Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/e3797bcd-705e-363c-b104-8d569e2486fb.roa
File:                     e3797bcd-705e-363c-b104-8d569e2486fb.roa (raw, json)
Hash identifier:          0WW+9llWQ/d7XBadP+G+pYpFdOD3nUPayJEgd7iaw90=
Subject key identifier:   AD:36:56:F6:31:0E:2D:AA:E0:B0:5A:53:86:FF:B8:6A:93:D8:6A:25
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F432858496E49886EF9DEDBEE4EA8DF80
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/e3797bcd-705e-363c-b104-8d569e2486fb.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     36691
IP address blocks:        192.55.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:88:6e:f9:de:db:ee:4e:a8:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=bc1dc723-75e2-4d99-a129-343e46b3cb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:dd:d4:b9:c4:b0:8b:cf:11:df:17:87:71:f2:
                    d6:44:20:c5:52:09:7a:33:ea:87:2a:f4:6f:e9:04:
                    1c:f7:46:f6:86:0f:18:cf:ff:a1:89:05:fe:14:35:
                    26:ea:63:67:df:08:82:d1:01:1a:43:9a:22:f2:33:
                    d3:a7:fa:af:d5:04:64:e6:9d:4a:81:40:4a:09:f8:
                    80:41:e4:26:b2:82:ef:98:2c:ce:8f:a0:90:e2:4b:
                    93:01:13:bf:8b:ad:ef:73:a4:27:58:f3:e8:77:cc:
                    89:15:72:61:38:d8:4c:16:34:fb:d2:7d:09:f1:b3:
                    69:a0:76:05:43:4d:5f:54:d2:66:cc:a6:49:20:30:
                    b5:1d:95:e4:d4:00:40:d0:a5:c7:b8:72:13:dc:6f:
                    a4:3e:bd:5c:dd:96:be:29:af:f6:7c:52:a0:a9:b6:
                    77:3e:8c:bb:88:4e:ec:63:83:51:29:de:44:26:43:
                    b9:71:35:0a:6f:0d:31:48:b4:c1:66:61:15:e2:30:
                    5a:b4:ca:04:1a:28:16:ba:77:9e:90:88:14:1c:c3:
                    46:7b:ba:c6:9e:2e:b3:ef:16:42:26:f4:83:dc:b8:
                    91:fb:bf:2d:b0:2f:fa:10:37:19:ed:5f:b3:1f:27:
                    c6:7b:a8:1a:bc:ad:ee:85:3f:b7:62:dd:c0:46:b0:
                    95:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:36:56:F6:31:0E:2D:AA:E0:B0:5A:53:86:FF:B8:6A:93:D8:6A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/e3797bcd-705e-363c-b104-8d569e2486fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:e1:f5:68:d3:0e:05:05:76:45:3f:db:c7:83:02:1a:a6:
         af:6f:e1:4c:8c:b7:ef:c7:c1:2a:3c:73:37:13:46:75:e4:fe:
         03:b7:74:b4:15:ef:16:b8:52:4d:e1:c6:e7:87:97:82:48:88:
         e6:f4:e0:c6:48:1c:13:c0:8b:73:9b:c5:d6:9d:7a:9f:68:8b:
         39:be:fa:7e:e7:8f:04:6a:fa:de:82:0d:97:ac:37:d4:1e:0f:
         4d:dc:6c:2a:71:a0:21:a9:e7:63:46:c5:d1:83:8b:4f:51:99:
         63:fb:e4:36:c9:a8:12:ce:29:20:01:fd:39:44:e7:28:f7:ca:
         3e:de:19:a2:6c:15:41:83:0f:a9:18:c4:1d:44:84:ae:f0:76:
         60:b0:2b:65:2f:12:2d:12:33:f4:6b:0e:20:a2:e1:eb:50:fe:
         cd:bf:28:19:00:05:2b:f1:04:dc:12:67:f6:bc:90:e3:10:77:
         f2:da:ad:6b:c6:37:e6:d8:b2:56:34:b4:a8:14:fb:3f:74:e8:
         e9:64:b3:75:a2:08:f6:ea:7c:f4:a0:e2:d0:29:33:c1:02:5f:
         4d:ad:af:2d:f0:fd:c3:72:80:31:d6:54:0a:d3:3a:c5:9a:5a:
         82:90:04:a7:80:c3:0a:bc:0a:8a:a4:04:22:7e:5c:73:19:00:
         1f:ad:49:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYhu+d7b7k6o34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy
ZmQ1MB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk
YmMxZGM3MjMtNzVlMi00ZDk5LWExMjktMzQzZTQ2YjNjYjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d3UucSwi88R3xeHcfLWRCDFUgl6M+qHKvRv
6QQc90b2hg8Yz/+hiQX+FDUm6mNn3wiC0QEaQ5oi8jPTp/qv1QRk5p1KgUBKCfiA
QeQmsoLvmCzOj6CQ4kuTARO/i63vc6QnWPPod8yJFXJhONhMFjT70n0J8bNpoHYF
Q01fVNJmzKZJIDC1HZXk1ABA0KXHuHIT3G+kPr1c3Za+Ka/2fFKgqbZ3Poy7iE7s
Y4NRKd5EJkO5cTUKbw0xSLTBZmEV4jBatMoEGigWuneekIgUHMNGe7rGni6z7xZC
JvSD3LiR+78tsC/6EDcZ7V+zHyfGe6gavK3uhT+3Yt3ARrCVZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK02VvYxDi2q4LBaU4b/uGqT2GolMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy
ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvZTM3OTdiY2QtNzA1ZS0z
NjNjLWIxMDQtOGQ1NjllMjQ4NmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5
ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl
MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2
ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDflMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIa4fVo0w4FBXZFP9vHgwIapq9v4UyMt+/HwSo8czcTRnXk/gO3dLQV
7xa4Uk3hxueHl4JIiOb04MZIHBPAi3Obxdadep9oizm++n7njwRq+t6CDZesN9Qe
D03cbCpxoCGp52NGxdGDi09RmWP75DbJqBLOKSAB/TlE5yj3yj7eGaJsFUGDD6kY
xB1EhK7wdmCwK2UvEi0SM/RrDiCi4etQ/s2/KBkABSvxBNwSZ/a8kOMQd/LarWvG
N+bYslY0tKgU+z906Olks3WiCPbqfPSg4tApM8ECX02try3w/cNygDHWVArTOsWa
WoKQBKeAwwq8CoqkBCJ+XHMZAB+tSXE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:08 2025 by rpki-client