Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9e0f00c6-9745-31ed-a106-1d44700ee434.roa
File:                     9e0f00c6-9745-31ed-a106-1d44700ee434.roa (raw, json)
Hash identifier:          nw/aIrinX8md2nMUp0li2bz67+jMq9iceLM6+hy8GQQ=
Subject key identifier:   A3:7D:3A:5A:1B:43:2B:E2:80:07:2C:D5:43:D2:25:FD:0B:02:23:20
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C438D18673EDB47EFFA300
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9e0f00c6-9745-31ed-a106-1d44700ee434.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        157.52.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:38:d1:86:73:ed:b4:7e:ff:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=17b439df-6562-450c-8572-67cf0a6e978d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:b2:52:72:81:9a:5a:13:d2:77:4c:90:28:
                    61:e3:1d:2f:ce:72:71:4d:34:44:91:a3:71:64:6d:
                    6c:05:ee:f3:55:51:ae:2e:5b:65:c9:dd:88:5d:c6:
                    1f:90:56:6e:3a:d6:64:9c:1a:9e:f8:5e:3f:ab:30:
                    26:9c:04:69:1e:07:50:2c:1e:12:d4:36:1d:49:4b:
                    d9:23:75:12:83:99:3a:e5:7a:65:88:69:ca:84:16:
                    58:35:fb:5d:0e:17:ea:d7:0d:8d:52:75:52:1c:ad:
                    71:e6:9d:dd:a7:4a:db:3e:59:ad:f2:d0:27:1c:d8:
                    4a:96:1e:a4:fb:16:31:07:09:db:ae:59:25:d2:5f:
                    80:5f:07:d2:05:9f:13:46:36:02:6a:0b:70:a8:2c:
                    b5:53:44:cd:dc:10:b2:18:0c:54:8e:10:57:a5:c9:
                    43:48:e9:18:22:c9:d3:5c:0b:7d:25:14:eb:78:e2:
                    37:3c:ed:fa:83:b4:be:58:08:8d:01:3e:6c:13:01:
                    3d:e3:15:21:eb:95:da:34:8b:ac:2b:42:fb:84:8f:
                    20:05:01:b6:d3:02:0d:e7:b6:35:61:36:23:42:4a:
                    2e:e6:c4:53:28:59:61:9b:e5:81:66:21:dd:cd:a0:
                    09:75:2a:1e:aa:37:4b:61:1f:f7:b5:91:7e:06:5d:
                    d0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7D:3A:5A:1B:43:2B:E2:80:07:2C:D5:43:D2:25:FD:0B:02:23:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9e0f00c6-9745-31ed-a106-1d44700ee434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:5c:ea:fe:df:77:27:21:d7:08:2e:8f:00:bd:2c:4a:94:32:
         aa:18:e6:a5:6d:fe:f4:7e:9b:68:10:d0:79:a7:9c:4e:c2:05:
         78:d6:41:24:f1:04:90:f2:ac:a3:83:82:d9:2a:3a:c2:2f:2f:
         43:58:6d:b0:53:b4:13:5f:cf:81:52:e2:f1:cf:38:2d:46:7d:
         78:00:c5:33:8b:5c:f7:27:02:2a:ee:11:3b:2b:55:94:ca:f4:
         df:ea:53:f6:9c:7a:4d:ad:c7:44:01:0f:32:e8:fc:e5:bc:59:
         ec:22:a2:46:25:59:64:a0:a8:11:b0:54:37:24:5b:df:d5:8c:
         b2:e4:0d:67:91:d3:d4:44:e1:e1:a8:b6:ea:62:6a:a4:09:63:
         22:b4:06:c1:0e:4e:f7:30:99:bb:b4:bd:68:af:bc:49:da:33:
         b5:a9:e9:46:58:30:58:2c:d6:d6:2c:3a:6b:95:d7:02:4d:9a:
         2b:eb:5d:01:97:8c:47:5e:61:06:7e:98:e3:a9:d1:b4:1c:7c:
         0a:b5:1a:ff:87:25:90:86:7d:04:6f:43:73:ba:80:2d:ef:a9:
         b9:d5:6d:07:ee:b7:03:5f:4e:b3:73:47:b6:28:76:37:0e:08:
         2b:9a:69:dd:bb:64:d5:55:8f:a7:2f:78:72:92:b1:25:d3:28:
         fb:fc:5f:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxDjRhnPttH7/owAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTdiNDM5ZGYtNjU2Mi00NTBjLTg1NzItNjdjZjBhNmU5NzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppayUnKBmloT0ndMkChh4x0vznJxTTREkaNx
ZG1sBe7zVVGuLltlyd2IXcYfkFZuOtZknBqe+F4/qzAmnARpHgdQLB4S1DYdSUvZ
I3USg5k65XpliGnKhBZYNftdDhfq1w2NUnVSHK1x5p3dp0rbPlmt8tAnHNhKlh6k
+xYxBwnbrlkl0l+AXwfSBZ8TRjYCagtwqCy1U0TN3BCyGAxUjhBXpclDSOkYIsnT
XAt9JRTreOI3PO36g7S+WAiNAT5sEwE94xUh65XaNIusK0L7hI8gBQG20wIN57Y1
YTYjQkou5sRTKFlhm+WBZiHdzaAJdSoeqjdLYR/3tZF+Bl3QdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKN9OlobQyvigAcs1UPSJf0LAiMgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvOWUwZjAwYzYtOTc0NS0z
MWVkLWExMDYtMWQ0NDcwMGVlNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnTRlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNc6v7fdych1wgujwC9LEqUMqoY5qVt/vR+m2gQ0HmnnE7CBXjWQSTx
BJDyrKODgtkqOsIvL0NYbbBTtBNfz4FS4vHPOC1GfXgAxTOLXPcnAiruETsrVZTK
9N/qU/acek2tx0QBDzLo/OW8WewiokYlWWSgqBGwVDckW9/VjLLkDWeR09RE4eGo
tupiaqQJYyK0BsEOTvcwmbu0vWivvEnaM7Wp6UZYMFgs1tYsOmuV1wJNmivrXQGX
jEdeYQZ+mOOp0bQcfAq1Gv+HJZCGfQRvQ3O6gC3vqbnVbQfutwNfTrNzR7YodjcO
CCuaad27ZNVVj6cveHKSsSXTKPv8X5o=
-----END CERTIFICATE-----
Generated at Thu Apr 3 03:00:31 2025 by rpki-client