Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f010a53f-6d25-34f8-8dcf-240c72ffad96.roa
File:                     f010a53f-6d25-34f8-8dcf-240c72ffad96.roa (raw, json)
Hash identifier:          GTe8ivtKA42NevEoFlVu4Pe8qfCNEtG6LUbxNLyrMAg=
Subject key identifier:   67:76:33:B5:98:18:1A:8D:D1:40:DA:E9:24:88:BF:6D:B9:0D:35:7C
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285848F65BDE54EDA47E9D5E768740
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f010a53f-6d25-34f8-8dcf-240c72ffad96.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     25938
IP address blocks:        205.177.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:de:54:ed:a4:7e:9d:5e:76:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=2934d775-40c0-417d-8e15-5636ee544416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:27:7c:20:7a:f9:43:6a:76:27:1c:e1:2b:60:
                    61:39:3c:b5:83:33:05:5b:97:bc:1b:41:81:6e:85:
                    7e:1f:37:ca:52:1b:10:54:59:b3:3b:3a:2c:70:2f:
                    3e:79:e4:1a:b2:74:4d:47:6e:98:76:d4:d6:9b:23:
                    ef:75:8c:a4:fa:9e:3b:0d:cd:27:4f:d2:be:82:ee:
                    8d:bf:ee:3b:e7:db:13:84:f0:05:86:40:e5:d3:56:
                    d8:d0:9b:9f:b2:2d:11:16:9b:be:f1:02:7b:9e:46:
                    80:bd:8a:e3:aa:c1:ad:b2:8e:a3:2c:9f:f5:f1:ce:
                    ee:59:c1:f7:38:cf:dd:b5:75:c1:d6:fc:2c:10:54:
                    a3:10:b7:65:37:95:da:55:2d:12:25:66:a4:84:6d:
                    a2:9f:6d:d1:cd:07:fb:43:6f:3e:f1:58:01:5a:3e:
                    3b:a1:0e:de:6f:8a:7d:d2:30:28:23:c9:72:27:fc:
                    d1:61:d8:60:42:78:14:4c:cb:fc:ef:ed:07:a2:93:
                    34:a0:ed:a1:92:f5:16:3b:6b:90:74:b0:aa:18:91:
                    31:8f:35:5d:e0:b5:f3:bc:b3:d7:b0:0a:de:98:1a:
                    c9:f6:e0:d9:e8:96:af:ee:3c:12:8d:c5:41:ab:5c:
                    25:c5:68:fc:4a:8f:db:9f:7f:b9:30:99:ac:9c:2f:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:76:33:B5:98:18:1A:8D:D1:40:DA:E9:24:88:BF:6D:B9:0D:35:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f010a53f-6d25-34f8-8dcf-240c72ffad96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.177.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e7:03:15:33:05:6d:75:94:9e:c2:7d:65:3d:59:f9:a9:00:
         5f:ee:fe:3b:52:a1:9a:18:30:ab:c0:b3:cd:4a:96:ae:fa:bc:
         1a:1d:b3:e0:7c:2a:b0:35:14:c7:08:fd:04:c3:17:39:d4:0c:
         f5:cf:db:0f:23:bd:00:1b:04:10:1e:06:19:5b:ad:15:5f:89:
         b4:0e:81:96:dd:91:50:4e:d1:03:5f:c2:d5:39:1e:99:92:89:
         92:1f:21:55:59:12:7f:66:4e:a1:31:b9:33:95:bb:58:61:0f:
         2f:b1:93:d8:d4:a1:d2:75:7a:0b:66:69:4d:53:ca:57:4e:0c:
         37:2a:ca:4e:18:f4:97:d4:6a:95:51:72:23:bf:c0:5f:67:3b:
         da:b5:d4:63:9c:dd:df:f6:b9:8b:59:0f:4d:f2:56:80:62:6d:
         2a:9d:92:ab:14:5e:b3:91:08:cc:a9:c4:c2:22:74:f1:59:8f:
         02:bf:03:46:1a:e4:37:ca:5d:19:f2:c8:41:e9:7d:b4:08:8f:
         7d:b0:d6:0f:3b:2b:5f:aa:1e:47:de:30:ed:04:35:dd:73:72:
         dd:28:1f:07:40:29:98:8c:87:b8:15:bc:2b:02:fa:bd:f2:34:
         7c:5b:e8:64:64:d3:74:80:94:82:fd:f6:a7:2a:db:84:cd:38:
         fa:cc:dd:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W95U7aR+nV52h0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
MjkzNGQ3NzUtNDBjMC00MTdkLThlMTUtNTYzNmVlNTQ0NDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1id8IHr5Q2p2JxzhK2BhOTy1gzMFW5e8G0GB
boV+HzfKUhsQVFmzOzoscC8+eeQasnRNR26YdtTWmyPvdYyk+p47Dc0nT9K+gu6N
v+4759sThPAFhkDl01bY0Jufsi0RFpu+8QJ7nkaAvYrjqsGtso6jLJ/18c7uWcH3
OM/dtXXB1vwsEFSjELdlN5XaVS0SJWakhG2in23RzQf7Q28+8VgBWj47oQ7eb4p9
0jAoI8lyJ/zRYdhgQngUTMv87+0HopM0oO2hkvUWO2uQdLCqGJExjzVd4LXzvLPX
sAremBrJ9uDZ6Jav7jwSjcVBq1wlxWj8So/bn3+5MJmsnC/AXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGd2M7WYGBqN0UDa6SSIv225DTV8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZjAxMGE1M2YtNmQyNS0z
NGY4LThkY2YtMjQwYzcyZmZhZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzbHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPnAxUzBW11lJ7CfWU9WfmpAF/u/jtSoZoYMKvAs81Klq76vBods+B8
KrA1FMcI/QTDFznUDPXP2w8jvQAbBBAeBhlbrRVfibQOgZbdkVBO0QNfwtU5HpmS
iZIfIVVZEn9mTqExuTOVu1hhDy+xk9jUodJ1egtmaU1TyldODDcqyk4Y9JfUapVR
ciO/wF9nO9q11GOc3d/2uYtZD03yVoBibSqdkqsUXrORCMypxMIidPFZjwK/A0Ya
5DfKXRnyyEHpfbQIj32w1g87K1+qHkfeMO0ENd1zct0oHwdAKZiMh7gVvCsC+r3y
NHxb6GRk03SAlIL99qcq24TNOPrM3Z0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:57 2025 by rpki-client