Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ad15cf77-4989-309f-b5c9-1d8aba9dd07c.roa
File:                     ad15cf77-4989-309f-b5c9-1d8aba9dd07c.roa (raw, json)
Hash identifier:          oLIvP76BiDSQemgQqAa7qk0oHPiWYG42v4zNeT/hkXA=
Subject key identifier:   3B:B6:7C:A1:60:0B:11:1D:DA:59:CC:56:83:39:FE:7D:F4:F2:AE:73
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848F92683DC2B4424C0EC7B6B80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ad15cf77-4989-309f-b5c9-1d8aba9dd07c.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     17025
IP address blocks:        208.185.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:83:dc:2b:44:24:c0:ec:7b:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=1b2cc6cd-1b98-4359-a916-ffa9d7073576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cc:ac:39:a1:ab:f2:66:6b:8c:22:f0:c1:2f:
                    0e:ec:21:d5:e4:52:36:dc:b5:e6:e5:2f:5c:2b:70:
                    49:a6:8f:6d:d2:ba:86:7b:91:b1:06:be:18:ea:09:
                    76:2b:a3:16:9e:e5:80:52:5a:cc:8c:5a:1e:2d:72:
                    67:29:27:fe:14:41:50:a5:4c:42:86:34:05:1e:fa:
                    10:a8:3c:7d:db:63:8d:e0:f3:f9:e2:d5:48:43:d2:
                    b0:aa:4b:12:2e:72:28:d5:33:ea:b6:c6:bb:60:b7:
                    fb:91:61:ae:5a:ab:78:0a:97:96:a4:ad:f7:0b:16:
                    f6:43:15:8a:e7:21:49:28:2b:92:43:bf:e3:51:8a:
                    8b:12:26:52:45:be:26:78:92:dc:39:0e:42:81:23:
                    77:36:82:65:19:5f:b8:53:77:be:b3:12:12:93:dd:
                    64:86:dc:70:f9:d0:23:f3:34:d5:05:28:16:04:db:
                    dc:e6:70:5e:95:d1:cb:c5:4d:40:a8:be:7f:ef:dc:
                    b5:d4:a7:0f:a9:0d:7b:a4:7f:8f:50:7f:2c:9c:e0:
                    de:87:50:93:f3:60:71:99:7c:ae:92:2d:99:d7:ac:
                    f6:04:e8:44:10:0e:b6:15:9c:d4:1f:8f:8e:bd:b1:
                    d0:46:47:18:20:0e:6b:2f:81:67:3f:ff:5c:fb:7e:
                    97:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B6:7C:A1:60:0B:11:1D:DA:59:CC:56:83:39:FE:7D:F4:F2:AE:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ad15cf77-4989-309f-b5c9-1d8aba9dd07c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:2d:45:aa:6b:6b:47:2f:71:1a:2e:a0:5e:c8:fd:a4:dc:d4:
         88:d9:88:e0:d1:1a:0b:9f:01:90:71:ce:23:7d:0a:ef:9b:ad:
         db:6b:f5:83:71:99:9e:e4:b7:d6:a2:5c:7c:b1:5e:87:bf:c4:
         e5:39:d7:41:5d:02:29:bb:f9:7a:ba:94:7a:fa:30:b7:33:54:
         53:fa:2c:1b:b6:ef:71:61:21:69:6a:11:be:aa:bd:0f:6f:f3:
         c0:95:76:66:e4:32:c2:e9:c9:07:43:a3:80:fa:73:7c:cb:5d:
         28:dc:5b:44:ca:27:09:23:d0:e4:90:8f:4f:22:ed:43:70:20:
         df:14:0a:63:81:25:61:30:78:d6:22:1d:b6:86:ca:ae:08:3c:
         19:e2:dc:a3:f1:25:38:e4:c4:b7:ed:0a:06:f9:61:4c:cc:bc:
         c5:8e:89:dd:c2:0d:25:14:d2:4c:9a:07:4a:c0:d3:80:a1:21:
         48:df:38:58:d5:2f:d2:f6:9d:dc:8e:95:63:6e:ff:2e:13:6d:
         06:06:43:43:ee:e2:db:e8:62:a5:fb:6a:6e:ed:4f:0c:43:d3:
         97:da:2f:af:ef:45:d9:38:1e:a6:e4:ec:3e:20:60:0d:22:c5:
         94:a4:44:ba:2d:6e:3f:a6:1f:1b:b2:61:c1:f0:5f:64:99:f0:
         38:02:cf:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JoPcK0QkwOx7a4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
MWIyY2M2Y2QtMWI5OC00MzU5LWE5MTYtZmZhOWQ3MDczNTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8ysOaGr8mZrjCLwwS8O7CHV5FI23LXm5S9c
K3BJpo9t0rqGe5GxBr4Y6gl2K6MWnuWAUlrMjFoeLXJnKSf+FEFQpUxChjQFHvoQ
qDx922ON4PP54tVIQ9KwqksSLnIo1TPqtsa7YLf7kWGuWqt4CpeWpK33Cxb2QxWK
5yFJKCuSQ7/jUYqLEiZSRb4meJLcOQ5CgSN3NoJlGV+4U3e+sxISk91khtxw+dAj
8zTVBSgWBNvc5nBeldHLxU1AqL5/79y11KcPqQ17pH+PUH8snODeh1CT82BxmXyu
ki2Z16z2BOhEEA62FZzUH4+OvbHQRkcYIA5rL4FnP/9c+36XVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDu2fKFgCxEd2lnMVoM5/n308q5zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYWQxNWNmNzctNDk4OS0z
MDlmLWI1YzktMWQ4YWJhOWRkMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LkKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADctRapra0cvcRouoF7I/aTc1IjZiODRGgufAZBxziN9Cu+brdtr9YNx
mZ7kt9aiXHyxXoe/xOU510FdAim7+Xq6lHr6MLczVFP6LBu273FhIWlqEb6qvQ9v
88CVdmbkMsLpyQdDo4D6c3zLXSjcW0TKJwkj0OSQj08i7UNwIN8UCmOBJWEweNYi
HbaGyq4IPBni3KPxJTjkxLftCgb5YUzMvMWOid3CDSUU0kyaB0rA04ChIUjfOFjV
L9L2ndyOlWNu/y4TbQYGQ0Pu4tvoYqX7am7tTwxD05faL6/vRdk4Hqbk7D4gYA0i
xZSkRLotbj+mHxuyYcHwX2SZ8DgCz5g=
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:02:42 2025 by rpki-client