Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/5fbc700e-9fc9-314d-b424-083af6f592c8.roa
File:                     5fbc700e-9fc9-314d-b424-083af6f592c8.roa (raw, json)
Hash identifier:          IAmT3ZSiC+GNZf+xYcQbmd/sXT/ZRcS/8nzoqI6P5RA=
Subject key identifier:   91:B7:88:5F:01:EF:05:1D:7B:5C:3B:62:2D:C1:83:27:15:17:5B:D6
Certificate issuer:       /CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
Certificate serial:       010D0C9F432858492CB213D37562BD04BA1B5E80
Authority key identifier: 5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/5fbc700e-9fc9-314d-b424-083af6f592c8.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     25637
IP address blocks:        69.165.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:13:d3:75:62:bd:04:ba:1b:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=d2dc6903-db3f-482d-ba10-d5f6c0427804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:47:17:13:b9:80:29:fa:c7:06:78:ca:ae:
                    ae:b8:3e:dd:d0:d5:fa:17:43:87:06:3a:06:e7:09:
                    40:38:f6:cd:d8:07:67:a6:dc:2c:98:34:6b:06:94:
                    17:53:89:29:c4:76:63:a7:fe:49:69:aa:0d:5f:31:
                    65:c4:87:a2:eb:51:fe:35:a2:0d:48:6e:6b:f3:45:
                    23:7c:1b:d0:93:c1:40:a8:40:69:a7:41:81:54:36:
                    47:7d:32:d9:55:14:31:02:85:82:84:e1:84:b2:00:
                    01:d0:9c:87:7d:00:15:e4:e8:ca:61:b3:09:1a:32:
                    72:d7:3e:9b:1f:23:3f:16:49:af:0b:dd:b0:a4:d2:
                    26:d6:89:a9:8d:80:77:d6:46:da:79:4e:85:35:17:
                    51:64:86:4b:2d:88:e6:63:37:65:ae:22:15:60:93:
                    27:6b:04:2e:d2:40:78:a3:89:03:07:15:a0:5a:45:
                    2c:9e:77:a3:cc:ab:66:9b:ea:a9:dc:ce:9b:f0:f9:
                    3d:81:be:6c:44:53:72:02:95:a3:eb:e2:22:df:7f:
                    6f:5a:a1:32:bc:98:ac:fb:59:c0:e5:c7:0f:cf:5b:
                    3e:f0:6f:2b:9b:ff:c3:14:4e:ca:04:01:e1:ba:cb:
                    3e:7c:86:87:f9:4b:36:53:03:9f:d1:b6:a4:d9:81:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B7:88:5F:01:EF:05:1D:7B:5C:3B:62:2D:C1:83:27:15:17:5B:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/5fbc700e-9fc9-314d-b424-083af6f592c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl

            X509v3 Authority Key Identifier:
                keyid:5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:6e:0d:bd:61:0d:66:d5:ba:80:1f:a1:28:5c:69:37:15:17:
         77:e3:99:aa:10:1a:68:da:d0:71:b2:3b:b9:78:88:0d:4a:9d:
         bc:d3:84:a3:ed:b5:1f:aa:9e:d7:a1:bc:a4:fd:11:5d:f7:6a:
         c7:c0:c1:bb:8d:a3:96:75:06:b3:91:7c:b8:be:fa:42:5a:0b:
         47:e7:7f:c0:74:05:1d:7c:cc:33:f6:fc:49:78:ef:8e:9e:75:
         4a:5f:96:b4:67:49:0c:db:aa:66:a6:cb:2c:a8:72:fa:ae:00:
         87:50:15:9a:a5:1a:17:ba:c7:5f:46:9c:19:3e:3c:6f:41:e9:
         ef:39:93:07:5d:cb:20:d2:0a:40:6f:37:75:10:7d:48:c6:1a:
         c2:83:14:18:19:af:f8:1f:4e:e1:99:5e:ef:42:a8:0e:17:aa:
         07:08:17:f2:3d:ba:08:60:f1:dc:90:10:7c:59:2f:e6:98:9d:
         d5:2f:be:96:92:33:7d:52:74:f2:eb:fa:05:67:b6:3b:0c:4a:
         a9:40:03:6d:02:a3:b3:65:63:f6:7d:25:89:a7:d5:62:0f:23:
         66:5a:9d:43:b7:4e:22:a5:cc:51:29:79:65:48:cc:21:2e:13:
         83:03:aa:0a:82:08:77:77:69:27:b0:39:4f:6c:2b:90:9a:d8:
         e1:59:ed:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksshPTdWK9BLobXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFmNDliNmYtYTE3MC00ODVlLThjMDctZDUxOGI5MDZj
NmFlMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDJkYzY5MDMtZGIzZi00ODJkLWJhMTAtZDVmNmMwNDI3ODA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9lHFxO5gCn6xwZ4yq6uuD7d0NX6F0OHBjoG
5wlAOPbN2AdnptwsmDRrBpQXU4kpxHZjp/5JaaoNXzFlxIei61H+NaINSG5r80Uj
fBvQk8FAqEBpp0GBVDZHfTLZVRQxAoWChOGEsgAB0JyHfQAV5OjKYbMJGjJy1z6b
HyM/FkmvC92wpNIm1ompjYB31kbaeU6FNRdRZIZLLYjmYzdlriIVYJMnawQu0kB4
o4kDBxWgWkUsnnejzKtmm+qp3M6b8Pk9gb5sRFNyApWj6+Ii339vWqEyvJis+1nA
5ccPz1s+8G8rm//DFE7KBAHhuss+fIaH+Us2UwOf0bak2YHjmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJG3iF8B7wUde1w7Yi3BgycVF1vWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMWY0
OWI2Zi1hMTcwLTQ4NWUtOGMwNy1kNTE4YjkwNmM2YWUvNWZiYzcwMGUtOWZjOS0z
MTRkLWI0MjQtMDgzYWY2ZjU5MmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTFmNDliNmYtYTE3MC00ODVlLThj
MDctZDUxOGI5MDZjNmFlL2ExZjQ5YjZmLWExNzAtNDg1ZS04YzA3LWQ1MThiOTA2
YzZhZS5jcmwwHwYDVR0jBBgwFoAUX9bbEgNtVA77X1VfwUr8INlUplQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMWY0OWI2Zi1hMTcwLTQ4NWUtOGMwNy1kNTE4
YjkwNmM2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERaUQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRuDb1hDWbVuoAfoShcaTcVF3fjmaoQGmja0HGyO7l4iA1KnbzThKPt
tR+qntehvKT9EV33asfAwbuNo5Z1BrORfLi++kJaC0fnf8B0BR18zDP2/El4746e
dUpflrRnSQzbqmamyyyocvquAIdQFZqlGhe6x19GnBk+PG9B6e85kwddyyDSCkBv
N3UQfUjGGsKDFBgZr/gfTuGZXu9CqA4XqgcIF/I9ughg8dyQEHxZL+aYndUvvpaS
M31SdPLr+gVntjsMSqlAA20Co7NlY/Z9JYmn1WIPI2ZanUO3TiKlzFEpeWVIzCEu
E4MDqgqCCHd3aSewOU9sK5Ca2OFZ7Wo=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:10:43 2025 by rpki-client