Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/726827c4-59ed-3868-b71b-ddd0717211e6.roa
File:                     726827c4-59ed-3868-b71b-ddd0717211e6.roa (raw, json)
Hash identifier:          608618jdZRFS3Cd0/RVHMOljY/XGT8jzMp9pCqlJH5Q=
Subject key identifier:   FA:12:C4:3C:97:C9:1C:D1:97:3B:63:BD:5A:94:46:AB:57:D0:66:15
Certificate issuer:       /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial:       010D0C9F43285849244E8AFC0B906287BED89BA0
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/726827c4-59ed-3868-b71b-ddd0717211e6.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        216.24.225.0/24 maxlen: 24
                          216.24.226.0/24 maxlen: 24
                          216.24.227.0/24 maxlen: 24
                          216.24.228.0/24 maxlen: 24
                          216.24.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:8a:fc:0b:90:62:87:be:d8:9b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=b2a23500-dcf1-452e-8cf5-138e49f4d93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:80:7b:31:70:66:39:a9:dd:ca:55:b6:7a:
                    aa:c6:9c:4c:a1:54:30:30:0d:3d:82:e4:6a:fa:16:
                    0c:92:17:6a:23:65:23:46:bf:f2:10:cb:2b:e7:14:
                    c8:bf:c4:c0:bd:c1:87:eb:4e:d7:ef:97:ee:ca:d5:
                    f7:3a:0d:6e:90:f3:fd:5a:30:6f:5e:a6:49:a3:95:
                    e5:db:ea:d0:20:99:d3:da:e3:1d:10:57:ff:c9:95:
                    95:65:68:b4:aa:b2:93:12:7d:d6:42:d3:94:72:c9:
                    eb:a0:b3:2f:66:2a:a7:1e:6d:cf:9d:14:b7:cc:b5:
                    43:fa:c3:47:85:94:a2:74:4c:1e:d0:cb:2b:b4:fc:
                    6a:20:f7:88:5f:4a:74:96:97:bf:12:7c:85:7b:d9:
                    ec:e5:6d:2e:ae:c1:76:58:31:34:b5:35:65:54:c0:
                    0a:5d:b3:30:86:cc:32:33:f2:91:29:95:9f:d1:ca:
                    bd:4e:34:1d:db:29:1f:fb:ca:56:b5:0b:96:b0:69:
                    fb:ae:ce:7c:eb:ad:ca:5c:f4:3c:16:a1:e8:c6:03:
                    ef:ea:38:d0:0e:83:c4:e1:6b:e6:3c:2c:fb:4e:b9:
                    22:9d:d7:4e:45:ed:94:5a:89:6d:36:78:5a:78:06:
                    72:3a:24:50:3d:be:b5:e5:47:ea:40:e3:74:2b:e1:
                    67:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:12:C4:3C:97:C9:1C:D1:97:3B:63:BD:5A:94:46:AB:57:D0:66:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/726827c4-59ed-3868-b71b-ddd0717211e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl

            X509v3 Authority Key Identifier:
                keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.225.0-216.24.229.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d6:ae:9a:14:83:d0:8c:94:b8:bd:53:1d:70:71:eb:6c:e2:
         2a:b0:d5:39:79:29:fd:78:4e:33:ed:2c:a4:9c:3c:c0:34:f5:
         dd:89:bf:66:fe:5b:ef:30:f9:01:06:bd:88:1e:3c:ef:cc:95:
         dc:f0:18:7b:3b:5e:6d:7e:69:c9:e2:24:ee:92:a9:83:e4:7d:
         a6:28:67:fd:39:5a:c4:87:56:92:3b:74:8a:45:7f:06:e3:9f:
         e2:7e:33:7a:6e:25:69:8b:48:c2:53:de:1c:a3:a3:28:01:ef:
         f3:03:9a:4a:8b:95:46:33:29:19:a8:2d:e3:7a:38:d5:48:fa:
         e9:9a:1b:58:e6:b6:71:92:9d:45:cd:18:04:02:8f:7b:a8:4c:
         d5:a8:2c:21:2b:95:ec:4d:17:e4:58:a3:b8:c0:d9:04:27:a0:
         76:cf:75:0e:a5:b7:8d:74:72:09:68:b1:6a:45:d8:74:a4:5c:
         2e:f9:d4:bc:26:4f:4f:d5:f9:00:07:4a:15:32:0d:6e:1c:59:
         cd:6e:8f:14:a7:6a:13:31:5b:99:10:44:0e:76:50:43:2b:e5:
         89:29:6d:bc:52:5c:2f:b0:58:05:97:74:c7:76:d5:22:47:5e:
         23:d5:ac:e4:bb:94:70:88:f9:17:b5:fe:8f:7c:dc:54:ae:2d:
         a9:d7:f6:d5
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEkkTor8C5Bih77Ym6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5
NWM5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
YjJhMjM1MDAtZGNmMS00NTJlLThjZjUtMTM4ZTQ5ZjRkOTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGGAezFwZjmp3cpVtnqqxpxMoVQwMA09guRq
+hYMkhdqI2UjRr/yEMsr5xTIv8TAvcGH607X75fuytX3Og1ukPP9WjBvXqZJo5Xl
2+rQIJnT2uMdEFf/yZWVZWi0qrKTEn3WQtOUcsnroLMvZiqnHm3PnRS3zLVD+sNH
hZSidEwe0MsrtPxqIPeIX0p0lpe/EnyFe9ns5W0ursF2WDE0tTVlVMAKXbMwhswy
M/KRKZWf0cq9TjQd2ykf+8pWtQuWsGn7rs58663KXPQ8FqHoxgPv6jjQDoPE4Wvm
PCz7TrkinddORe2UWoltNnhaeAZyOiRQPb615UfqQON0K+Fn6wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFPoSxDyXyRzRlztjvVqURqtX0GYVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj
YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvNzI2ODI3YzQtNTllZC0z
ODY4LWI3MWItZGRkMDcxNzIxMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1
YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0
OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm
ZDc0NDk1YzkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYGOED
BAHYGOQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAcdaumhSD0IyUuL1THXBx62ziKrDVOXkp/XhOM+0spJw8
wDT13Ym/Zv5b7zD5AQa9iB4878yV3PAYeztebX5pyeIk7pKpg+R9pihn/TlaxIdW
kjt0ikV/BuOf4n4zem4laYtIwlPeHKOjKAHv8wOaSouVRjMpGagt43o41Uj66Zob
WOa2cZKdRc0YBAKPe6hM1agsISuV7E0X5FijuMDZBCegds91DqW3jXRyCWixakXY
dKRcLvnUvCZPT9X5AAdKFTINbhxZzW6PFKdqEzFbmRBEDnZQQyvliSltvFJcL7BY
BZd0x3bVIkdeI9Ws5LuUcIj5F7X+j3zcVK4tqdf21Q==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:21:30 2025 by rpki-client