Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/2c0226e4-f832-3070-b782-0f1bac970efd.roa
File:                     2c0226e4-f832-3070-b782-0f1bac970efd.roa (raw, json)
Hash identifier:          vJSZa5xJXtY6QyT1cYmlHP44Jh2x4C9PWK0Inv3oG/0=
Subject key identifier:   66:7C:00:43:89:BA:27:AF:48:20:BA:B9:14:27:CC:E6:38:FF:F1:D0
Certificate issuer:       /CN=0d1af089-3ace-488d-8f52-6b375c813ba2
Certificate serial:       010D0C9F43285849DF5A667C987843B8045095C0
Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/2c0226e4-f832-3070-b782-0f1bac970efd.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     10490
IP address blocks:        149.149.34.0/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:66:7c:98:78:43:b8:04:50:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=4582f390-910c-4610-b38a-e553e73ad1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:6a:5b:55:ff:4c:bf:9d:9f:cd:e6:23:c2:
                    21:e8:07:85:5c:94:13:8b:91:9f:60:c7:b3:33:63:
                    cc:36:42:07:e1:4d:88:29:68:a9:b9:c2:5b:41:eb:
                    68:a7:d8:39:aa:86:82:06:3d:c5:19:be:8d:5e:98:
                    de:c5:e1:f1:a1:b9:05:6f:a6:47:31:da:10:59:2b:
                    d7:a0:aa:a9:1c:47:31:9c:08:b7:25:87:06:dc:7b:
                    cd:f0:11:4b:a8:b3:6d:c2:73:f4:7d:0d:70:ba:15:
                    c7:6e:28:51:fd:42:86:07:b5:63:cf:d1:5e:9a:e6:
                    a3:64:c1:10:73:0c:0e:7d:de:96:0e:94:77:1b:85:
                    46:8a:6d:e4:9a:9a:bb:6a:8e:da:97:14:b8:49:45:
                    82:11:2e:b5:71:68:b2:4d:de:fb:ca:bc:11:04:a7:
                    f1:88:a9:bc:ac:73:f0:84:8b:2d:c6:22:25:11:74:
                    f2:9a:fd:8f:ba:76:f8:40:64:98:a5:e4:0d:f3:60:
                    8b:ad:63:6f:36:12:27:11:e0:17:ec:9e:6d:26:2d:
                    ae:0e:7a:72:0e:82:c0:8c:00:13:00:05:6d:d3:c9:
                    d3:1b:c5:ef:3f:d5:54:01:03:13:6a:62:d5:5b:77:
                    72:6a:77:07:53:43:cf:be:eb:d1:2d:34:74:71:de:
                    67:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7C:00:43:89:BA:27:AF:48:20:BA:B9:14:27:CC:E6:38:FF:F1:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/2c0226e4-f832-3070-b782-0f1bac970efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl

            X509v3 Authority Key Identifier:
                keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.149.34.0/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:0e:68:1f:b6:6c:a5:6e:fc:fc:fc:fb:98:b2:dc:36:0c:6f:
         b3:5a:3c:b7:7d:a3:f4:cc:8d:bd:2f:36:ef:e7:3d:76:3d:fd:
         a2:c3:cb:cc:44:d6:11:77:e6:b4:dd:ea:f7:06:19:b4:6a:8b:
         89:e3:b9:0b:9b:41:05:7f:e6:68:ce:3c:ae:37:f6:6c:0a:dd:
         c4:1d:bb:28:17:72:2c:de:e9:9e:45:04:e4:b0:5a:aa:51:fe:
         8f:98:1e:d3:ff:85:8d:63:d7:8f:d1:fd:6e:40:e4:fe:30:75:
         d4:fd:13:9e:25:e7:a3:56:1f:2c:3b:1a:5a:b1:53:62:c0:d8:
         11:a5:f5:82:0f:08:c2:2e:e8:e4:86:55:f9:a0:46:af:3d:7b:
         43:ae:d5:c8:95:2b:90:81:46:81:72:e5:d7:d9:21:0f:80:72:
         77:c4:13:b3:9b:6d:15:f9:4d:01:e5:3c:11:cc:b6:8b:ea:43:
         c7:e3:64:7c:16:fb:0f:fa:86:f9:57:40:52:da:2d:30:63:9f:
         5a:2c:3d:0d:e9:0d:ef:9e:cc:aa:c8:34:e7:f2:88:71:be:b7:
         69:00:d7:f9:92:17:7e:bc:db:50:2d:f6:76:28:d9:8a:ab:df:
         43:f8:6d:75:2e:bf:8a:78:ad:84:a7:32:74:2b:9d:99:e6:54:
         81:fe:12:13
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnfWmZ8mHhDuARQlcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQxYWYwODktM2FjZS00ODhkLThmNTItNmIzNzVjODEz
YmEyMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk
NDU4MmYzOTAtOTEwYy00NjEwLWIzOGEtZTU1M2U3M2FkMWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMpqW1X/TL+dn83mI8Ih6AeFXJQTi5GfYMez
M2PMNkIH4U2IKWipucJbQetop9g5qoaCBj3FGb6NXpjexeHxobkFb6ZHMdoQWSvX
oKqpHEcxnAi3JYcG3HvN8BFLqLNtwnP0fQ1wuhXHbihR/UKGB7Vjz9FemuajZMEQ
cwwOfd6WDpR3G4VGim3kmpq7ao7alxS4SUWCES61cWiyTd77yrwRBKfxiKm8rHPw
hIstxiIlEXTymv2Punb4QGSYpeQN82CLrWNvNhInEeAX7J5tJi2uDnpyDoLAjAAT
AAVt08nTG8XvP9VUAQMTamLVW3dyancHU0PPvuvRLTR0cd5nMwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGZ8AEOJuievSCC6uRQnzOY4//HQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDFh
ZjA4OS0zYWNlLTQ4OGQtOGY1Mi02YjM3NWM4MTNiYTIvMmMwMjI2ZTQtZjgzMi0z
MDcwLWI3ODItMGYxYmFjOTcwZWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQxYWYwODktM2FjZS00ODhkLThm
NTItNmIzNzVjODEzYmEyLzBkMWFmMDg5LTNhY2UtNDg4ZC04ZjUyLTZiMzc1Yzgx
M2JhMi5jcmwwHwYDVR0jBBgwFoAUppzO8te8P4zuLxY0WWSFvc4eLpQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDFhZjA4OS0zYWNlLTQ4OGQtOGY1Mi02YjM3
NWM4MTNiYTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDlZUiADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAqDmgftmylbvz8/PuYstw2DG+zWjy3faP0zI29Lzbv5z12Pf2iw8vM
RNYRd+a03er3Bhm0aouJ47kLm0EFf+ZozjyuN/ZsCt3EHbsoF3Is3umeRQTksFqq
Uf6PmB7T/4WNY9eP0f1uQOT+MHXU/ROeJeejVh8sOxpasVNiwNgRpfWCDwjCLujk
hlX5oEavPXtDrtXIlSuQgUaBcuXX2SEPgHJ3xBOzm20V+U0B5TwRzLaL6kPH42R8
FvsP+ob5V0BS2i0wY59aLD0N6Q3vnsyqyDTn8ohxvrdpANf5khd+vNtQLfZ2KNmK
q99D+G11Lr+KeK2EpzJ0K52Z5lSB/hIT
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:21:24 2025 by rpki-client