Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e169e3a4-3eb8-3a49-af1c-416b19a30eee.roa
File:                     e169e3a4-3eb8-3a49-af1c-416b19a30eee.roa (raw, json)
Hash identifier:          rX1jmIDrzwFwuZNsme/9vWpDFAEvCo7kfYaXEUtaKoU=
Subject key identifier:   02:2B:4B:24:FC:87:CF:55:DC:3C:0B:A9:4C:E4:02:AB:7B:57:B8:A3
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584A00DAC826E20FB262FD86D500
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e169e3a4-3eb8-3a49-af1c-416b19a30eee.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6461
IP address blocks:        104.251.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c8:26:e2:0f:b2:62:fd:86:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=8630e2fd-cba5-4039-963b-791ed48ae265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:ab:bf:3b:02:8b:5b:ec:cb:09:46:d6:f9:
                    0c:f7:45:16:8b:5d:d0:4d:b8:e3:21:eb:5e:9b:32:
                    28:e0:99:5c:23:2d:ff:01:5a:e4:75:b6:b7:ea:bb:
                    95:2f:40:6e:42:f6:78:ed:5d:e0:17:92:ff:e9:57:
                    d9:bd:05:c4:b0:d8:9e:56:61:30:dc:07:26:fc:cd:
                    ff:b3:8b:a1:ba:59:b1:ce:ad:98:32:b0:0c:e1:fa:
                    95:78:24:9b:3a:45:2c:bf:99:25:53:84:39:3d:0b:
                    0d:cb:77:4b:e6:1b:a4:4a:84:24:4a:cc:2c:a6:c8:
                    b5:a3:3a:80:50:98:aa:27:f7:1f:eb:7b:e3:33:3a:
                    ec:07:39:a9:c4:58:3b:21:5c:57:96:51:d9:73:6c:
                    24:9c:6a:9d:48:ed:0f:bf:71:e9:70:77:78:15:8d:
                    33:62:35:15:0c:6e:86:31:fe:96:e8:4d:de:4c:7e:
                    f1:d5:9d:bd:93:20:1b:47:e1:9d:6d:f1:96:9e:d5:
                    74:4a:63:71:d9:cb:ce:28:77:65:cc:bf:50:1b:66:
                    f4:43:a8:db:25:b8:ad:8c:41:84:ee:90:68:9f:96:
                    c3:4b:ea:9f:79:ca:73:1d:50:07:6e:2b:ec:a9:88:
                    d5:ff:5a:02:ee:e2:04:0a:ec:9b:ae:27:18:9d:4b:
                    d2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2B:4B:24:FC:87:CF:55:DC:3C:0B:A9:4C:E4:02:AB:7B:57:B8:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e169e3a4-3eb8-3a49-af1c-416b19a30eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:66:91:0f:b3:a8:6c:fc:ba:b5:87:1e:dc:d8:4c:d2:af:f0:
         8e:bd:28:27:21:31:2d:b4:51:24:ea:7e:78:cb:58:26:cb:cd:
         1b:1f:20:ea:bd:ea:0b:12:90:d4:0f:b8:95:76:1f:f1:b3:63:
         95:fe:e8:64:e4:f8:81:48:7a:b5:ba:86:e4:38:78:c4:f7:d3:
         18:0c:8a:72:29:b2:39:f1:93:e0:84:04:bf:d2:4f:95:88:d7:
         bb:c4:70:16:86:00:d8:28:42:b8:6b:25:91:9a:86:de:ca:86:
         62:63:f7:c7:d0:0e:cc:ad:1a:26:e2:91:5e:ee:8c:a5:50:9e:
         e9:a6:ae:3a:13:e7:55:07:11:a7:fd:c8:d7:a0:ef:fe:ea:9f:
         8c:45:e5:81:65:80:43:9b:e6:3b:d7:ce:d9:9e:6c:aa:3c:ab:
         79:09:0f:4c:0d:0b:94:7b:d5:6d:f4:d3:10:8e:25:21:69:a6:
         96:ce:ab:c3:85:e1:43:b5:aa:f7:65:84:51:1c:7d:cb:57:a6:
         bf:28:47:a5:6b:ef:08:17:b0:9e:07:66:42:ae:e5:80:43:c5:
         e2:df:57:21:d6:17:33:dd:da:95:69:f5:63:d3:fe:fb:49:05:
         cd:ab:ad:19:1a:8c:f9:2b:0c:11:85:7d:53:4d:91:21:60:4f:
         6d:04:e5:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2sgm4g+yYv2G1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
ODYzMGUyZmQtY2JhNS00MDM5LTk2M2ItNzkxZWQ0OGFlMjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o2rvzsCi1vsywlG1vkM90UWi13QTbjjIete
mzIo4JlcIy3/AVrkdba36ruVL0BuQvZ47V3gF5L/6VfZvQXEsNieVmEw3Acm/M3/
s4uhulmxzq2YMrAM4fqVeCSbOkUsv5klU4Q5PQsNy3dL5hukSoQkSswspsi1ozqA
UJiqJ/cf63vjMzrsBzmpxFg7IVxXllHZc2wknGqdSO0Pv3HpcHd4FY0zYjUVDG6G
Mf6W6E3eTH7x1Z29kyAbR+GdbfGWntV0SmNx2cvOKHdlzL9QG2b0Q6jbJbitjEGE
7pBon5bDS+qfecpzHVAHbivsqYjV/1oC7uIECuybricYnUvSvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAIrSyT8h89V3DwLqUzkAqt7V7ijMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvZTE2OWUzYTQtM2ViOC0z
YTQ5LWFmMWMtNDE2YjE5YTMwZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPtgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZmkQ+zqGz8urWHHtzYTNKv8I69KCchMS20USTqfnjLWCbLzRsfIOq9
6gsSkNQPuJV2H/GzY5X+6GTk+IFIerW6huQ4eMT30xgMinIpsjnxk+CEBL/ST5WI
17vEcBaGANgoQrhrJZGaht7KhmJj98fQDsytGibikV7ujKVQnummrjoT51UHEaf9
yNeg7/7qn4xF5YFlgEOb5jvXztmebKo8q3kJD0wNC5R71W300xCOJSFpppbOq8OF
4UO1qvdlhFEcfctXpr8oR6Vr7wgXsJ4HZkKu5YBDxeLfVyHWFzPd2pVp9WPT/vtJ
Bc2rrRkajPkrDBGFfVNNkSFgT20E5Yg=
-----END CERTIFICATE-----
Generated at Fri Jun 6 04:59:23 2025 by rpki-client