Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c03fc487-03b4-35d7-965a-55c91552b426.roa
File:                     c03fc487-03b4-35d7-965a-55c91552b426.roa (raw, json)
Hash identifier:          I5Bk/4l/ehyeJtjiUBvDd7pz73TQ+cvWhJBJuwOWfQA=
Subject key identifier:   FE:10:B7:12:C0:4C:2D:37:AF:5C:0F:9C:6B:E5:BB:FB:BE:38:01:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43161830361188196FDBA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c03fc487-03b4-35d7-965a-55c91552b426.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        24.218.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:61:83:03:61:18:81:96:fd:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=427c6d32-af12-491d-9949-bef1173ca224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:80:0f:95:a8:34:bf:a8:fd:a0:1b:0e:cf:82:
                    ee:40:ad:01:5f:06:1d:f1:3c:84:78:a9:f8:e5:ba:
                    83:46:e2:6d:b6:9e:58:32:00:7f:10:a7:6f:eb:62:
                    3f:55:0c:0e:4c:3a:59:f4:50:30:25:76:2a:7f:4e:
                    6f:c2:db:ae:60:6e:b0:f1:04:ca:e2:1b:f0:61:da:
                    fd:07:a6:9f:25:0d:c4:e4:36:34:54:99:2d:3c:a5:
                    f1:4f:b0:ef:3b:d8:85:01:e2:dd:fa:65:af:15:ae:
                    d0:72:7d:38:e9:0e:28:6a:6b:ce:fb:2a:66:f8:cb:
                    6e:4e:38:30:3d:e8:f8:d5:cb:93:d1:f0:e3:cf:e4:
                    bb:c3:f3:d6:5a:bc:73:80:8d:3c:e0:82:29:31:de:
                    fc:ad:25:6d:d9:62:0f:e9:a3:d2:7d:22:d0:f6:2d:
                    35:92:3c:51:70:0f:c5:8b:a4:bd:c5:9b:27:6d:6e:
                    cf:5b:0c:9d:77:02:a1:fc:e9:72:2f:09:9e:4a:97:
                    b2:50:9e:dd:c6:e1:73:37:d0:f2:30:0b:e1:32:51:
                    e9:ee:76:1a:d8:b7:ae:d8:09:13:6e:b9:c8:6a:99:
                    b8:d2:65:72:70:b1:31:46:ca:f3:23:d0:99:b9:74:
                    35:cf:55:5d:15:c4:5b:16:af:e3:29:95:3a:62:94:
                    6a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:10:B7:12:C0:4C:2D:37:AF:5C:0F:9C:6B:E5:BB:FB:BE:38:01:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c03fc487-03b4-35d7-965a-55c91552b426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.218.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:cb:41:81:2d:05:f4:94:20:bf:01:b6:17:b3:e3:ad:ee:b2:
         a4:2d:63:19:82:5c:71:8c:0e:53:6d:c8:ab:30:25:b6:73:a7:
         fa:c0:c6:28:8a:d1:83:8b:e8:92:77:5e:ce:f4:d6:0e:0d:5c:
         f7:91:f8:8b:2c:48:ff:18:a4:df:09:c2:b8:47:c8:4a:20:5a:
         a3:8a:18:35:4a:e2:04:52:1d:00:f1:94:c1:a9:6e:88:e1:38:
         13:c9:08:93:68:f3:b1:0e:46:e4:37:37:25:50:22:b1:a9:f6:
         5d:ef:05:17:0f:95:18:bb:ca:c5:c0:be:9b:1e:54:ee:cc:c8:
         ff:bf:03:27:5b:06:53:02:1c:13:cc:e1:e4:e2:c9:02:68:b7:
         da:2a:53:7d:ef:06:ed:54:89:a4:7b:f6:cd:66:c0:3a:86:df:
         4f:ff:0d:51:f1:30:5b:97:f6:ce:b3:f0:92:f0:d5:b6:43:7c:
         2f:79:19:e9:1a:9a:9f:ac:30:52:1d:5e:c9:13:1d:89:92:63:
         d0:0c:80:92:02:bf:94:44:1c:4f:77:37:47:04:12:aa:65:0a:
         eb:2f:04:91:c4:3b:1d:59:6e:da:bf:f5:ec:ff:16:8d:cb:50:
         14:f3:21:43:24:13:44:b7:1b:11:2b:7e:7e:38:67:25:4e:60:
         e8:62:10:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMWGDA2EYgZb9ugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NDI3YzZkMzItYWYxMi00OTFkLTk5NDktYmVmMTE3M2NhMjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oAPlag0v6j9oBsOz4LuQK0BXwYd8TyEeKn4
5bqDRuJttp5YMgB/EKdv62I/VQwOTDpZ9FAwJXYqf05vwtuuYG6w8QTK4hvwYdr9
B6afJQ3E5DY0VJktPKXxT7DvO9iFAeLd+mWvFa7Qcn046Q4oamvO+ypm+MtuTjgw
Pej41cuT0fDjz+S7w/PWWrxzgI084IIpMd78rSVt2WIP6aPSfSLQ9i01kjxRcA/F
i6S9xZsnbW7PWwyddwKh/OlyLwmeSpeyUJ7dxuFzN9DyMAvhMlHp7nYa2Leu2AkT
brnIapm40mVycLExRsrzI9CZuXQ1z1VdFcRbFq/jKZU6YpRqbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4QtxLATC03r1wPnGvlu/u+OAE+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzAzZmM0ODctMDNiNC0z
NWQ3LTk2NWEtNTVjOTE1NTJiNDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGNqkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALTLQYEtBfSUIL8Bthez463usqQtYxmCXHGMDlNtyKswJbZzp/rAxiiK
0YOL6JJ3Xs701g4NXPeR+IssSP8YpN8JwrhHyEogWqOKGDVK4gRSHQDxlMGpbojh
OBPJCJNo87EORuQ3NyVQIrGp9l3vBRcPlRi7ysXAvpseVO7MyP+/AydbBlMCHBPM
4eTiyQJot9oqU33vBu1UiaR79s1mwDqG30//DVHxMFuX9s6z8JLw1bZDfC95Geka
mp+sMFIdXskTHYmSY9AMgJICv5REHE93N0cEEqplCusvBJHEOx1Zbtq/9ez/Fo3L
UBTzIUMkE0S3GxErfn44ZyVOYOhiEMA=
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:13:08 2025 by rpki-client