Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/75c3a26d-a44b-33f7-82aa-37aff99410f8.roa
File:                     75c3a26d-a44b-33f7-82aa-37aff99410f8.roa (raw, json)
Hash identifier:          KmGCi8Dj5Pjt5Jww6oStxbEi7Vb42J6rM/Ox3+vJT50=
Subject key identifier:   37:6F:FF:6A:4D:0E:DE:0A:92:A5:ED:75:57:C6:AE:46:F4:9A:3B:9F
Certificate issuer:       /CN=5dbc0e41-c852-43ba-9c18-262c63aec1a9
Certificate serial:       010D0C9F43285849C20A073E85F18C63820B9CA0
Authority key identifier: C1:5F:30:1E:29:71:B4:5D:0C:80:DA:BF:13:2B:FC:CE:71:BE:DB:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/75c3a26d-a44b-33f7-82aa-37aff99410f8.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     397423
IP address blocks:        162.253.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/5dbc0e41-c852-43ba-9c18-262c63aec1a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/5dbc0e41-c852-43ba-9c18-262c63aec1a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:07:3e:85:f1:8c:63:82:0b:9c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dbc0e41-c852-43ba-9c18-262c63aec1a9
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=902d7ba6-cd23-46ed-be0b-ad360e540b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4a:0c:68:97:52:4a:c6:37:2c:5a:8c:57:c4:
                    ee:a1:0a:72:fa:03:04:97:f4:22:15:36:6e:60:e9:
                    7a:8a:8e:4e:da:fb:74:7a:5c:2c:d5:fb:0b:3e:f6:
                    99:10:13:95:34:cb:5e:45:59:5e:38:d6:0a:97:59:
                    35:f8:c4:dc:bc:d4:7b:7d:6c:67:22:cd:46:ce:87:
                    10:9d:84:67:95:c4:3e:28:f9:da:d4:95:de:26:8e:
                    c1:c5:99:e4:d5:d2:5d:15:7d:79:f9:3f:f7:68:25:
                    ce:08:b5:ee:5a:ca:85:d0:96:50:1a:19:00:34:e0:
                    4f:a5:72:88:7a:3f:22:cb:8d:1c:83:c0:7a:ba:22:
                    a1:5f:79:0c:a0:9f:c7:2c:1e:15:d4:d3:39:32:3c:
                    eb:d7:84:d4:53:6b:22:eb:56:10:49:71:e2:c6:41:
                    17:4a:b7:ce:b2:57:bb:86:6e:c9:f0:73:39:2a:d2:
                    b6:5f:67:8c:62:d4:f9:f5:16:14:9e:32:1f:06:37:
                    63:04:3c:3e:a9:48:43:92:07:c9:9b:0c:bf:45:6a:
                    de:a0:2c:50:9e:63:39:7c:6e:6b:c9:0a:c7:f9:63:
                    b3:f9:67:a1:75:72:97:dc:9f:c4:e0:65:9e:31:7e:
                    98:ba:bc:2d:83:ce:84:69:aa:2d:90:a1:33:6b:42:
                    77:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6F:FF:6A:4D:0E:DE:0A:92:A5:ED:75:57:C6:AE:46:F4:9A:3B:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/75c3a26d-a44b-33f7-82aa-37aff99410f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/5dbc0e41-c852-43ba-9c18-262c63aec1a9.crl

            X509v3 Authority Key Identifier:
                keyid:C1:5F:30:1E:29:71:B4:5D:0C:80:DA:BF:13:2B:FC:CE:71:BE:DB:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c7:73:9a:cd:94:bb:75:ce:b7:2b:6c:89:7e:e4:35:2b:ad:
         52:5c:4c:9a:8f:0e:10:60:dd:bf:9f:38:3e:6a:f4:51:4d:d0:
         29:24:fb:88:3c:a8:87:91:87:29:50:9a:95:c3:23:ce:80:24:
         49:d4:c6:ad:85:bc:9a:bd:46:77:ca:aa:c4:0a:66:40:85:7c:
         9e:02:08:95:12:e6:41:53:55:9c:33:12:76:a5:31:22:9e:82:
         30:fc:c9:d2:21:43:b3:e4:40:7b:61:ac:65:bb:12:f0:ec:cd:
         8a:40:e7:47:cb:a4:49:57:a2:2d:44:28:45:3b:52:0b:7f:7d:
         e2:1b:ff:88:93:7f:3e:4b:dc:5e:a2:fa:fc:d4:6c:06:86:d7:
         8c:0d:f6:c9:e0:00:a1:53:89:ce:fe:80:c5:d7:98:e3:e1:8d:
         d9:73:3c:c6:82:cf:11:a4:a5:52:6e:39:13:7a:81:b9:fc:c2:
         bd:15:5b:db:97:1d:94:a0:c6:55:87:ca:49:93:73:29:53:0a:
         b4:8f:95:32:47:83:db:2a:37:7e:cb:7d:53:44:af:f6:7b:ac:
         a7:ee:c5:40:7c:db:25:3d:d8:10:e9:26:a0:71:fb:f5:94:07:
         e8:e8:98:d3:54:df:0d:42:1c:de:2e:f6:e8:95:2d:03:52:1e:
         69:72:0e:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCgc+hfGMY4ILnKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRiYzBlNDEtYzg1Mi00M2JhLTljMTgtMjYyYzYzYWVj
MWE5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
OTAyZDdiYTYtY2QyMy00NmVkLWJlMGItYWQzNjBlNTQwYjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UoMaJdSSsY3LFqMV8TuoQpy+gMEl/QiFTZu
YOl6io5O2vt0elws1fsLPvaZEBOVNMteRVleONYKl1k1+MTcvNR7fWxnIs1GzocQ
nYRnlcQ+KPna1JXeJo7BxZnk1dJdFX15+T/3aCXOCLXuWsqF0JZQGhkANOBPpXKI
ej8iy40cg8B6uiKhX3kMoJ/HLB4V1NM5Mjzr14TUU2si61YQSXHixkEXSrfOsle7
hm7J8HM5KtK2X2eMYtT59RYUnjIfBjdjBDw+qUhDkgfJmwy/RWreoCxQnmM5fG5r
yQrH+WOz+WehdXKX3J/E4GWeMX6Yurwtg86EaaotkKEza0J3XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdv/2pNDt4KkqXtdVfGrkb0mjufMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81ZGJj
MGU0MS1jODUyLTQzYmEtOWMxOC0yNjJjNjNhZWMxYTkvNzVjM2EyNmQtYTQ0Yi0z
M2Y3LTgyYWEtMzdhZmY5OTQxMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWRiYzBlNDEtYzg1Mi00M2JhLTlj
MTgtMjYyYzYzYWVjMWE5LzVkYmMwZTQxLWM4NTItNDNiYS05YzE4LTI2MmM2M2Fl
YzFhOS5jcmwwHwYDVR0jBBgwFoAUwV8wHilxtF0MgNq/Eyv8znG+258wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81ZGJjMGU0MS1jODUyLTQzYmEtOWMxOC0yNjJj
NjNhZWMxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov2zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7Hc5rNlLt1zrcrbIl+5DUrrVJcTJqPDhBg3b+fOD5q9FFN0Ckk+4g8
qIeRhylQmpXDI86AJEnUxq2FvJq9RnfKqsQKZkCFfJ4CCJUS5kFTVZwzEnalMSKe
gjD8ydIhQ7PkQHthrGW7EvDszYpA50fLpElXoi1EKEU7Ugt/feIb/4iTfz5L3F6i
+vzUbAaG14wN9sngAKFTic7+gMXXmOPhjdlzPMaCzxGkpVJuORN6gbn8wr0VW9uX
HZSgxlWHykmTcylTCrSPlTJHg9sqN37LfVNEr/Z7rKfuxUB82yU92BDpJqBx+/WU
B+jomNNU3w1CHN4u9uiVLQNSHmlyDjE=
-----END CERTIFICATE-----
Generated at Sun May 11 10:21:26 2025 by rpki-client