Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e0d3804-883f-3fe7-ab21-c79d3c661585.roa
File:                     2e0d3804-883f-3fe7-ab21-c79d3c661585.roa (raw, json)
Hash identifier:          j/4g9LtOrq00UEFwldJm4akxA9N2C4KB2xanHU92oEw=
Subject key identifier:   95:65:1F:D4:73:BC:A0:59:DD:C1:58:02:B8:4A:C7:79:77:2E:C5:93
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849FEE7FBDED68AB6931FF81F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e0d3804-883f-3fe7-ab21-c79d3c661585.roa
Signing time:             Tue 27 May 2025 20:16:34 +0000
ROA not before:           Tue 27 May 2025 20:16:34 +0000
ROA not after:            Mon 25 Aug 2025 20:16:34 +0000
asID:                     6167
IP address blocks:        174.232.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:e7:fb:de:d6:8a:b6:93:1f:f8:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 27 20:16:34 2025 GMT
            Not After : Aug 25 20:16:34 2025 GMT
        Subject: CN=845d45b0-4958-4f66-a343-f307af9bc043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:e2:1a:9c:f9:c3:d5:35:8e:ac:9a:39:6c:
                    53:54:c5:32:08:97:bf:fa:44:6a:b7:dd:e1:1c:96:
                    c4:f5:cb:dc:a4:b8:2d:52:b7:fa:bd:60:b6:ba:7b:
                    38:60:45:e1:f6:2e:d8:5f:ac:61:46:a7:a1:5e:e9:
                    50:4d:e2:77:7b:4d:49:f5:33:88:3a:6d:27:20:28:
                    97:2a:85:c4:03:71:e1:8c:21:c6:75:f2:87:6a:09:
                    55:ee:cb:e9:6b:fd:40:a7:13:cd:14:3c:29:76:c7:
                    d4:08:90:ee:12:1e:d2:77:80:40:f8:fb:a5:99:fa:
                    38:f2:b7:51:50:52:81:95:10:d1:c7:79:08:19:3a:
                    78:75:27:4c:c4:87:f9:85:aa:41:91:ca:c2:00:18:
                    78:0c:21:cd:f3:da:07:d4:95:e9:65:9a:16:3a:85:
                    83:00:c6:4c:2d:d3:2f:5e:bb:76:37:1b:24:91:89:
                    f1:c5:1e:f2:1b:c8:29:e6:c5:4f:5b:01:34:d7:87:
                    67:64:db:fc:d7:1d:da:42:c1:df:e2:2f:ed:12:0c:
                    a7:11:66:85:d1:92:25:17:12:fc:a5:dd:22:cb:a5:
                    82:43:ec:bd:6f:30:cd:93:df:4b:b1:d9:99:7d:78:
                    41:42:ae:1b:63:85:f3:33:d4:5c:d3:bd:e7:ac:4f:
                    1f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:65:1F:D4:73:BC:A0:59:DD:C1:58:02:B8:4A:C7:79:77:2E:C5:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e0d3804-883f-3fe7-ab21-c79d3c661585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d8:5a:3b:2f:18:5f:54:38:66:b1:e6:c4:f9:25:46:02:86:
         d2:98:d4:d5:e3:56:c9:38:92:2e:e5:19:f6:d5:86:de:c2:c8:
         30:cb:90:6c:2b:e9:72:6d:68:88:50:4d:b0:f9:b8:a2:7d:c5:
         d5:b8:cb:c8:d1:8a:ad:67:dc:0a:ba:41:ed:79:f5:17:f2:3c:
         65:67:f1:bb:e4:de:7a:55:30:58:3e:71:16:eb:c1:e6:2f:c3:
         2e:77:a3:ef:22:b3:a3:bf:b6:23:41:57:da:7c:6b:c7:cf:eb:
         b5:1b:a5:c9:25:2c:cb:ff:3c:68:d9:81:cd:1a:62:49:2a:77:
         6e:58:e2:50:2a:ac:f8:ba:73:2b:76:de:2c:f3:69:74:b6:0f:
         16:40:b0:9d:9a:fc:4a:b8:10:52:dc:b9:60:7e:aa:30:cf:9b:
         f9:4b:db:49:f2:0f:49:de:b1:20:3a:89:fd:a5:2f:43:20:78:
         f1:a9:04:77:fe:62:03:93:12:d2:b6:83:6c:71:56:c2:bc:f9:
         ce:03:74:f6:f7:ea:69:7a:96:c3:bf:95:54:46:61:7b:82:3b:
         a5:d1:50:a0:59:16:fd:91:e4:2d:4e:b8:ed:78:a9:dc:22:c7:
         b5:59:64:35:36:af:5b:16:62:69:21:49:c7:e1:fc:07:78:fd:
         8e:86:9b:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+5/ve1oq2kx/4HwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyNzIwMTYzNFoXDTI1MDgyNTIwMTYzNFowLzEtMCsGA1UEAxMk
ODQ1ZDQ1YjAtNDk1OC00ZjY2LWEzNDMtZjMwN2FmOWJjMDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNXiGpz5w9U1jqyaOWxTVMUyCJe/+kRqt93h
HJbE9cvcpLgtUrf6vWC2uns4YEXh9i7YX6xhRqehXulQTeJ3e01J9TOIOm0nICiX
KoXEA3HhjCHGdfKHaglV7svpa/1ApxPNFDwpdsfUCJDuEh7Sd4BA+Pulmfo48rdR
UFKBlRDRx3kIGTp4dSdMxIf5hapBkcrCABh4DCHN89oH1JXpZZoWOoWDAMZMLdMv
Xrt2NxskkYnxxR7yG8gp5sVPWwE014dnZNv81x3aQsHf4i/tEgynEWaF0ZIlFxL8
pd0iy6WCQ+y9bzDNk99LsdmZfXhBQq4bY4XzM9Rc073nrE8f8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVlH9RzvKBZ3cFYArhKx3l3LsWTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmUwZDM4MDQtODgzZi0z
ZmU3LWFiMjEtYzc5ZDNjNjYxNTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruggMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3YWjsvGF9UOGax5sT5JUYChtKY1NXjVsk4ki7lGfbVht7CyDDLkGwr
6XJtaIhQTbD5uKJ9xdW4y8jRiq1n3Aq6Qe159RfyPGVn8bvk3npVMFg+cRbrweYv
wy53o+8is6O/tiNBV9p8a8fP67UbpcklLMv/PGjZgc0aYkkqd25Y4lAqrPi6cyt2
3izzaXS2DxZAsJ2a/Eq4EFLcuWB+qjDPm/lL20nyD0nesSA6if2lL0MgePGpBHf+
YgOTEtK2g2xxVsK8+c4DdPb36ml6lsO/lVRGYXuCO6XRUKBZFv2R5C1OuO14qdwi
x7VZZDU2r1sWYmkhScfh/Ad4/Y6Gm/M=
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:50:56 2025 by rpki-client