34:53:4a:8b:2a:
         03:73:3b:36:1f:c4:22:4a:b0:3f:42:3a:ee:34:1c:4f:88:1e:
         eb:df:d4:e0:4b:af:06:d8:4d:36:69:6e:2e:2f:5f:fb:f2:7e:
         0c:b7:a3:52:52:5c:5e:e4:28:ac:d8:bc:79:79:7a:93:aa:26:
         bd:15:5e:06:6f:13:33:fe:06:2f:e3:cd:8a:0a:d3:f2:3a:d5:
         1d:04:75:11:59:52:1b:a7:73:97:82:ea:00:9b:99:e9:fe:c4:
         51:24:c2:07:84:b1:0a:66:d4:b4:57:64:3b:be:1e:78:3e:18:
         82:2e:6b:a6:a5:cd:16:c1:10:55:43:69:2d:78:80:27:e0:f9:
         62:de:ca:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL/0isLDUAZszOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
OWVmNzJmNjAtMTJmMC00MzlkLTljNTAtY2YxNjU0NGYwNjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/pisYfOGXPFzEy/BqrsRdj6C1SIJQnSBWM/
tYDKcsdQRY8G6lMI9zuNh7uID8a2paqOh7ed9c6BHg+Z6dTBX8HJNg4ONMGlJLMv
6gor4hf4hMK9LWP+rRF3FEc3m/dYbDGUE/5N4sQvg32zluhJxbsOvvRknE9NauJa
+m9qfqsmlGxaDxrvHzHSVzhNhSx2oT61ZM5RzH4uBHPASmjrXBdSuenRhiM7JdsW
tQsxcp6sQ1EDPK076JxRHY5x02VRdtec1lUFYnOJM+so0lNmHqxwDkYLwzluuw57
f1KUr7eAoHUY96/CPiT2Tbly6cNs3wmbWEO3pNhm/DOp2aMpYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEuOG/DWdEchNcL+Ym8HbXA7yVgDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTYyNmM4ZjQtNzQ1ZC0z
MGY1LTg3ZmYtZGVlMmI5NjU0NjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGALsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnY562Di0ZWVdLew7zhK7tbLqDRyLML0pRxV4pmF+mu7YTaSGsFC9s/
yWQMr9HbBBL6+Niuqi9V4LaLoSnvTvGapbrwgWcUDKNoSjsVtW8ZvhilF+YjWe1b
YfSz2qHXgqrq7PfqaSjL8Aevj9dsXf7DkOGxWr84aMc0U0qLKgNzOzYfxCJKsD9C
Ou40HE+IHuvf1OBLrwbYTTZpbi4vX/vyfgy3o1JSXF7kKKzYvHl5epOqJr0VXgZv
EzP+Bi/jzYoK0/I61R0EdRFZUhunc5eC6gCbmen+xFEkwgeEsQpm1LRXZDu+Hng+
GIIua6alzRbBEFVDaS14gCfg+WLeyvE=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:46:11 2025 by rpki-client