Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/9757416a-2417-3abe-bad5-fefa520b342e.roa
File:                     9757416a-2417-3abe-bad5-fefa520b342e.roa (raw, json)
Hash identifier:          dFAd1GXyJLIps7jK2iJdLSf53NH0e/ZZ8orvfQE2d0I=
Subject key identifier:   DA:FC:08:00:1C:D1:DA:00:22:4B:F3:84:BC:40:CD:E3:11:88:4E:A6
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F43285849F87A79A4E74051E40A70C600
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/9757416a-2417-3abe-bad5-fefa520b342e.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     40676
IP address blocks:        202.5.24.0/24 maxlen: 24
                          202.5.27.0/24 maxlen: 24
                          202.5.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:79:a4:e7:40:51:e4:0a:70:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=e21b2d68-48dd-4877-b779-76fd4af9216d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a4:46:58:ac:be:85:19:c9:87:4e:4f:7d:0d:
                    fe:5c:72:aa:d1:7e:c9:8d:5b:00:fb:f9:0c:1d:cf:
                    49:ba:77:07:a7:b2:6b:40:70:5a:96:4e:44:17:e7:
                    2e:54:fd:5d:b3:8b:1c:88:bf:a1:8e:15:38:a3:f4:
                    f0:c8:0c:8d:60:15:fd:f7:98:30:34:f8:26:b6:fd:
                    13:83:fe:ce:1a:9c:79:e9:d5:f2:69:30:86:5d:51:
                    62:89:54:02:e6:70:64:bb:5b:99:dd:51:a4:7a:14:
                    43:dd:d5:21:e4:c9:87:dc:93:c3:ec:65:19:0b:ad:
                    c6:d2:38:47:e1:31:41:28:b3:ec:bd:1a:1e:b9:83:
                    a5:71:5d:7c:69:3f:17:3f:aa:b1:0a:e7:61:56:d1:
                    8b:01:38:b6:3b:06:7f:56:40:b1:db:eb:4a:c7:ab:
                    60:34:4a:05:08:a2:91:48:e8:56:e0:50:b9:17:ce:
                    ab:c3:00:1a:59:a2:83:6f:55:3b:06:d7:e7:23:13:
                    df:1c:3d:c8:b7:72:4d:54:1d:9d:bc:a7:20:5c:ff:
                    84:95:f9:45:0b:00:93:28:09:e4:f8:d1:d0:42:b6:
                    93:12:2a:21:5d:5f:0a:61:1f:21:ec:91:56:06:e8:
                    64:69:9e:a7:23:f2:f5:f5:a6:85:72:22:86:5f:6b:
                    1f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FC:08:00:1C:D1:DA:00:22:4B:F3:84:BC:40:CD:E3:11:88:4E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/9757416a-2417-3abe-bad5-fefa520b342e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.24.0/24
                  202.5.27.0/24
                  202.5.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e1:90:35:8f:84:a7:27:46:4c:b1:6d:bf:fa:90:71:74:49:
         25:9e:36:9e:f4:80:22:d4:25:6d:15:8e:2a:8b:e4:89:f6:46:
         e2:75:a7:97:44:a7:52:20:ee:c7:47:a8:ed:2f:a5:47:d7:32:
         17:63:e9:c7:43:af:9d:0f:83:79:dd:d6:af:a1:22:71:3e:7a:
         70:0f:cb:5a:b4:ed:9e:d5:5f:3c:cb:b7:77:9c:14:89:9c:ca:
         04:fd:a8:4d:ad:e1:46:90:73:c6:fb:ac:aa:ba:34:84:97:7a:
         26:1d:d9:98:a0:e4:c7:ba:55:1a:a6:c5:8f:a3:52:38:7f:01:
         44:41:b2:31:62:da:5a:c4:84:59:3d:d2:57:88:a6:13:f4:79:
         5b:80:02:e2:55:32:73:dc:2c:0a:ad:7d:df:75:d2:3a:61:fd:
         81:6d:b2:c7:42:a4:cb:dd:3f:e6:a6:ed:6b:83:fa:8a:fe:c8:
         fb:0d:a3:ac:c7:58:15:e2:d3:cf:f9:42:89:6e:55:d9:a6:70:
         fe:c3:32:cc:e0:aa:0c:fe:4a:15:6a:74:32:18:b4:51:99:b8:
         bb:30:9b:05:34:44:8b:b6:71:5f:c6:b4:99:ce:fe:44:4b:d9:
         61:a6:09:e0:8d:34:0b:ea:36:0e:0d:5d:e2:c9:7f:13:73:3e:
         5d:6c:56:d6
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEn4enmk50BR5ApwxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3
NGJjMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk
ZTIxYjJkNjgtNDhkZC00ODc3LWI3NzktNzZmZDRhZjkyMTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaRGWKy+hRnJh05PfQ3+XHKq0X7JjVsA+/kM
Hc9JuncHp7JrQHBalk5EF+cuVP1ds4sciL+hjhU4o/TwyAyNYBX995gwNPgmtv0T
g/7OGpx56dXyaTCGXVFiiVQC5nBku1uZ3VGkehRD3dUh5MmH3JPD7GUZC63G0jhH
4TFBKLPsvRoeuYOlcV18aT8XP6qxCudhVtGLATi2OwZ/VkCx2+tKx6tgNEoFCKKR
SOhW4FC5F86rwwAaWaKDb1U7BtfnIxPfHD3It3JNVB2dvKcgXP+ElflFCwCTKAnk
+NHQQraTEiohXV8KYR8h7JFWBuhkaZ6nI/L19aaFciKGX2sfIQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFNr8CAAc0doAIkvzhLxAzeMRiE6mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2
NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvOTc1NzQxNmEtMjQxNy0z
YWJlLWJhZDUtZmVmYTUyMGIzNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm
MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl
NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5
NTdkZTc0YmMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAygUYAwQA
ygUbAwQAygUeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAD3hkDWPhKcnRkyxbb/6kHF0SSWeNp70gCLUJW0V
jiqL5In2RuJ1p5dEp1Ig7sdHqO0vpUfXMhdj6cdDr50Pg3nd1q+hInE+enAPy1q0
7Z7VXzzLt3ecFImcygT9qE2t4UaQc8b7rKq6NISXeiYd2Zig5Me6VRqmxY+jUjh/
AURBsjFi2lrEhFk90leIphP0eVuAAuJVMnPcLAqtfd910jph/YFtssdCpMvdP+am
7WuD+or+yPsNo6zHWBXi08/5QoluVdmmcP7DMszgqgz+ShVqdDIYtFGZuLswmwU0
RIu2cV/GtJnO/kRL2WGmCeCNNAvqNg4NXeLJfxNzPl1sVtY=
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:41:07 2025 by rpki-client