Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/53895827-d60e-3203-b385-41bf4259e789.roa
File:                     53895827-d60e-3203-b385-41bf4259e789.roa (raw, json)
Hash identifier:          o2R1SVzdshOoxPbR9Qan1zv9pvI4BkpFzeeBhSj30VA=
Subject key identifier:   A4:60:F2:B6:57:BD:7F:EB:EA:98:D6:64:BD:F0:76:1D:11:F5:9C:DD
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F43285849C904F5886BE862B4E04C5680
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/53895827-d60e-3203-b385-41bf4259e789.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     397423
IP address blocks:        69.42.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f5:88:6b:e8:62:b4:e0:4c:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=b0816217-43e3-4077-b49f-4517252467da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ea:a5:32:24:ef:fd:41:02:1d:a4:25:36:f5:
                    8d:8c:dd:11:d9:26:60:96:19:e9:c1:9e:c9:cd:7a:
                    9f:ef:d8:14:35:4c:85:bf:35:dc:50:eb:43:4d:1a:
                    4c:46:9f:17:23:a3:51:7b:8d:b6:38:35:5d:9a:6a:
                    8a:3f:f0:98:b7:63:57:58:bf:79:ba:6f:63:74:45:
                    2c:9b:23:05:8d:51:bc:8c:f3:9d:12:cc:84:98:91:
                    91:dc:b0:7d:70:b2:61:a2:8c:dc:eb:c9:0a:29:a8:
                    65:f6:93:29:6a:c9:d3:37:75:3a:66:98:d8:e5:9b:
                    81:d3:fc:45:14:4d:e3:db:0a:50:dc:2b:a7:8e:d9:
                    b0:90:d7:b2:d2:ee:2e:da:7a:52:4f:d8:2b:82:6a:
                    b9:d2:57:9e:88:e7:d5:65:d1:18:11:89:ee:79:2f:
                    2b:d5:cd:2f:2b:59:5d:92:bd:33:db:01:a7:9f:04:
                    dd:70:79:04:7b:0d:59:1e:f9:4b:29:c1:cd:4a:ec:
                    ca:d6:bd:6f:52:55:85:66:76:d6:20:5f:40:17:90:
                    7e:ab:c6:67:95:ef:bd:0c:62:ca:ab:68:22:2d:38:
                    d6:42:44:2f:0e:a9:d2:b6:19:38:13:87:5c:5e:fd:
                    82:e9:21:02:ff:b8:18:b9:d8:05:1a:8b:44:14:9e:
                    c9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:60:F2:B6:57:BD:7F:EB:EA:98:D6:64:BD:F0:76:1D:11:F5:9C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/53895827-d60e-3203-b385-41bf4259e789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ba:45:1e:1a:01:d3:a6:1c:9d:f3:54:ec:e5:fc:e6:c6:44:
         bd:56:75:d4:31:e0:b8:98:5c:c4:28:de:ac:b8:d3:d3:95:b6:
         4f:0a:33:85:68:87:27:d1:03:60:d7:43:bc:ba:92:1d:b1:6e:
         41:c2:c9:79:b5:ee:d7:d0:83:b2:dc:0e:1f:ab:63:5d:ae:9a:
         1a:96:e7:56:03:90:a4:54:29:21:62:18:60:57:ff:9f:2f:a3:
         e6:51:76:76:21:09:98:5b:cb:c7:02:8a:e0:3c:6f:08:65:fb:
         68:e0:eb:73:fe:fc:3f:b7:b6:4a:98:f4:26:b6:04:45:01:6c:
         3a:e3:8a:06:b8:cd:eb:87:2d:46:72:03:58:1f:a3:7e:48:00:
         be:fe:4b:35:4c:0a:02:ae:b5:a9:23:cd:38:75:cf:06:c2:17:
         73:4e:05:d0:36:0b:b1:05:df:5f:80:e5:f2:73:d4:ed:23:31:
         0e:37:13:94:ae:bf:d3:0a:79:de:cd:bd:c6:91:36:d6:21:dc:
         41:75:f1:b2:9f:f5:3f:9a:7f:24:e4:c5:e5:ee:ae:ed:ae:a1:
         17:5b:4a:b9:91:cc:c3:c4:6b:3d:05:1b:0b:0b:e0:59:f0:ac:
         e4:3d:fb:13:9c:18:14:eb:06:f0:73:ed:d0:31:a3:b9:c9:73:
         67:3e:23:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPWIa+hitOBMVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0
Mzg4MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
YjA4MTYyMTctNDNlMy00MDc3LWI0OWYtNDUxNzI1MjQ2N2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuqlMiTv/UECHaQlNvWNjN0R2SZglhnpwZ7J
zXqf79gUNUyFvzXcUOtDTRpMRp8XI6NRe422ODVdmmqKP/CYt2NXWL95um9jdEUs
myMFjVG8jPOdEsyEmJGR3LB9cLJhoozc68kKKahl9pMpasnTN3U6ZpjY5ZuB0/xF
FE3j2wpQ3CunjtmwkNey0u4u2npST9grgmq50leeiOfVZdEYEYnueS8r1c0vK1ld
kr0z2wGnnwTdcHkEew1ZHvlLKcHNSuzK1r1vUlWFZnbWIF9AF5B+q8Znle+9DGLK
q2giLTjWQkQvDqnSthk4E4dcXv2C6SEC/7gYudgFGotEFJ7J+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKRg8rZXvX/r6pjWZL3wdh0R9ZzdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl
YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvNTM4OTU4MjctZDYwZS0z
MjAzLWIzODUtNDFiZjQyNTllNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm
NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4
NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi
N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSrdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACi6RR4aAdOmHJ3zVOzl/ObGRL1WddQx4LiYXMQo3qy409OVtk8KM4Vo
hyfRA2DXQ7y6kh2xbkHCyXm17tfQg7LcDh+rY12umhqW51YDkKRUKSFiGGBX/58v
o+ZRdnYhCZhby8cCiuA8bwhl+2jg63P+/D+3tkqY9Ca2BEUBbDrjiga4zeuHLUZy
A1gfo35IAL7+SzVMCgKutakjzTh1zwbCF3NOBdA2C7EF31+A5fJz1O0jMQ43E5Su
v9MKed7NvcaRNtYh3EF18bKf9T+afyTkxeXuru2uoRdbSrmRzMPEaz0FGwsL4Fnw
rOQ9+xOcGBTrBvBz7dAxo7nJc2c+I0Q=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:16:50 2025 by rpki-client