Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/a662b604-8a40-31fd-848a-cd7f0cad04af.roa
File:                     a662b604-8a40-31fd-848a-cd7f0cad04af.roa (raw, json)
Hash identifier:          240tt4TSSZl42e9wCUzhCpkiU6v6AQ/1qpTLHAlVV6U=
Subject key identifier:   13:D5:78:22:0F:BE:00:CE:2E:C6:74:14:05:FB:F0:0D:75:74:E2:55
Certificate issuer:       /CN=5248b6be-3e69-4e67-8c1c-9f85fde15922
Certificate serial:       010D0C9F43285849D594D8022955771B992BB300
Authority key identifier: 5B:92:2A:D2:78:10:1C:9D:3D:E7:DF:B2:09:20:35:F6:D0:75:24:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/a662b604-8a40-31fd-848a-cd7f0cad04af.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     396982
IP address blocks:        204.62.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d8:02:29:55:77:1b:99:2b:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5248b6be-3e69-4e67-8c1c-9f85fde15922
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=d24ff812-bb77-4323-9a62-73d4f7e7c9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:da:a5:41:29:bb:65:2e:df:9f:43:2e:3b:
                    52:6d:b5:19:9a:75:0a:a2:b4:be:68:a6:2f:a1:e5:
                    ff:61:f8:96:d4:ee:7e:51:57:12:1a:ca:3c:8a:ba:
                    46:5b:68:cb:9e:f2:68:0e:a4:6b:2c:4a:15:01:41:
                    0f:cb:25:81:39:ef:bb:91:f8:fc:9c:35:e7:92:cc:
                    79:46:16:88:65:bd:1e:05:06:d3:8c:d5:bf:a6:86:
                    17:34:16:76:a2:03:c9:8f:a8:ed:dd:86:76:56:5b:
                    30:d7:8c:4b:9a:27:92:45:a0:c0:fd:f9:6a:08:55:
                    68:61:56:bd:70:0c:58:41:a1:6c:54:ab:4c:14:45:
                    46:fb:4a:8d:21:14:ba:49:3b:14:47:4b:9d:bc:0e:
                    02:b8:e5:3f:56:83:db:ab:9c:2a:5f:f3:7f:ac:6c:
                    70:8e:1a:e4:ad:ef:2b:48:0e:78:20:a9:e7:a5:0c:
                    41:51:a9:11:eb:fc:30:ff:8b:0f:81:9f:ba:f8:9a:
                    d5:fb:f5:af:d7:17:db:0c:c9:39:e5:bb:93:bd:9d:
                    7b:f3:49:ea:cf:d7:5e:73:b4:fc:0f:11:b4:60:cd:
                    14:84:ad:8b:e9:fd:41:0f:2f:9d:96:d9:ff:28:52:
                    ad:53:40:0b:bd:d5:d3:45:c5:eb:94:87:ce:8f:c3:
                    5f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D5:78:22:0F:BE:00:CE:2E:C6:74:14:05:FB:F0:0D:75:74:E2:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/a662b604-8a40-31fd-848a-cd7f0cad04af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.crl

            X509v3 Authority Key Identifier:
                keyid:5B:92:2A:D2:78:10:1C:9D:3D:E7:DF:B2:09:20:35:F6:D0:75:24:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.62.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:0a:7f:13:ae:9a:bd:b1:0f:e0:29:09:ad:ab:a8:ea:50:d5:
         1e:e4:a0:12:20:2f:db:c6:d5:19:4d:38:d3:43:0c:5f:46:9e:
         50:db:36:39:1f:03:99:5e:91:bf:0e:ad:74:7e:80:90:1b:d0:
         0e:42:ba:5e:2e:21:02:a6:09:01:f0:5d:86:6c:33:d4:98:18:
         11:4f:92:09:ff:14:ee:4d:bc:11:f2:1a:26:96:87:09:43:65:
         08:55:cb:7f:30:89:49:52:27:99:56:64:14:06:bb:c0:00:bb:
         a0:f1:95:60:58:8b:4d:52:b3:f7:3d:8b:72:5d:ea:01:db:f3:
         30:b0:5f:02:c7:b8:39:24:4f:94:8e:41:b6:e4:0c:55:77:80:
         83:aa:d5:5f:cd:a3:0d:58:32:41:19:7a:22:0b:e2:51:58:41:
         b8:ce:b7:e7:e0:d0:a9:55:1a:55:7d:e8:72:05:6d:a3:91:04:
         27:d8:56:fc:04:c3:ef:1d:c0:4c:23:7f:3f:30:08:dc:30:0e:
         dc:89:fa:f9:8a:92:00:75:22:a6:06:9e:20:f8:7b:4b:53:ff:
         49:ca:a3:48:75:d0:11:57:d4:5e:b4:7d:a6:66:91:43:f8:e5:
         d2:79:5d:28:04:43:01:67:11:18:e2:51:1b:71:7a:68:c9:69:
         b4:ba:c2:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlNgCKVV3G5krswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTI0OGI2YmUtM2U2OS00ZTY3LThjMWMtOWY4NWZkZTE1
OTIyMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
ZDI0ZmY4MTItYmI3Ny00MzIzLTlhNjItNzNkNGY3ZTdjOWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYTapUEpu2Uu359DLjtSbbUZmnUKorS+aKYv
oeX/YfiW1O5+UVcSGso8irpGW2jLnvJoDqRrLEoVAUEPyyWBOe+7kfj8nDXnksx5
RhaIZb0eBQbTjNW/poYXNBZ2ogPJj6jt3YZ2Vlsw14xLmieSRaDA/flqCFVoYVa9
cAxYQaFsVKtMFEVG+0qNIRS6STsUR0udvA4CuOU/VoPbq5wqX/N/rGxwjhrkre8r
SA54IKnnpQxBUakR6/ww/4sPgZ+6+JrV+/Wv1xfbDMk55buTvZ1780nqz9dec7T8
DxG0YM0UhK2L6f1BDy+dltn/KFKtU0ALvdXTRcXrlIfOj8NfwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPVeCIPvgDOLsZ0FAX78A11dOJVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81MjQ4
YjZiZS0zZTY5LTRlNjctOGMxYy05Zjg1ZmRlMTU5MjIvYTY2MmI2MDQtOGE0MC0z
MWZkLTg0OGEtY2Q3ZjBjYWQwNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTI0OGI2YmUtM2U2OS00ZTY3LThj
MWMtOWY4NWZkZTE1OTIyLzUyNDhiNmJlLTNlNjktNGU2Ny04YzFjLTlmODVmZGUx
NTkyMi5jcmwwHwYDVR0jBBgwFoAUW5Iq0ngQHJ0959+yCSA19tB1JNYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81MjQ4YjZiZS0zZTY5LTRlNjctOGMxYy05Zjg1
ZmRlMTU5MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzD7XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMKfxOumr2xD+ApCa2rqOpQ1R7koBIgL9vG1RlNONNDDF9GnlDbNjkf
A5lekb8OrXR+gJAb0A5Cul4uIQKmCQHwXYZsM9SYGBFPkgn/FO5NvBHyGiaWhwlD
ZQhVy38wiUlSJ5lWZBQGu8AAu6DxlWBYi01Ss/c9i3Jd6gHb8zCwXwLHuDkkT5SO
QbbkDFV3gIOq1V/Now1YMkEZeiIL4lFYQbjOt+fg0KlVGlV96HIFbaORBCfYVvwE
w+8dwEwjfz8wCNwwDtyJ+vmKkgB1IqYGniD4e0tT/0nKo0h10BFX1F60faZmkUP4
5dJ5XSgEQwFnERjiURtxemjJabS6wmQ=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:14:16 2025 by rpki-client