Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f49136dc-f7eb-38bf-a2ba-b01bcd68e9ca.roa
File:                     f49136dc-f7eb-38bf-a2ba-b01bcd68e9ca.roa (raw, json)
Hash identifier:          EYP2qP01V4Nr4xRO0aj9qmAYn+0lu/dUk/rW0ok5Kd0=
Subject key identifier:   60:F7:79:52:5A:56:9A:75:30:27:92:4B:F1:4B:CD:1C:6C:78:BA:32
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849E2252D5A18390EF81CF76C10
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f49136dc-f7eb-38bf-a2ba-b01bcd68e9ca.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     35994
IP address blocks:        96.6.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:2d:5a:18:39:0e:f8:1c:f7:6c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=2c1eee5d-72d1-42f1-9746-39a9e82f7956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0b:10:0e:1a:c1:ac:7c:7f:81:bc:bd:17:3c:
                    77:bf:57:a7:8b:aa:e9:c2:d3:e9:19:cf:66:5f:da:
                    04:9a:cd:3a:cc:a2:ce:8c:0a:a7:d9:32:82:dd:6d:
                    f0:79:e2:85:df:2d:e1:c3:cf:77:1f:82:12:df:db:
                    70:45:39:c6:f9:fc:66:ac:15:c8:08:55:b1:a7:ce:
                    2a:2b:5f:f4:c6:b3:80:26:69:c2:68:17:55:19:02:
                    2d:b0:e2:01:b7:b8:23:cf:3c:54:72:2d:38:4c:37:
                    28:fc:1a:f0:37:6c:04:a2:57:53:21:f6:72:62:19:
                    fa:ef:d6:89:80:a2:3f:7b:3b:66:82:6d:88:b9:4f:
                    d7:31:71:cf:71:e2:d6:9b:d2:a7:65:c5:79:7d:97:
                    b8:34:fe:a5:6d:be:51:3e:59:b3:64:96:b3:72:7e:
                    ad:13:e2:03:4a:ba:7d:9c:92:ad:ee:a4:4f:c0:25:
                    dc:81:da:05:1f:5b:f7:88:7b:33:e9:7d:05:6b:65:
                    25:b0:40:54:68:23:16:f9:9b:9b:6f:f1:32:54:8b:
                    64:6a:66:2a:28:58:c5:86:46:b2:45:ec:74:2b:51:
                    ba:6c:4d:72:dd:44:fe:cf:49:69:e6:57:f2:cc:8f:
                    9f:e9:e5:0f:66:70:74:14:63:5c:22:f8:15:f8:7b:
                    16:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F7:79:52:5A:56:9A:75:30:27:92:4B:F1:4B:CD:1C:6C:78:BA:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f49136dc-f7eb-38bf-a2ba-b01bcd68e9ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.6.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:bc:ab:a1:96:35:47:0b:fd:0a:e7:9c:28:ae:7e:6d:e7:94:
         28:15:6d:06:b9:3c:24:42:6c:96:cd:f5:08:8c:f3:6b:a7:a7:
         d3:b8:45:6b:dc:cb:c4:a3:18:de:d8:03:18:13:9c:47:0f:a7:
         63:9a:4f:59:41:78:00:77:e0:8e:ca:46:47:d5:b9:0c:83:d9:
         7d:5f:2e:15:66:45:b3:29:e4:89:ed:e1:93:5c:41:25:f8:c1:
         5a:af:b2:96:6d:44:ad:bd:42:2a:74:97:07:69:09:e6:c9:a1:
         31:f6:39:76:44:80:ed:cc:5c:5d:aa:28:49:ed:0f:27:c8:b9:
         e1:95:b7:58:aa:14:90:cd:ce:4c:d7:2c:b3:47:56:8b:d1:ba:
         8f:ac:4f:ef:42:48:7e:ad:ca:f8:fe:f7:c5:ad:f9:24:56:d0:
         a7:b3:93:ef:ef:b9:b9:b0:7c:2b:e0:63:d6:67:89:85:30:18:
         f7:df:8c:7f:42:42:bf:0f:8f:ed:85:26:08:e6:3f:36:ae:45:
         0d:bd:21:cf:02:2a:b0:15:d4:a9:a7:08:15:13:df:aa:76:fc:
         75:47:76:6a:72:47:74:c1:53:74:5f:54:74:f7:83:85:a8:87:
         44:84:73:01:bb:d2:b0:e7:58:27:20:b4:51:83:87:97:c2:92:
         3f:a1:e0:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJS1aGDkO+Bz3bBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
MmMxZWVlNWQtNzJkMS00MmYxLTk3NDYtMzlhOWU4MmY3OTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQsQDhrBrHx/gby9Fzx3v1eni6rpwtPpGc9m
X9oEms06zKLOjAqn2TKC3W3weeKF3y3hw893H4IS39twRTnG+fxmrBXICFWxp84q
K1/0xrOAJmnCaBdVGQItsOIBt7gjzzxUci04TDco/BrwN2wEoldTIfZyYhn679aJ
gKI/eztmgm2IuU/XMXHPceLWm9KnZcV5fZe4NP6lbb5RPlmzZJazcn6tE+IDSrp9
nJKt7qRPwCXcgdoFH1v3iHsz6X0Fa2UlsEBUaCMW+Zubb/EyVItkamYqKFjFhkay
Rex0K1G6bE1y3UT+z0lp5lfyzI+f6eUPZnB0FGNcIvgV+HsWwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGD3eVJaVpp1MCeSS/FLzRxseLoyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjQ5MTM2ZGMtZjdlYi0z
OGJmLWEyYmEtYjAxYmNkNjhlOWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAasMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD28q6GWNUcL/QrnnCiufm3nlCgVbQa5PCRCbJbN9QiM82unp9O4RWvc
y8SjGN7YAxgTnEcPp2OaT1lBeAB34I7KRkfVuQyD2X1fLhVmRbMp5Int4ZNcQSX4
wVqvspZtRK29Qip0lwdpCebJoTH2OXZEgO3MXF2qKEntDyfIueGVt1iqFJDNzkzX
LLNHVovRuo+sT+9CSH6tyvj+98Wt+SRW0Kezk+/vubmwfCvgY9ZniYUwGPffjH9C
Qr8Pj+2FJgjmPzauRQ29Ic8CKrAV1KmnCBUT36p2/HVHdmpyR3TBU3RfVHT3g4Wo
h0SEcwG70rDnWCcgtFGDh5fCkj+h4Lg=
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:51 2025 by rpki-client