Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/6fcde77c-6903-3531-92db-541d559de429.roa
File:                     6fcde77c-6903-3531-92db-541d559de429.roa (raw, json)
Hash identifier:          l3ufMiuGPBU2aCoZNz20DESwmeAxE7xGZJ9w+Si92eE=
Subject key identifier:   F3:80:34:E2:EA:18:95:FB:53:03:CA:01:6A:69:18:8E:B4:02:5E:71
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584A10355237510AB5CBD5C58700
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/6fcde77c-6903-3531-92db-541d559de429.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     54724
IP address blocks:        209.122.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:52:37:51:0a:b5:cb:d5:c5:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=a0e74c76-b058-4587-aa60-b1d79876ceb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:53:41:f3:52:94:9e:29:65:16:86:23:1b:ec:
                    5b:6e:40:94:16:b5:15:92:79:81:f0:f2:e9:7b:bf:
                    7c:b0:6b:4a:2e:b7:46:6d:b4:33:98:24:8f:80:57:
                    81:b4:f1:4a:81:e3:54:a4:42:cb:9a:27:cd:c4:43:
                    14:77:fd:09:20:6c:eb:85:90:c2:f2:16:6b:c6:73:
                    38:a1:40:6a:02:a7:46:28:ed:a7:90:80:af:07:43:
                    82:8a:0c:11:6c:6b:af:c2:d0:f1:da:1d:9f:0f:f6:
                    21:b5:fe:88:81:d1:cc:21:b9:03:4b:c4:4f:d6:6c:
                    9d:5b:c8:53:75:c5:97:2d:90:f0:29:57:f7:f3:fe:
                    59:8e:93:4f:56:e5:90:d9:73:3f:e8:44:f6:50:74:
                    97:d8:27:40:77:24:69:dc:f5:50:53:1d:81:51:ca:
                    74:22:ca:e6:3b:1a:fe:50:aa:14:09:71:a6:24:35:
                    33:32:fb:9e:d9:be:3e:91:d2:69:ae:cd:91:0c:1f:
                    de:e8:59:07:25:c0:57:c2:d7:31:a5:6e:fd:70:2f:
                    e5:c4:ea:f3:66:05:5c:d0:82:bc:16:05:7e:14:b4:
                    06:1b:d5:cf:d0:7d:ff:21:76:62:43:8c:a0:b1:f6:
                    54:df:c6:41:6b:e8:91:6e:76:e9:34:9c:47:84:98:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:80:34:E2:EA:18:95:FB:53:03:CA:01:6A:69:18:8E:B4:02:5E:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/6fcde77c-6903-3531-92db-541d559de429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.122.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:8b:cb:98:f4:67:40:38:c1:f5:db:9c:68:8c:2d:bd:8e:bd:
         1c:06:98:54:ba:2e:d8:0b:6d:3e:de:7f:3e:64:29:0c:0c:e6:
         1a:fe:4d:2a:ca:19:ae:8d:f4:e7:2c:62:52:b5:83:06:95:2a:
         f2:77:48:2e:e9:4b:74:e0:f9:9f:df:f2:cf:8c:25:3c:7f:a2:
         ae:36:71:83:eb:71:b1:19:91:8c:9d:68:97:d0:0b:96:e7:12:
         17:43:e6:5f:36:73:2f:c8:19:dc:db:2f:db:d0:60:19:b4:c0:
         20:d6:29:97:6b:cb:a5:16:af:49:1f:66:16:4c:3e:16:75:a6:
         8a:41:68:34:66:33:93:e0:7e:5e:46:3d:50:1c:15:8f:bf:f0:
         3c:b9:5a:6e:b1:61:24:09:25:5f:ce:ce:39:87:d1:d0:f1:16:
         39:6d:03:28:2d:ba:77:a1:c4:40:40:40:f5:c7:7b:07:de:53:
         b5:9e:84:24:92:a6:be:5a:f5:5c:8e:4f:f4:7e:1f:e3:2c:f9:
         e0:b6:b2:d8:aa:27:73:3b:2f:eb:1a:e7:b7:a5:d4:fe:f7:f2:
         7f:e1:55:44:b2:2a:5d:2b:ba:c0:44:4e:94:10:87:bc:8c:09:
         73:5d:aa:e1:89:d5:07:f7:d2:2a:e0:c1:0c:cd:75:2c:ed:38:
         35:14:88:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNVI3UQq1y9XFhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2
ODczMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk
YTBlNzRjNzYtYjA1OC00NTg3LWFhNjAtYjFkNzk4NzZjZWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFNB81KUnillFoYjG+xbbkCUFrUVknmB8PLp
e798sGtKLrdGbbQzmCSPgFeBtPFKgeNUpELLmifNxEMUd/0JIGzrhZDC8hZrxnM4
oUBqAqdGKO2nkICvB0OCigwRbGuvwtDx2h2fD/Yhtf6IgdHMIbkDS8RP1mydW8hT
dcWXLZDwKVf38/5ZjpNPVuWQ2XM/6ET2UHSX2CdAdyRp3PVQUx2BUcp0IsrmOxr+
UKoUCXGmJDUzMvue2b4+kdJprs2RDB/e6FkHJcBXwtcxpW79cC/lxOrzZgVc0IK8
FgV+FLQGG9XP0H3/IXZiQ4ygsfZU38ZBa+iRbnbpNJxHhJhpMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPOANOLqGJX7UwPKAWppGI60Al5xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0
NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvNmZjZGU3N2MtNjkwMy0z
NTMxLTkyZGItNTQxZDU1OWRlNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli
MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk
Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw
MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XqsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWLy5j0Z0A4wfXbnGiMLb2OvRwGmFS6LtgLbT7efz5kKQwM5hr+TSrK
Ga6N9OcsYlK1gwaVKvJ3SC7pS3Tg+Z/f8s+MJTx/oq42cYPrcbEZkYydaJfQC5bn
EhdD5l82cy/IGdzbL9vQYBm0wCDWKZdry6UWr0kfZhZMPhZ1popBaDRmM5Pgfl5G
PVAcFY+/8Dy5Wm6xYSQJJV/OzjmH0dDxFjltAygtunehxEBAQPXHewfeU7WehCSS
pr5a9VyOT/R+H+Ms+eC2stiqJ3M7L+sa57el1P738n/hVUSyKl0rusBETpQQh7yM
CXNdquGJ1Qf30irgwQzNdSztODUUiL8=
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:32 2025 by rpki-client