Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/8b0c5e75-7f26-329c-82a7-8581f06dd8fc.roa
File:                     8b0c5e75-7f26-329c-82a7-8581f06dd8fc.roa (raw, json)
Hash identifier:          YwNQrEO8PrUfi7qiMpvxAbSZP7Pi7in5Clg9s0Qcldw=
Subject key identifier:   02:80:01:14:A6:01:23:2D:58:EB:B2:70:E6:6C:57:42:6D:5F:9D:EC
Certificate issuer:       /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
Certificate serial:       010D0C9F432858495413D2A003C29718F5A6DE00
Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/8b0c5e75-7f26-329c-82a7-8581f06dd8fc.roa
Signing time:             Thu 27 Mar 2025 15:41:40 +0000
ROA not before:           Thu 27 Mar 2025 15:41:40 +0000
ROA not after:            Wed 25 Jun 2025 15:41:40 +0000
asID:                     14090
IP address blocks:        69.178.204.0/22 maxlen: 24
                          69.178.208.0/21 maxlen: 24
                          69.178.224.0/20 maxlen: 24
                          69.178.240.0/21 maxlen: 24
                          69.178.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:54:13:d2:a0:03:c2:97:18:f5:a6:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
        Validity
            Not Before: Mar 27 15:41:40 2025 GMT
            Not After : Jun 25 15:41:40 2025 GMT
        Subject: CN=b1279c0f-647b-477b-a242-492738bff95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:a4:fc:c3:a8:4d:b5:ac:5d:7b:42:cd:48:
                    16:1b:fd:06:3a:19:81:a8:f3:8e:c2:72:2c:5b:20:
                    41:36:c0:9e:66:91:18:d6:f7:92:39:29:ed:01:d2:
                    d9:ca:ae:b4:fa:c9:ee:c6:b0:55:15:d8:6b:ed:41:
                    d8:55:60:35:90:95:c7:e7:b1:23:7f:07:3c:1c:63:
                    52:38:bd:0a:33:de:e0:dc:63:49:02:8b:99:08:e1:
                    95:28:40:bb:14:08:72:0a:10:60:ed:41:fb:b8:5c:
                    b1:3d:98:76:71:15:5b:7f:de:cb:7a:f4:bc:06:0f:
                    e0:d2:29:7d:f0:8f:a8:c8:4f:67:1a:44:ca:46:d8:
                    ac:ab:b2:00:fa:4b:4e:b7:48:7d:da:6a:91:86:bf:
                    b8:6d:03:07:bb:e1:fb:f7:da:81:fe:0d:03:b2:03:
                    a1:2c:90:d4:f7:95:1a:50:60:27:c7:11:91:a1:d2:
                    14:35:11:b4:7f:f8:a7:83:d3:d8:f4:8e:f5:8d:78:
                    d4:f6:c5:1c:99:19:ac:68:b9:22:d3:55:5a:f2:50:
                    ad:f6:56:bd:68:6c:b3:71:d7:46:aa:42:e1:2b:94:
                    75:36:f1:02:4a:d1:b2:3c:dc:3a:ec:aa:b9:57:65:
                    57:2e:b9:3b:72:86:1c:c5:52:79:46:22:27:ad:cd:
                    45:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:80:01:14:A6:01:23:2D:58:EB:B2:70:E6:6C:57:42:6D:5F:9D:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/8b0c5e75-7f26-329c-82a7-8581f06dd8fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl

            X509v3 Authority Key Identifier:
                keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.178.204.0-69.178.215.255
                  69.178.224.0-69.178.251.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:56:09:3d:be:d7:83:e0:c7:8c:83:a2:1e:b6:f2:1e:f2:0c:
         b2:ab:a4:5a:a8:ce:c4:b0:33:5f:52:af:b6:cc:bf:df:30:a1:
         34:d4:93:a8:b2:b4:93:8d:7d:a8:97:0d:47:8c:10:b2:5d:22:
         7e:20:f3:25:9d:46:6e:96:d3:c0:ae:4f:87:0a:6a:c6:5e:96:
         18:88:d3:9f:92:8b:41:05:c0:05:0c:13:94:46:44:44:55:42:
         9e:03:9e:36:9c:b5:83:13:49:bf:6c:92:94:bc:04:05:ee:13:
         bf:49:17:e4:a6:07:04:d2:ee:b8:5b:72:4f:25:5d:f5:af:2b:
         ce:41:48:26:00:f2:70:be:84:d3:49:2a:b6:42:81:4c:03:64:
         3c:26:28:05:0a:b2:3c:07:ff:e6:40:42:09:91:c6:12:af:fd:
         a5:5b:91:30:2a:0a:4c:41:ba:64:e6:d1:a0:93:13:e6:39:d9:
         1f:dd:29:8f:66:64:6a:83:fc:fd:48:7c:39:a9:9b:1f:9e:12:
         52:9e:88:c0:c2:06:34:70:73:a5:b3:df:a1:9c:37:09:8b:e5:
         05:77:69:74:9e:24:42:e6:43:60:c4:c8:99:15:3e:e7:ee:74:
         b3:d4:5a:96:5a:aa:d8:35:10:ed:09:1a:57:d0:46:3e:cf:0a:
         66:b3:97:ea
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWElUE9KgA8KXGPWm3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk
ZTYxMB4XDTI1MDMyNzE1NDE0MFoXDTI1MDYyNTE1NDE0MFowLzEtMCsGA1UEAxMk
YjEyNzljMGYtNjQ3Yi00NzdiLWEyNDItNDkyNzM4YmZmOTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxek/MOoTbWsXXtCzUgWG/0GOhmBqPOOwnIs
WyBBNsCeZpEY1veSOSntAdLZyq60+snuxrBVFdhr7UHYVWA1kJXH57Ejfwc8HGNS
OL0KM97g3GNJAouZCOGVKEC7FAhyChBg7UH7uFyxPZh2cRVbf97LevS8Bg/g0il9
8I+oyE9nGkTKRtisq7IA+ktOt0h92mqRhr+4bQMHu+H799qB/g0DsgOhLJDU95Ua
UGAnxxGRodIUNRG0f/ing9PY9I71jXjU9sUcmRmsaLki01Va8lCt9la9aGyzcddG
qkLhK5R1NvECStGyPNw67Kq5V2VXLrk7coYcxVJ5RiInrc1FTQIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFAKAARSmASMtWOuycOZsV0JtX53sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3
ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvOGIwYzVlNzUtN2YyNi0z
MjljLTgyYTctODU4MWYwNmRkOGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1
NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl
ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5
ZGQ0ZWRlNjEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAJFsswD
BANFstAwDAMEBUWy4AMEAkWy+DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEVgk9vteD4MeMg6IetvIe8gyy
q6RaqM7EsDNfUq+2zL/fMKE01JOosrSTjX2olw1HjBCyXSJ+IPMlnUZultPArk+H
CmrGXpYYiNOfkotBBcAFDBOURkREVUKeA542nLWDE0m/bJKUvAQF7hO/SRfkpgcE
0u64W3JPJV31ryvOQUgmAPJwvoTTSSq2QoFMA2Q8JigFCrI8B//mQEIJkcYSr/2l
W5EwKgpMQbpk5tGgkxPmOdkf3SmPZmRqg/z9SHw5qZsfnhJSnojAwgY0cHOls9+h
nDcJi+UFd2l0niRC5kNgxMiZFT7n7nSz1FqWWqrYNRDtCRpX0EY+zwpms5fq
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:11 2025 by rpki-client