Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/013914ac-db93-39b5-886d-89f5abbd33e9.roa
File:                     013914ac-db93-39b5-886d-89f5abbd33e9.roa (raw, json)
Hash identifier:          RgFGE5SMKol5R/t8VoFotP1ZHCU2ti+154218dZDFPI=
Subject key identifier:   25:37:5A:22:51:FE:6D:96:5E:71:86:4A:B7:B1:A0:C4:85:87:88:E5
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFDA81CFF0D34671B24040
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/013914ac-db93-39b5-886d-89f5abbd33e9.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        74.216.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:da:81:cf:f0:d3:46:71:b2:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=35f7fc2a-0b8c-4c14-a7b8-2c52e510ab4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3b:e2:5f:5a:dc:f8:06:fc:55:12:69:1d:1e:
                    ff:d6:cf:cb:9f:75:f1:58:e6:24:ed:42:ff:59:dd:
                    67:ea:3b:d2:6e:aa:a2:39:f0:5c:b2:d8:47:82:41:
                    ec:1c:8c:02:98:20:d0:b8:74:43:b7:e8:c8:c5:b8:
                    73:59:b4:6d:3d:bc:fd:98:64:95:04:7a:76:3c:09:
                    23:86:e2:b1:87:a7:1a:39:80:3a:b6:90:78:74:ee:
                    36:63:c7:aa:94:e2:95:c3:85:aa:b0:74:d7:da:a3:
                    c7:1c:fd:e6:a8:e8:31:19:bd:4b:a4:0d:d5:47:ee:
                    93:9e:35:c6:b6:54:89:c8:9e:74:45:f3:59:7b:69:
                    76:42:44:40:1e:b8:4c:a3:6b:34:ca:a0:97:95:d5:
                    27:1c:04:76:21:fe:96:14:7a:f0:ba:cf:b3:ef:33:
                    7d:0c:8a:26:f4:2a:91:94:eb:1c:75:38:d6:81:aa:
                    97:b9:85:38:55:6e:2b:37:a8:f3:35:c3:23:03:6a:
                    b9:b1:71:a6:04:be:db:6a:5f:31:80:2a:59:e4:79:
                    45:cd:e1:3c:71:ab:20:48:2c:0e:bd:dc:7c:16:64:
                    89:32:23:3e:13:72:14:83:e3:7a:96:61:9f:f9:9b:
                    d4:df:12:66:41:45:f0:91:2f:bc:87:32:46:21:5d:
                    e4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:37:5A:22:51:FE:6D:96:5E:71:86:4A:B7:B1:A0:C4:85:87:88:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/013914ac-db93-39b5-886d-89f5abbd33e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.216.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:26:9e:a8:0b:fe:e8:7f:34:86:7d:1c:fe:29:b8:58:5f:a7:
         18:82:e7:b0:c2:6b:32:2d:e0:a8:76:9b:cd:85:bf:cc:1e:f8:
         8d:78:5c:73:5f:e8:b5:1b:02:af:ee:f9:c1:ed:6d:de:30:c3:
         2c:69:74:fe:46:10:0d:b2:d2:b8:51:a2:ed:fc:c9:ee:9a:77:
         a2:c7:82:56:d9:e5:cc:a4:a4:1b:63:9b:cf:be:62:c8:fd:dc:
         1c:91:3a:24:82:b9:c6:ba:24:6b:4c:0c:fb:af:db:23:c5:55:
         94:17:1c:a6:f8:fd:e5:fa:10:d2:bd:f0:30:7b:b4:3f:de:02:
         69:bc:2c:33:d3:68:0b:fa:da:68:1d:bf:cf:22:cc:05:ff:b0:
         91:d9:91:c0:b6:6f:90:4f:25:b0:da:42:c6:63:07:d0:4a:44:
         17:40:27:dd:5d:7b:f7:d6:fe:fb:42:df:49:c3:a9:f1:a4:70:
         12:d0:b5:3d:f6:58:1a:22:78:0c:d4:e5:11:51:26:ef:a2:6f:
         c7:3c:90:40:fb:d0:58:07:0b:79:bc:7e:1e:f2:95:dc:e7:3f:
         8b:c5:e4:df:20:dc:64:02:81:31:9a:ef:8d:19:a0:ce:dd:f4:
         ef:d5:ab:0b:dc:f7:83:28:d8:83:63:56:74:c9:03:02:34:26:
         9f:ff:81:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539qBz/DTRnGyQEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
MzVmN2ZjMmEtMGI4Yy00YzE0LWE3YjgtMmM1MmU1MTBhYjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDviX1rc+Ab8VRJpHR7/1s/Ln3XxWOYk7UL/
Wd1n6jvSbqqiOfBcsthHgkHsHIwCmCDQuHRDt+jIxbhzWbRtPbz9mGSVBHp2PAkj
huKxh6caOYA6tpB4dO42Y8eqlOKVw4WqsHTX2qPHHP3mqOgxGb1LpA3VR+6TnjXG
tlSJyJ50RfNZe2l2QkRAHrhMo2s0yqCXldUnHAR2If6WFHrwus+z7zN9DIom9CqR
lOscdTjWgaqXuYU4VW4rN6jzNcMjA2q5sXGmBL7bal8xgCpZ5HlFzeE8casgSCwO
vdx8FmSJMiM+E3IUg+N6lmGf+ZvU3xJmQUXwkS+8hzJGIV3kzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCU3WiJR/m2WXnGGSrexoMSFh4jlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMDEzOTE0YWMtZGI5My0z
OWI1LTg4NmQtODlmNWFiYmQzM2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStj/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEgmnqgL/uh/NIZ9HP4puFhfpxiC57DCazIt4Kh2m82Fv8we+I14XHNf
6LUbAq/u+cHtbd4wwyxpdP5GEA2y0rhRou38ye6ad6LHglbZ5cykpBtjm8++Ysj9
3ByROiSCuca6JGtMDPuv2yPFVZQXHKb4/eX6ENK98DB7tD/eAmm8LDPTaAv62mgd
v88izAX/sJHZkcC2b5BPJbDaQsZjB9BKRBdAJ91de/fW/vtC30nDqfGkcBLQtT32
WBoieAzU5RFRJu+ib8c8kED70FgHC3m8fh7yldznP4vF5N8g3GQCgTGa740ZoM7d
9O/Vqwvc94Mo2INjVnTJAwI0Jp//gRQ=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:09:13 2025 by rpki-client