Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4e3b5602-5df9-3268-aba3-a2e029c79f5a.roa
File:                     4e3b5602-5df9-3268-aba3-a2e029c79f5a.roa (raw, json)
Hash identifier:          sHeCmj/+dHvIrcHonuI+7ny5sCGCsScFMy9D0bRXd8E=
Subject key identifier:   ED:13:73:0C:D6:7E:4A:B3:35:0D:44:E6:15:1C:48:72:7A:7B:7C:0E
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727CDF46C22609A0843F180
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4e3b5602-5df9-3268-aba3-a2e029c79f5a.roa
Signing time:             Fri 30 May 2025 19:11:37 +0000
ROA not before:           Fri 30 May 2025 19:11:37 +0000
ROA not after:            Thu 28 Aug 2025 19:11:37 +0000
asID:                     81
IP address blocks:        128.109.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:cd:f4:6c:22:60:9a:08:43:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:37 2025 GMT
            Not After : Aug 28 19:11:37 2025 GMT
        Subject: CN=1c1ec625-d149-45d6-8d2c-a8b91ac3ab71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:07:ad:6a:e1:51:00:f4:f1:69:de:a5:30:28:
                    ab:4f:fc:a3:1d:79:39:95:22:fc:d0:bc:57:f6:0b:
                    6c:83:c8:c2:5e:a7:eb:a4:6a:05:c8:59:34:0c:f2:
                    d0:91:b7:c0:bd:04:a6:5b:41:41:c5:ad:12:05:e6:
                    54:ab:80:6f:31:83:70:6e:98:71:6c:ef:6d:59:31:
                    96:b2:e3:87:a1:e5:5a:e2:13:e1:a8:3f:96:d0:91:
                    ef:9f:8b:c2:95:7c:97:a6:4c:4b:c7:5b:80:0f:17:
                    56:e2:a8:57:20:3f:7c:a3:30:41:d6:e6:a2:dc:6c:
                    e4:5a:2e:98:fd:77:54:18:85:da:22:32:85:bc:9f:
                    bb:fa:49:24:90:73:17:93:d0:77:10:f7:41:d9:9a:
                    6c:60:6e:62:f3:22:67:80:7a:2f:a3:16:a1:10:ff:
                    74:19:33:92:65:66:99:25:a4:55:8c:4a:59:d9:c0:
                    09:75:f1:e3:cb:4f:6e:6d:4c:c8:6c:f6:08:50:2c:
                    d3:ee:18:ab:c4:dc:cc:67:6f:79:96:5c:dd:12:d5:
                    85:b8:c4:33:63:26:53:ea:8c:9b:98:1e:a6:34:9b:
                    ea:b4:22:98:15:ed:1c:a2:4e:d3:17:3e:2d:5a:90:
                    fe:16:1b:52:ce:41:3a:ef:1f:26:4a:29:52:a4:6f:
                    15:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:13:73:0C:D6:7E:4A:B3:35:0D:44:E6:15:1C:48:72:7A:7B:7C:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4e3b5602-5df9-3268-aba3-a2e029c79f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.109.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:92:d5:89:df:76:12:8d:34:0c:c0:a1:c9:9f:1f:fe:6a:55:
         ed:5d:70:db:ed:c3:cf:15:a1:30:83:9e:cd:78:76:bd:ce:20:
         ee:1d:82:6c:28:48:4a:b2:a9:2e:46:8c:55:e2:92:c4:7c:95:
         c2:91:ae:94:31:12:05:a1:e6:6b:35:ea:37:5a:9a:ef:1c:f3:
         36:e8:d1:c2:a5:3b:88:4c:39:e1:31:56:8f:95:99:8b:e2:d8:
         ad:3e:06:97:a7:6e:ba:f6:03:4b:64:f7:d6:fe:84:31:d0:6a:
         5a:4e:13:b6:28:70:0f:da:83:4b:80:75:96:5e:ea:55:33:54:
         84:4b:ac:a1:be:70:3f:f6:e3:d6:0d:40:09:77:64:f0:2f:59:
         f7:61:71:8b:71:5c:43:b6:6c:d0:f9:f6:a4:20:ee:cb:9a:dc:
         67:e7:a7:41:31:8a:a0:aa:a9:e3:b7:ee:b1:7a:c3:63:65:7e:
         26:76:ef:2f:78:00:07:69:3e:cc:85:46:fc:74:88:36:fd:6b:
         e8:6c:d2:2b:71:2b:fa:a3:76:46:ba:0d:21:20:bb:58:70:f3:
         07:f7:e1:73:7a:6c:47:79:bc:b0:4a:28:11:45:5f:f3:fe:91:
         0f:28:99:0e:c3:e6:02:f2:2a:2a:1b:77:2d:ad:c4:9c:96:2c:
         10:1e:8a:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ830bCJgmghD8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDUzMDE5MTEzN1oXDTI1MDgyODE5MTEzN1owLzEtMCsGA1UEAxMk
MWMxZWM2MjUtZDE0OS00NWQ2LThkMmMtYThiOTFhYzNhYjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAetauFRAPTxad6lMCirT/yjHXk5lSL80LxX
9gtsg8jCXqfrpGoFyFk0DPLQkbfAvQSmW0FBxa0SBeZUq4BvMYNwbphxbO9tWTGW
suOHoeVa4hPhqD+W0JHvn4vClXyXpkxLx1uADxdW4qhXID98ozBB1uai3GzkWi6Y
/XdUGIXaIjKFvJ+7+kkkkHMXk9B3EPdB2ZpsYG5i8yJngHovoxahEP90GTOSZWaZ
JaRVjEpZ2cAJdfHjy09ubUzIbPYIUCzT7hirxNzMZ295llzdEtWFuMQzYyZT6oyb
mB6mNJvqtCKYFe0cok7TFz4tWpD+FhtSzkE67x8mSilSpG8VSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO0TcwzWfkqzNQ1E5hUcSHJ6e3wOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNGUzYjU2MDItNWRmOS0z
MjY4LWFiYTMtYTJlMDI5Yzc5ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGaS1YnfdhKNNAzAocmfH/5qVe1dcNvtw88VoTCDns14dr3OIO4dgmwo
SEqyqS5GjFXiksR8lcKRrpQxEgWh5ms16jdamu8c8zbo0cKlO4hMOeExVo+VmYvi
2K0+Bpenbrr2A0tk99b+hDHQalpOE7YocA/ag0uAdZZe6lUzVIRLrKG+cD/249YN
QAl3ZPAvWfdhcYtxXEO2bND59qQg7sua3Gfnp0ExiqCqqeO37rF6w2NlfiZ27y94
AAdpPsyFRvx0iDb9a+hs0itxK/qjdka6DSEgu1hw8wf34XN6bEd5vLBKKBFFX/P+
kQ8omQ7D5gLyKiobdy2txJyWLBAeips=
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:05:16 2025 by rpki-client