Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ce6a652b-d091-36b7-9890-8872ff503a64.roa
File:                     ce6a652b-d091-36b7-9890-8872ff503a64.roa (raw, json)
Hash identifier:          e70p02sPxLdueFbSM5QIKzoZupVLSDXUkuWVhSejsOw=
Subject key identifier:   64:95:06:A0:BE:24:82:CA:31:E6:33:26:0E:C8:FD:FD:97:1F:41:23
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A3CE023AD2A2DDC7334530D80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ce6a652b-d091-36b7-9890-8872ff503a64.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     0
IP address blocks:        192.58.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:23:ad:2a:2d:dc:73:34:53:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=d7386547-4068-45cb-b6cc-948ba2ce4aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:3f:2b:0c:ae:92:76:98:73:74:78:b5:58:
                    3a:89:5d:ce:37:58:8e:36:8f:29:05:9c:92:e7:e2:
                    4a:00:d4:6e:78:d6:e7:92:17:94:47:3d:5e:49:15:
                    24:ec:c6:19:ec:ec:7f:ee:35:87:be:73:24:bc:26:
                    81:eb:30:f3:93:23:fd:89:33:43:41:c4:19:df:ed:
                    cb:40:27:9b:a3:dc:dd:51:f6:26:5a:a0:c1:19:a0:
                    44:ff:26:84:c3:53:26:d3:52:b0:aa:9b:9e:0f:c1:
                    de:62:72:53:6a:5b:b0:c0:bb:b2:6d:c0:c2:a6:7d:
                    7a:1d:f9:f5:bc:fb:c6:76:e2:ce:10:41:0e:18:17:
                    39:7c:74:df:58:0b:bc:fc:61:33:a8:00:28:a0:d7:
                    75:ce:db:73:da:83:af:2f:9b:fd:71:74:e5:b9:22:
                    ac:5c:73:49:4d:5f:39:e9:07:ef:46:ef:3a:8d:af:
                    da:7a:24:a5:0b:ab:37:06:3d:7a:df:8f:33:38:3e:
                    60:12:e3:cf:db:30:55:9f:09:cd:be:f6:7e:1f:04:
                    f0:92:ee:4a:31:cd:0d:fc:09:63:ac:08:9b:c4:58:
                    2f:b7:17:f4:07:61:1d:30:0c:ee:0b:63:91:b9:56:
                    61:8e:d3:9c:da:a2:58:7f:fb:ab:09:7f:fe:58:09:
                    08:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:95:06:A0:BE:24:82:CA:31:E6:33:26:0E:C8:FD:FD:97:1F:41:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ce6a652b-d091-36b7-9890-8872ff503a64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d8:46:a6:e3:60:af:d9:83:95:1e:0d:1b:75:88:43:9e:16:
         b0:4a:35:7f:c4:06:68:63:a4:14:65:78:63:d0:a2:e2:b6:11:
         a6:1e:b6:30:6b:7d:ed:3e:3e:11:17:c8:83:06:12:a1:30:1e:
         62:f1:34:11:66:54:38:53:0d:7d:38:3e:11:f9:28:05:01:7c:
         90:ad:02:d9:e8:84:e9:73:8f:b2:1a:6e:de:f2:02:9f:88:1c:
         30:ee:b3:d2:39:13:da:c8:c0:5f:e9:4c:86:c8:8a:3b:32:10:
         12:11:3b:10:74:4b:91:e2:74:02:c5:ab:a9:26:ab:cf:46:99:
         3a:bb:e2:03:56:6b:bb:1c:55:bb:3b:7d:14:ba:48:30:10:bb:
         5c:73:e0:dd:8f:b5:d6:d0:00:69:dc:30:7f:3b:49:46:f0:1d:
         d3:37:ca:7e:e4:ae:41:97:fd:bf:d9:b2:5e:c4:e9:4a:03:81:
         61:37:85:0a:b0:f5:e9:b4:55:1e:f3:20:77:2a:2b:da:d9:5c:
         7d:63:a0:63:dd:98:d2:ce:22:41:79:cc:95:c4:8b:11:e0:82:
         6d:49:ac:9e:87:a5:d3:32:f1:3f:91:2d:98:44:81:50:e8:bd:
         6e:8d:09:15:07:aa:90:1c:fe:c5:43:56:c0:4f:aa:11:3b:d5:
         1e:4a:a9:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84COtKi3cczRTDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk
ZDczODY1NDctNDA2OC00NWNiLWI2Y2MtOTQ4YmEyY2U0YWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Y/KwyuknaYc3R4tVg6iV3ON1iONo8pBZyS
5+JKANRueNbnkheURz1eSRUk7MYZ7Ox/7jWHvnMkvCaB6zDzkyP9iTNDQcQZ3+3L
QCebo9zdUfYmWqDBGaBE/yaEw1Mm01KwqpueD8HeYnJTaluwwLuybcDCpn16Hfn1
vPvGduLOEEEOGBc5fHTfWAu8/GEzqAAooNd1zttz2oOvL5v9cXTluSKsXHNJTV85
6QfvRu86ja/aeiSlC6s3Bj16348zOD5gEuPP2zBVnwnNvvZ+HwTwku5KMc0N/Alj
rAibxFgvtxf0B2EdMAzuC2ORuVZhjtOc2qJYf/urCX/+WAkIUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGSVBqC+JILKMeYzJg7I/f2XH0EjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvY2U2YTY1MmItZDA5MS0z
NmI3LTk4OTAtODg3MmZmNTAzYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDroMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfYRqbjYK/Zg5UeDRt1iEOeFrBKNX/EBmhjpBRleGPQouK2EaYetjBr
fe0+PhEXyIMGEqEwHmLxNBFmVDhTDX04PhH5KAUBfJCtAtnohOlzj7Iabt7yAp+I
HDDus9I5E9rIwF/pTIbIijsyEBIROxB0S5HidALFq6kmq89GmTq74gNWa7scVbs7
fRS6SDAQu1xz4N2PtdbQAGncMH87SUbwHdM3yn7krkGX/b/Zsl7E6UoDgWE3hQqw
9em0VR7zIHcqK9rZXH1joGPdmNLOIkF5zJXEixHggm1JrJ6HpdMy8T+RLZhEgVDo
vW6NCRUHqpAc/sVDVsBPqhE71R5KqRY=
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:45:20 2025 by rpki-client