Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/90516e6c-6647-3ba1-96a2-fbf18a58daae.roa
File:                     90516e6c-6647-3ba1-96a2-fbf18a58daae.roa (raw, json)
Hash identifier:          kFt9P+2w364bSxRnTyVzOJwa/nMCu1obSvuEpz0+DuQ=
Subject key identifier:   FA:FA:68:67:46:82:AD:1C:B8:1A:D3:7F:CD:6E:B3:85:0E:E7:7B:3E
Certificate issuer:       /CN=2044bf03-a0f3-4eed-9707-b517f4923781
Certificate serial:       010D0C9F4328584917DC34DAB4ADEDD52AADDD40
Authority key identifier: 63:C9:ED:E3:0A:CB:B6:C6:A0:E8:61:F0:8B:2F:97:1D:EE:2F:AE:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/90516e6c-6647-3ba1-96a2-fbf18a58daae.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     35280
IP address blocks:        162.254.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:34:da:b4:ad:ed:d5:2a:ad:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2044bf03-a0f3-4eed-9707-b517f4923781
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=95925f96-1da8-40b9-8419-4b349510cca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:02:2d:0f:2b:5d:05:aa:f9:14:c2:6c:30:b4:
                    4f:93:41:95:0f:00:32:ce:fb:fb:4b:30:1c:12:0e:
                    30:e8:27:10:14:61:0c:c4:bc:a1:51:42:a1:04:d0:
                    9b:50:50:d9:9b:8b:68:e2:fe:af:e2:49:df:e2:ff:
                    61:e3:4e:fa:fc:05:b0:26:58:43:6c:b6:0c:7d:94:
                    82:50:03:a5:82:9c:d7:d6:77:87:30:79:c1:3e:27:
                    41:ef:9b:1a:b6:d7:e2:2a:4c:2c:d5:48:df:0f:4d:
                    0e:f1:65:f9:fe:4f:f5:c6:db:ae:5f:ca:07:7d:c0:
                    f8:53:76:3d:80:3c:5e:0a:88:71:95:8b:62:de:d5:
                    0c:67:e4:54:e2:73:9c:88:39:be:ee:05:a6:87:41:
                    d5:13:3a:c2:fd:fa:c2:a7:ff:1c:0d:d5:e3:0f:3f:
                    20:97:e0:66:d5:80:3d:e9:91:78:40:14:c7:04:dc:
                    57:ac:ab:d7:20:4b:e8:76:43:17:d7:5e:36:44:58:
                    02:82:14:e0:f5:d1:2e:88:4f:a0:d3:c6:16:94:15:
                    ba:f3:55:3d:8f:2c:db:3b:b8:f3:1b:ad:ff:f3:e2:
                    87:c1:51:e6:f5:83:80:94:d7:73:ec:8f:49:fc:be:
                    ee:cb:2e:60:ce:b2:b6:8d:2b:a1:33:36:62:a5:15:
                    7d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FA:68:67:46:82:AD:1C:B8:1A:D3:7F:CD:6E:B3:85:0E:E7:7B:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/90516e6c-6647-3ba1-96a2-fbf18a58daae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.crl

            X509v3 Authority Key Identifier:
                keyid:63:C9:ED:E3:0A:CB:B6:C6:A0:E8:61:F0:8B:2F:97:1D:EE:2F:AE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c4:fb:85:02:e5:21:05:52:69:a0:41:09:cd:a4:24:65:00:
         4e:ab:6c:ec:14:47:77:e2:62:f6:62:b8:50:15:21:79:6b:6c:
         9a:f6:42:2a:76:7a:63:d6:12:72:1a:ed:9d:ae:0b:8b:17:53:
         4e:c1:e5:bf:6b:ab:85:f2:c2:f7:19:f1:45:3c:72:fe:a0:d3:
         41:74:e9:4c:55:6e:d9:5b:ae:8a:96:fc:08:09:6f:ff:86:ee:
         fc:ff:9b:fe:cf:cf:b9:55:29:ba:0e:60:5a:5f:07:cd:4b:33:
         95:38:94:40:9f:a8:f9:56:be:8c:e8:88:cf:92:f9:32:39:30:
         5f:39:cb:18:6b:16:78:17:37:de:37:8f:b0:0c:73:c2:fb:a4:
         13:71:94:0e:dc:3f:3b:3d:73:65:44:03:41:a1:8f:be:91:29:
         a5:3a:9b:0c:e3:20:26:84:3d:7e:59:d9:40:15:09:68:95:35:
         09:9e:36:82:ea:1d:6b:c8:8d:47:3d:18:60:3d:b6:50:15:81:
         8e:29:67:06:f6:e4:da:01:ef:2e:44:87:dd:66:7f:c8:7e:93:
         57:d7:7f:01:c6:8f:92:13:c6:4d:95:12:60:7f:b8:86:62:84:
         5c:e8:8c:21:d7:de:2f:51:b3:38:28:6b:a5:28:19:a0:3d:74:
         e7:b0:de:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DTatK3t1Sqt3UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA0NGJmMDMtYTBmMy00ZWVkLTk3MDctYjUxN2Y0OTIz
NzgxMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
OTU5MjVmOTYtMWRhOC00MGI5LTg0MTktNGIzNDk1MTBjY2E0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQItDytdBar5FMJsMLRPk0GVDwAyzvv7SzAc
Eg4w6CcQFGEMxLyhUUKhBNCbUFDZm4to4v6v4knf4v9h4076/AWwJlhDbLYMfZSC
UAOlgpzX1neHMHnBPidB75sattfiKkws1UjfD00O8WX5/k/1xtuuX8oHfcD4U3Y9
gDxeCohxlYti3tUMZ+RU4nOciDm+7gWmh0HVEzrC/frCp/8cDdXjDz8gl+Bm1YA9
6ZF4QBTHBNxXrKvXIEvodkMX1142RFgCghTg9dEuiE+g08YWlBW681U9jyzbO7jz
G63/8+KHwVHm9YOAlNdz7I9J/L7uyy5gzrK2jSuhMzZipRV9XwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPr6aGdGgq0cuBrTf81us4UO53s+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMDQ0
YmYwMy1hMGYzLTRlZWQtOTcwNy1iNTE3ZjQ5MjM3ODEvOTA1MTZlNmMtNjY0Ny0z
YmExLTk2YTItZmJmMThhNThkYWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjA0NGJmMDMtYTBmMy00ZWVkLTk3
MDctYjUxN2Y0OTIzNzgxLzIwNDRiZjAzLWEwZjMtNGVlZC05NzA3LWI1MTdmNDky
Mzc4MS5jcmwwHwYDVR0jBBgwFoAUY8nt4wrLtsag6GHwiy+XHe4vrrwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMDQ0YmYwMy1hMGYzLTRlZWQtOTcwNy1iNTE3
ZjQ5MjM3ODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov59MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfE+4UC5SEFUmmgQQnNpCRlAE6rbOwUR3fiYvZiuFAVIXlrbJr2Qip2
emPWEnIa7Z2uC4sXU07B5b9rq4XywvcZ8UU8cv6g00F06UxVbtlbroqW/AgJb/+G
7vz/m/7Pz7lVKboOYFpfB81LM5U4lECfqPlWvozoiM+S+TI5MF85yxhrFngXN943
j7AMc8L7pBNxlA7cPzs9c2VEA0Ghj76RKaU6mwzjICaEPX5Z2UAVCWiVNQmeNoLq
HWvIjUc9GGA9tlAVgY4pZwb25NoB7y5Eh91mf8h+k1fXfwHGj5ITxk2VEmB/uIZi
hFzojCHX3i9Rszgoa6UoGaA9dOew3gY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:45 2025 by rpki-client