Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/640105e2-5210-3ad1-96b1-5e4188a93a9d.roa
File:                     640105e2-5210-3ad1-96b1-5e4188a93a9d.roa (raw, json)
Hash identifier:          rB125gWrPqshuxWVQ33efDzFM6lbuGwwqIUGb/uFkww=
Subject key identifier:   D5:F8:F0:34:5C:98:FC:56:7B:B1:5D:FC:DD:62:EE:13:DA:D4:A2:97
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858494B63FD494A7750689961E030
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/640105e2-5210-3ad1-96b1-5e4188a93a9d.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     16611
IP address blocks:        216.74.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:63:fd:49:4a:77:50:68:99:61:e0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=df7b1b27-bb2d-4161-8225-a6012b6a6921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ac:3b:e9:89:d6:09:62:51:f0:66:33:08:2c:
                    43:39:78:44:b1:94:97:d3:69:42:57:6f:77:07:1c:
                    1c:1c:d9:76:25:d8:25:15:86:92:d7:55:77:0f:a6:
                    c2:bd:4c:0c:79:88:81:df:3c:c9:5d:58:55:ff:a5:
                    a4:78:0a:f9:67:e2:33:d1:51:ef:92:a9:b4:9b:3f:
                    0a:a5:be:5a:37:5a:0c:98:c9:e5:0e:2d:27:de:47:
                    af:54:44:52:3c:7c:03:2d:63:2e:14:48:6f:5a:06:
                    10:2c:38:ef:0b:30:d3:36:b8:39:58:f0:99:55:9d:
                    c4:b5:f9:fd:97:25:43:4b:14:12:a3:0c:da:1b:28:
                    36:f3:f1:fa:cc:1a:05:77:bf:27:b1:cf:2a:3d:5f:
                    a9:be:8b:76:98:6f:16:f6:45:29:52:2d:b3:dd:4c:
                    4f:18:60:14:48:0a:29:23:80:4c:cf:0a:da:6b:61:
                    5f:fb:e1:16:78:0d:af:27:aa:91:5b:e4:7e:83:32:
                    9c:35:79:8f:62:a9:53:9f:b8:07:48:da:43:3f:7e:
                    6e:db:1c:f0:42:bd:93:8b:22:12:df:c1:69:b2:15:
                    c1:88:a6:35:22:04:3e:60:58:d0:e0:87:f6:49:e4:
                    e1:91:49:2b:3c:43:4f:df:14:4c:59:9c:2f:46:bf:
                    95:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F8:F0:34:5C:98:FC:56:7B:B1:5D:FC:DD:62:EE:13:DA:D4:A2:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/640105e2-5210-3ad1-96b1-5e4188a93a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e2:c9:68:bb:a8:dc:6a:b5:d4:f7:78:35:bf:ab:3a:27:9c:
         67:fa:23:3b:0b:fb:1c:e5:43:17:40:2f:67:bc:3a:e8:5b:ec:
         10:d9:57:be:f1:9e:54:82:8e:c1:7d:69:5e:f8:3a:5b:05:39:
         02:ac:c6:04:31:e8:6c:84:a7:94:e5:34:54:54:89:3e:11:82:
         1b:71:81:23:25:f6:a2:6b:75:08:8d:a1:c9:b8:72:7a:9b:6c:
         da:d4:9f:54:5e:fd:f6:83:9b:63:ad:07:82:5a:e2:d5:fd:7a:
         6a:40:7a:5b:6c:d3:94:38:e9:a9:44:be:d4:b5:d1:fc:6b:e5:
         20:94:ee:54:4a:97:eb:d4:3b:17:1e:87:0e:7b:0d:76:50:b5:
         db:9c:41:3a:dd:03:c7:10:d5:04:d7:38:46:bd:f6:51:37:f6:
         a3:77:cf:7a:51:5f:46:ef:44:f2:83:39:8c:30:a9:6f:26:f9:
         da:8f:0d:34:8c:e7:8d:71:79:5d:87:b8:9d:10:d8:b7:39:20:
         5a:60:26:38:21:7a:08:7a:e8:20:81:be:5b:9e:fb:77:ec:95:
         ff:82:b3:03:87:65:69:02:3b:98:b2:a4:7d:e6:dd:6c:57:9f:
         75:76:c1:82:17:25:d2:c3:63:d3:ad:23:5f:46:f3:ef:9e:72:
         28:a8:da:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLY/1JSndQaJlh4DAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
ZGY3YjFiMjctYmIyZC00MTYxLTgyMjUtYTYwMTJiNmE2OTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaw76YnWCWJR8GYzCCxDOXhEsZSX02lCV293
BxwcHNl2JdglFYaS11V3D6bCvUwMeYiB3zzJXVhV/6WkeAr5Z+Iz0VHvkqm0mz8K
pb5aN1oMmMnlDi0n3kevVERSPHwDLWMuFEhvWgYQLDjvCzDTNrg5WPCZVZ3Etfn9
lyVDSxQSowzaGyg28/H6zBoFd78nsc8qPV+pvot2mG8W9kUpUi2z3UxPGGAUSAop
I4BMzwraa2Ff++EWeA2vJ6qRW+R+gzKcNXmPYqlTn7gHSNpDP35u2xzwQr2TiyIS
38FpshXBiKY1IgQ+YFjQ4If2SeThkUkrPENP3xRMWZwvRr+VrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNX48DRcmPxWe7Fd/N1i7hPa1KKXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNjQwMTA1ZTItNTIxMC0z
YWQxLTk2YjEtNWU0MTg4YTkzYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EpsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjiyWi7qNxqtdT3eDW/qzonnGf6IzsL+xzlQxdAL2e8Ouhb7BDZV77x
nlSCjsF9aV74OlsFOQKsxgQx6GyEp5TlNFRUiT4RghtxgSMl9qJrdQiNocm4cnqb
bNrUn1Re/faDm2OtB4Ja4tX9empAelts05Q46alEvtS10fxr5SCU7lRKl+vUOxce
hw57DXZQtducQTrdA8cQ1QTXOEa99lE39qN3z3pRX0bvRPKDOYwwqW8m+dqPDTSM
541xeV2HuJ0Q2Lc5IFpgJjghegh66CCBvlue+3fslf+CswOHZWkCO5iypH3m3WxX
n3V2wYIXJdLDY9OtI19G8++eciio2rc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:13 2025 by rpki-client