Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/24d8cf79-ed97-311a-8d75-70c16944c2c1.roa
File:                     24d8cf79-ed97-311a-8d75-70c16944c2c1.roa (raw, json)
Hash identifier:          Vor4ng49uIJa0+VwF+/6PRha/fUS95aZgVMhWa2Ne8A=
Subject key identifier:   54:8B:A6:42:6F:6F:E9:49:51:09:A9:27:84:F7:F9:99:AF:FB:4F:48
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F43285849DC8FB33D1E57F6C49680A980
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/24d8cf79-ed97-311a-8d75-70c16944c2c1.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     0
IP address blocks:        206.130.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b3:3d:1e:57:f6:c4:96:80:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=5ae178f0-7419-4a93-956f-3a38c02b9313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:79:7a:50:c5:d9:23:3e:8b:ee:9c:e7:01:18:
                    d9:f0:4e:61:9b:4e:12:55:15:94:4f:c0:d8:58:bc:
                    dd:f9:a6:05:46:f0:66:4d:39:c6:a3:7d:ca:8d:5a:
                    39:ba:bf:c0:70:40:45:8e:e3:43:92:b2:22:33:9e:
                    17:fe:06:b9:a3:3e:59:f5:4b:47:12:51:1f:5f:3f:
                    16:2c:09:0d:67:e6:40:0f:85:04:67:b3:f2:ef:57:
                    33:fc:5f:ce:07:12:02:77:a1:eb:13:d0:f9:ca:6c:
                    52:1b:05:13:12:b8:ac:fe:e8:37:5e:6b:e4:e7:39:
                    1e:a5:6c:34:f6:1f:d7:15:b4:9e:bc:29:b8:16:20:
                    11:c8:cc:a1:c8:c8:a4:8a:3f:a4:5a:b0:19:91:5c:
                    35:e4:17:94:2b:6f:db:bc:c2:8a:55:a0:92:08:8c:
                    a2:cc:98:b9:5d:59:72:7e:7b:cb:00:68:61:16:e6:
                    be:d1:07:96:1b:1c:f8:e3:d4:7d:d0:86:ca:9d:40:
                    7b:25:36:e2:70:28:b0:86:64:ca:2d:5d:55:75:91:
                    0c:70:02:a4:47:2b:f7:79:6e:87:93:5f:e5:82:43:
                    36:a4:d2:b6:00:3c:fc:04:9d:ac:c1:27:75:68:e9:
                    0f:48:6f:21:52:b4:6a:5f:12:fe:6a:f6:a9:07:32:
                    8a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8B:A6:42:6F:6F:E9:49:51:09:A9:27:84:F7:F9:99:AF:FB:4F:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/24d8cf79-ed97-311a-8d75-70c16944c2c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:40:01:9d:25:f5:02:07:de:7a:9b:fe:2b:30:c1:a8:e6:
         50:ef:e2:f2:c6:d8:04:26:0e:fd:5d:00:fb:16:31:9e:d9:84:
         d0:72:32:26:e1:4a:f7:84:a8:98:e7:df:62:34:f3:b4:81:6c:
         33:1f:b5:96:b9:58:59:3b:a1:9b:38:6d:ff:37:0e:03:ee:6e:
         ec:31:07:c0:3f:fb:0d:70:3a:ff:9f:91:bf:a8:ba:11:e5:16:
         d4:e7:c6:2b:84:3a:c2:1f:01:a8:a6:86:bd:8b:31:ee:c8:ad:
         7c:28:0b:1d:2b:18:bd:d5:f0:8a:db:ad:81:1e:02:d5:5e:ee:
         5f:a8:71:6c:2f:36:34:b2:2c:fc:2b:82:e2:2f:50:ee:b9:f8:
         3e:05:35:61:a3:c3:26:8a:4d:5e:00:7b:c7:94:5d:45:f1:a7:
         d4:1b:cc:93:9d:71:6b:70:8f:55:39:c8:08:ac:a6:29:d9:19:
         e2:a4:f9:ae:ad:56:f1:4d:df:75:d1:3c:4e:ca:f8:af:ef:f0:
         a2:3b:35:39:b8:bd:01:cf:23:77:17:87:4e:18:74:3e:8c:86:
         e7:a1:93:ee:f4:60:0d:f0:57:b7:8b:16:00:76:13:eb:a6:e1:
         78:f1:dc:a9:25:f4:4f:90:7f:c5:21:eb:62:fe:73:77:4c:70:
         15:19:9f:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7M9Hlf2xJaAqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVlNTE0MWUtYTA2OS00OTU1LThjNTUtNGRhNWRmZDM2
ZmE3MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
NWFlMTc4ZjAtNzQxOS00YTkzLTk1NmYtM2EzOGMwMmI5MzEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63l6UMXZIz6L7pznARjZ8E5hm04SVRWUT8DY
WLzd+aYFRvBmTTnGo33KjVo5ur/AcEBFjuNDkrIiM54X/ga5oz5Z9UtHElEfXz8W
LAkNZ+ZAD4UEZ7Py71cz/F/OBxICd6HrE9D5ymxSGwUTEris/ug3Xmvk5zkepWw0
9h/XFbSevCm4FiARyMyhyMikij+kWrAZkVw15BeUK2/bvMKKVaCSCIyizJi5XVly
fnvLAGhhFua+0QeWGxz449R90IbKnUB7JTbicCiwhmTKLV1VdZEMcAKkRyv3eW6H
k1/lgkM2pNK2ADz8BJ2swSd1aOkPSG8hUrRqXxL+avapBzKK6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFSLpkJvb+lJUQmpJ4T3+Zmv+09IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1
MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1ZGZkMzZmYTcvMjRkOGNmNzktZWQ5Ny0z
MTFhLThkNzUtNzBjMTY5NDRjMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVlNTE0MWUtYTA2OS00OTU1LThj
NTUtNGRhNWRmZDM2ZmE3LzRlZTUxNDFlLWEwNjktNDk1NS04YzU1LTRkYTVkZmQz
NmZhNy5jcmwwHwYDVR0jBBgwFoAUZclCa6B2R1JWJymYeUgFgb61rrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWU1MTQxZS1hMDY5LTQ5NTUtOGM1NS00ZGE1
ZGZkMzZmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzoIKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7TQAGdJfUCB956m/4rMMGo5lDv4vLG2AQmDv1dAPsWMZ7ZhNByMibh
SveEqJjn32I087SBbDMftZa5WFk7oZs4bf83DgPubuwxB8A/+w1wOv+fkb+ouhHl
FtTnxiuEOsIfAaimhr2LMe7IrXwoCx0rGL3V8IrbrYEeAtVe7l+ocWwvNjSyLPwr
guIvUO65+D4FNWGjwyaKTV4Ae8eUXUXxp9QbzJOdcWtwj1U5yAispinZGeKk+a6t
VvFN33XRPE7K+K/v8KI7NTm4vQHPI3cXh04YdD6Mhuehk+70YA3wV7eLFgB2E+um
4Xjx3Kkl9E+Qf8Uh62L+c3dMcBUZn6c=
-----END CERTIFICATE-----
Generated at Sun Jun 1 03:30:57 2025 by rpki-client