Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/e9236cb7-670f-37f4-bee8-2e214778d8ee.roa
File:                     e9236cb7-670f-37f4-bee8-2e214778d8ee.roa (raw, json)
Hash identifier:          gqkjxw9bcqaVMXEIdMH9XhWZZfChRrLH3oTQ4bO2PZg=
Subject key identifier:   E8:4A:78:F6:C2:C2:90:79:06:48:A9:B7:C7:ED:7D:7E:69:C5:8D:E6
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F43285848FD56CCC9A5CD670DCC6BE8E0
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/e9236cb7-670f-37f4-bee8-2e214778d8ee.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     22504
IP address blocks:        76.164.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:cc:c9:a5:cd:67:0d:cc:6b:e8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=e2825af0-3533-4dea-a8f4-c160edab62db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:db:16:12:7a:65:b5:a2:8d:15:3b:3e:20:57:
                    a9:3e:00:8b:03:dc:d1:30:cb:6b:50:02:b0:5d:9d:
                    24:db:36:1c:1f:2a:d7:d8:39:0b:e8:a3:00:2a:91:
                    2e:d5:75:28:42:a7:20:38:fd:7f:72:aa:f8:95:67:
                    e5:8e:8c:55:f5:12:a3:5f:38:cb:8f:a2:99:39:86:
                    be:e3:12:11:49:fc:a9:9e:19:e9:e8:63:43:79:1f:
                    26:35:6e:f0:ef:ec:91:08:9f:17:9e:72:5c:b5:28:
                    44:9d:0d:5f:25:68:94:9b:9c:f2:d2:ef:79:e4:a3:
                    48:6f:2d:dd:ca:82:21:9b:2e:0c:3f:e6:cb:83:44:
                    38:62:4a:e4:b7:28:c8:48:9d:a4:df:35:d9:85:db:
                    95:99:14:1a:f2:06:47:bf:af:15:ed:73:ec:6b:97:
                    14:03:5d:39:5b:ea:aa:2b:04:c5:01:49:74:52:1a:
                    e3:b1:ec:29:bd:cf:1e:9a:bc:af:62:95:32:9e:e7:
                    77:3b:af:ce:e8:82:ec:79:4b:d4:dd:74:c1:8c:d2:
                    60:b7:8a:c4:e1:04:08:af:5c:ec:6d:50:cf:5a:eb:
                    db:ee:17:38:90:07:6b:d0:b5:83:78:ea:7a:d8:ee:
                    c1:14:97:77:c8:9c:ea:92:ff:74:18:81:21:d7:5d:
                    98:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4A:78:F6:C2:C2:90:79:06:48:A9:B7:C7:ED:7D:7E:69:C5:8D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/e9236cb7-670f-37f4-bee8-2e214778d8ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:9f:9f:6f:dc:08:dc:ea:80:03:b7:4c:d1:67:97:a1:b2:af:
         36:0b:02:0b:79:e6:8d:67:00:48:5c:c1:39:ee:cc:58:43:43:
         c0:50:1a:8d:a9:6f:45:18:86:29:35:7e:6a:87:1a:76:3e:c7:
         18:f4:e2:c8:7a:6a:19:58:e5:4e:75:6a:16:3d:ee:e2:ea:eb:
         93:95:44:5c:f5:87:bf:f5:55:bc:cf:fd:3d:97:cd:42:66:f7:
         e4:22:36:0a:a4:b0:f3:15:1c:53:48:c5:48:fd:e9:46:7c:dd:
         5f:d8:18:b1:9f:ac:d0:53:74:78:f2:2d:bd:01:1b:73:f2:b3:
         cf:ed:b4:17:12:dc:80:64:25:e3:40:3c:c6:d1:32:1b:8d:05:
         af:0c:63:66:a9:00:4e:b2:f1:27:73:d5:e2:b4:04:ca:d1:c4:
         91:a4:a7:c4:94:3e:30:f3:5a:68:e5:e3:ed:7e:34:f2:ec:1b:
         89:64:92:c0:2e:2c:b2:a0:09:fb:6e:ef:b2:56:e9:99:94:ae:
         95:3a:37:37:7e:e1:43:96:0c:d0:4e:8a:b2:f6:31:b2:61:e8:
         7c:99:4f:ec:e1:6e:1f:20:de:f7:64:e4:4c:32:86:f8:b4:a8:
         96:53:3b:a0:67:ee:96:4b:3a:f5:06:61:d2:52:63:26:20:db:
         a1:c9:ec:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VszJpc1nDcxr6OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTI4MjVhZjAtMzUzMy00ZGVhLWE4ZjQtYzE2MGVkYWI2MmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNsWEnpltaKNFTs+IFepPgCLA9zRMMtrUAKw
XZ0k2zYcHyrX2DkL6KMAKpEu1XUoQqcgOP1/cqr4lWfljoxV9RKjXzjLj6KZOYa+
4xIRSfypnhnp6GNDeR8mNW7w7+yRCJ8XnnJctShEnQ1fJWiUm5zy0u955KNIby3d
yoIhmy4MP+bLg0Q4YkrktyjISJ2k3zXZhduVmRQa8gZHv68V7XPsa5cUA105W+qq
KwTFAUl0Uhrjsewpvc8emryvYpUynud3O6/O6ILseUvU3XTBjNJgt4rE4QQIr1zs
bVDPWuvb7hc4kAdr0LWDeOp62O7BFJd3yJzqkv90GIEh112YYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOhKePbCwpB5Bkipt8ftfX5pxY3mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvZTkyMzZjYjctNjcwZi0z
N2Y0LWJlZTgtMmUyMTQ3NzhkOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTKS0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADmfn2/cCNzqgAO3TNFnl6GyrzYLAgt55o1nAEhcwTnuzFhDQ8BQGo2p
b0UYhik1fmqHGnY+xxj04sh6ahlY5U51ahY97uLq65OVRFz1h7/1VbzP/T2XzUJm
9+QiNgqksPMVHFNIxUj96UZ83V/YGLGfrNBTdHjyLb0BG3Pys8/ttBcS3IBkJeNA
PMbRMhuNBa8MY2apAE6y8Sdz1eK0BMrRxJGkp8SUPjDzWmjl4+1+NPLsG4lkksAu
LLKgCftu77JW6ZmUrpU6Nzd+4UOWDNBOirL2MbJh6HyZT+zhbh8g3vdk5Ewyhvi0
qJZTO6Bn7pZLOvUGYdJSYyYg26HJ7Mc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:50 2025 by rpki-client