Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ed64181b-93d0-396f-9353-bf215b87d1cc.roa
File:                     ed64181b-93d0-396f-9353-bf215b87d1cc.roa (raw, json)
Hash identifier:          nrR1BHKf4vVHrJHqIj53c8+0GUYwD9lL2UfRKfow/HI=
Subject key identifier:   34:46:32:D1:6F:BF:EF:A9:0D:DB:47:E9:5F:26:9E:FB:FA:2B:72:6A
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C43D0ED45938802ACBFA00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ed64181b-93d0-396f-9353-bf215b87d1cc.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:3d:0e:d4:59:38:80:2a:cb:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=66e81a72-39a7-48f9-9fac-233cf17ae294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:f1:85:5b:89:11:63:1e:dc:71:5d:8a:e3:
                    b3:5a:74:23:b0:3b:63:ba:40:7a:cb:82:b2:e1:04:
                    ff:9b:66:ad:8b:b4:a6:90:a6:50:77:a6:d7:0d:70:
                    7e:30:6e:77:12:89:48:9f:b6:e5:87:13:48:fd:b8:
                    8b:ee:42:27:69:00:d9:ca:09:81:21:c9:54:a4:d9:
                    9f:f8:4e:d8:21:a8:8a:3b:30:7f:e9:a0:88:00:29:
                    dc:53:f4:35:87:c8:25:0b:c9:8f:40:79:8e:ca:04:
                    43:6e:53:32:9f:c8:52:df:e5:76:2a:fa:3f:28:21:
                    43:df:6e:72:d7:74:97:d1:df:f0:ea:7d:e1:80:2f:
                    58:84:45:c4:2d:8e:03:09:f1:81:b6:68:7c:7a:ac:
                    d3:5e:a6:df:0d:6c:c2:77:c6:02:db:90:76:95:5f:
                    5a:d2:4a:a8:bc:1c:c3:99:40:0e:71:2e:5e:6a:90:
                    37:97:a5:c9:02:0c:70:27:ce:eb:33:a4:d5:83:3d:
                    2d:6f:8b:a2:22:67:32:c7:2c:4f:33:4b:0b:a8:26:
                    2d:f2:52:32:ec:1b:c0:a8:9a:da:9d:e6:a1:17:b6:
                    d4:5b:75:ad:fd:7c:e0:e3:50:87:80:80:db:29:8b:
                    69:ac:3d:31:3b:f6:68:aa:b9:d6:ea:85:2a:db:50:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:46:32:D1:6F:BF:EF:A9:0D:DB:47:E9:5F:26:9E:FB:FA:2B:72:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ed64181b-93d0-396f-9353-bf215b87d1cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d0:7d:78:7f:49:a2:eb:6f:ab:cd:9a:11:76:ff:57:34:7f:
         84:f9:76:23:8f:f1:54:92:ac:34:02:5e:53:fe:fc:a3:d1:87:
         23:d3:1a:f1:ee:41:fd:3f:0e:7a:35:a9:16:3f:3b:88:d3:2b:
         19:6f:a8:fe:59:28:73:b5:12:5b:0e:62:47:03:bf:66:ea:1d:
         20:02:39:22:29:8a:c7:5c:37:58:63:d4:4b:c2:25:94:e3:8e:
         a5:30:89:63:22:2e:a0:1c:7b:61:2f:af:04:e8:b8:9f:db:50:
         ac:3d:3a:6d:76:29:77:56:00:68:70:d5:0c:4f:36:3d:2d:d9:
         a7:94:dd:d5:2e:56:42:ec:ce:50:e7:91:10:e0:b3:89:0f:76:
         9e:de:9c:69:31:20:50:8e:33:29:1c:e9:7c:0a:63:48:8a:91:
         42:c5:b7:e0:8f:66:f2:62:81:2f:4f:a5:6b:9e:ec:8e:05:aa:
         d8:e3:77:99:4d:9a:49:8d:53:3e:a0:60:e0:4c:4b:c3:5c:59:
         b4:6c:cc:d5:93:44:81:78:64:8f:c9:bd:21:2c:24:5b:6f:42:
         c1:0d:77:12:6b:34:30:5a:d1:56:aa:26:94:53:ac:22:4e:cc:
         56:dd:7c:16:60:e4:32:06:5b:f4:d9:a6:2d:ff:49:f7:99:9b:
         0e:4f:b7:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxD0O1Fk4gCrL+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NjZlODFhNzItMzlhNy00OGY5LTlmYWMtMjMzY2YxN2FlMjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVbxhVuJEWMe3HFdiuOzWnQjsDtjukB6y4Ky
4QT/m2ati7SmkKZQd6bXDXB+MG53EolIn7blhxNI/biL7kInaQDZygmBIclUpNmf
+E7YIaiKOzB/6aCIACncU/Q1h8glC8mPQHmOygRDblMyn8hS3+V2Kvo/KCFD325y
13SX0d/w6n3hgC9YhEXELY4DCfGBtmh8eqzTXqbfDWzCd8YC25B2lV9a0kqovBzD
mUAOcS5eapA3l6XJAgxwJ87rM6TVgz0tb4uiImcyxyxPM0sLqCYt8lIy7BvAqJra
neahF7bUW3Wt/Xzg41CHgIDbKYtprD0xO/ZoqrnW6oUq21BW9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDRGMtFvv++pDdtH6V8mnvv6K3JqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZWQ2NDE4MWItOTNkMC0z
OTZmLTkzNTMtYmYyMTViODdkMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjPhcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzQfXh/SaLrb6vNmhF2/1c0f4T5diOP8VSSrDQCXlP+/KPRhyPTGvHu
Qf0/Dno1qRY/O4jTKxlvqP5ZKHO1ElsOYkcDv2bqHSACOSIpisdcN1hj1EvCJZTj
jqUwiWMiLqAce2EvrwTouJ/bUKw9Om12KXdWAGhw1QxPNj0t2aeU3dUuVkLszlDn
kRDgs4kPdp7enGkxIFCOMykc6XwKY0iKkULFt+CPZvJigS9PpWue7I4Fqtjjd5lN
mkmNUz6gYOBMS8NcWbRszNWTRIF4ZI/JvSEsJFtvQsENdxJrNDBa0VaqJpRTrCJO
zFbdfBZg5DIGW/TZpi3/SfeZmw5Pt0E=
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:56:50 2025 by rpki-client