Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/00d6eb17-f865-352c-ae6e-6a855981e50d.roa
File:                     00d6eb17-f865-352c-ae6e-6a855981e50d.roa (raw, json)
Hash identifier:          NFcQfwU9tyIqzcGkaTFNXq6DYLRehqeIKfeNJ5d16dk=
Subject key identifier:   E8:D6:F4:D1:76:C3:DF:28:9A:01:15:A8:65:DA:54:21:E8:B0:C9:75
Certificate issuer:       /CN=25283898-2dc3-4477-af3c-b64dd3c800ab
Certificate serial:       010D0C9F43285849631EC7D9B40E74F24F7E2C00
Authority key identifier: 1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/00d6eb17-f865-352c-ae6e-6a855981e50d.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     13692
IP address blocks:        192.55.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:c7:d9:b4:0e:74:f2:4f:7e:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25283898-2dc3-4477-af3c-b64dd3c800ab
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=5975a7bc-ad01-443b-b7ad-04061dbdcd46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:b6:59:63:c7:c9:ee:43:5d:77:15:ae:fb:
                    ab:c4:98:7c:2a:3f:19:0b:3b:ba:cb:37:ea:d1:8d:
                    2e:33:83:9f:9c:98:a9:fd:d0:86:aa:77:a5:88:7c:
                    66:c9:4e:37:b2:52:59:06:49:5d:d9:fb:5f:d8:1d:
                    28:50:58:c9:4f:bb:e4:df:a2:a0:96:5e:40:9f:8e:
                    4c:5e:c2:d8:c8:0c:93:3a:9c:f9:e2:ea:ea:36:d1:
                    27:26:30:41:df:78:72:69:36:2a:ad:20:1e:05:42:
                    57:31:f4:c1:9e:45:f4:49:b6:52:4a:3a:0c:89:1c:
                    01:ce:9b:d4:17:94:53:8e:ac:c8:af:20:35:c1:95:
                    d0:fd:80:a5:9c:1e:2d:64:90:78:64:19:45:02:12:
                    e0:a1:33:fe:f7:4d:c8:be:9f:58:c8:8e:49:55:b5:
                    81:92:d1:63:c4:33:25:82:7c:83:08:6e:31:24:5a:
                    cb:bd:78:be:b1:0c:c1:d9:e0:28:ff:2d:14:f0:f5:
                    57:6c:74:85:1a:8c:46:d4:76:6b:5f:c9:3e:72:d6:
                    1d:3a:17:77:e9:74:34:7e:fe:74:78:d3:22:b4:02:
                    28:47:96:33:57:00:0a:5d:92:bb:cc:ed:a2:1a:05:
                    2c:b3:da:6c:4b:ce:55:a1:88:55:62:73:83:57:59:
                    80:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D6:F4:D1:76:C3:DF:28:9A:01:15:A8:65:DA:54:21:E8:B0:C9:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/00d6eb17-f865-352c-ae6e-6a855981e50d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.crl

            X509v3 Authority Key Identifier:
                keyid:1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:cc:3e:07:83:7e:61:f1:61:80:77:a6:eb:67:15:4d:c1:fe:
         2e:c4:d1:eb:a1:72:6c:1a:ac:eb:43:95:06:46:18:23:a4:85:
         fb:a8:8e:97:ac:49:b8:40:96:9e:9d:9c:40:8e:ba:68:25:43:
         6b:3a:25:2a:06:e0:c2:63:9f:9c:a4:a8:2e:e6:27:25:74:e5:
         17:f5:8f:22:4c:cb:13:e8:18:8e:54:7a:c5:79:17:5b:1a:ef:
         fb:35:62:48:64:d6:7c:ba:b1:b5:50:03:5b:d6:94:30:80:a1:
         95:61:54:25:6c:ea:9d:e7:6a:10:58:85:de:3a:c6:7f:c9:b6:
         31:0e:da:04:b2:b1:bc:59:3a:17:ee:b6:b9:52:83:ec:20:22:
         d2:00:dc:6a:79:28:5e:49:01:47:36:f1:c2:25:dd:2f:f5:db:
         b6:5c:cd:56:33:e7:01:04:80:98:b8:f0:07:82:b1:bf:3f:86:
         92:e9:8c:c5:1a:fd:6a:8f:f3:e6:75:e9:bf:a4:55:02:42:69:
         3f:36:f3:ad:aa:11:d0:87:a8:21:c6:4b:c8:52:09:f5:9f:de:
         e5:9d:68:13:0d:f4:cd:b5:15:64:72:26:68:b4:9c:a2:4d:8e:
         8c:fe:12:43:59:64:58:28:87:98:90:e9:1f:92:48:b4:30:85:
         95:d9:9a:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsfZtA508k9+LAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUyODM4OTgtMmRjMy00NDc3LWFmM2MtYjY0ZGQzYzgw
MGFiMB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk
NTk3NWE3YmMtYWQwMS00NDNiLWI3YWQtMDQwNjFkYmRjZDQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvni2WWPHye5DXXcVrvurxJh8Kj8ZCzu6yzfq
0Y0uM4OfnJip/dCGqneliHxmyU43slJZBkld2ftf2B0oUFjJT7vk36Kgll5An45M
XsLYyAyTOpz54urqNtEnJjBB33hyaTYqrSAeBUJXMfTBnkX0SbZSSjoMiRwBzpvU
F5RTjqzIryA1wZXQ/YClnB4tZJB4ZBlFAhLgoTP+903Ivp9YyI5JVbWBktFjxDMl
gnyDCG4xJFrLvXi+sQzB2eAo/y0U8PVXbHSFGoxG1HZrX8k+ctYdOhd36XQ0fv50
eNMitAIoR5YzVwAKXZK7zO2iGgUss9psS85VoYhVYnODV1mA/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjW9NF2w98omgEVqGXaVCHosMl1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNTI4
Mzg5OC0yZGMzLTQ0NzctYWYzYy1iNjRkZDNjODAwYWIvMDBkNmViMTctZjg2NS0z
NTJjLWFlNmUtNmE4NTU5ODFlNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjUyODM4OTgtMmRjMy00NDc3LWFm
M2MtYjY0ZGQzYzgwMGFiLzI1MjgzODk4LTJkYzMtNDQ3Ny1hZjNjLWI2NGRkM2M4
MDBhYi5jcmwwHwYDVR0jBBgwFoAUHX6NmYvAQseU6/FQOTSqDFBgE98wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNTI4Mzg5OC0yZGMzLTQ0NzctYWYzYy1iNjRk
ZDNjODAwYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwDf8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK7MPgeDfmHxYYB3putnFU3B/i7E0euhcmwarOtDlQZGGCOkhfuojpes
SbhAlp6dnECOumglQ2s6JSoG4MJjn5ykqC7mJyV05Rf1jyJMyxPoGI5UesV5F1sa
7/s1Ykhk1ny6sbVQA1vWlDCAoZVhVCVs6p3nahBYhd46xn/JtjEO2gSysbxZOhfu
trlSg+wgItIA3Gp5KF5JAUc28cIl3S/127ZczVYz5wEEgJi48AeCsb8/hpLpjMUa
/WqP8+Z16b+kVQJCaT82862qEdCHqCHGS8hSCfWf3uWdaBMN9M21FWRyJmi0nKJN
joz+EkNZZFgoh5iQ6R+SSLQwhZXZmos=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:29 2025 by rpki-client