Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72449e5e-c4db-389e-84cf-0740716042cf.roa
File:                     72449e5e-c4db-389e-84cf-0740716042cf.roa (raw, json)
Hash identifier:          CmGzPeCWrhwG0tMgAdwpWGvSNe1069LQpEZqU2grU5M=
Subject key identifier:   28:F7:D5:08:1B:E4:C4:84:FE:F9:1F:AD:B2:A9:FA:0B:02:16:76:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C9544C21211C77D91ED66E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72449e5e-c4db-389e-84cf-0740716042cf.roa
Signing time:             Thu 08 May 2025 15:41:09 +0000
ROA not before:           Thu 08 May 2025 15:41:09 +0000
ROA not after:            Wed 06 Aug 2025 15:41:09 +0000
asID:                     25485
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:54:4c:21:21:1c:77:d9:1e:d6:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  8 15:41:09 2025 GMT
            Not After : Aug  6 15:41:09 2025 GMT
        Subject: CN=21e35b0c-b05b-47a3-a4fb-4126d813d73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:ab:fe:00:e9:e7:0b:69:7f:80:84:a9:26:
                    38:b5:46:d4:7a:5b:98:a0:d0:08:b5:75:e6:39:c2:
                    ac:f8:67:02:13:1f:3d:c0:9b:28:72:6a:66:d3:36:
                    69:a6:28:6f:74:0f:72:ec:83:0a:9b:83:af:e7:6b:
                    37:9b:51:06:b0:5c:ea:4d:20:2c:90:41:1d:35:19:
                    7d:f0:1b:33:e9:b4:a0:9d:dc:ec:ed:cc:95:ec:30:
                    17:d5:83:b1:9a:b0:0b:5e:6c:e0:99:c5:df:99:c5:
                    3a:ce:f0:77:34:0a:8f:88:02:60:4c:54:a5:8a:fe:
                    80:d7:c5:c1:73:35:cf:0f:42:c5:7c:d2:35:dd:b8:
                    f7:a0:05:26:f3:f8:34:54:73:b5:6a:dc:07:62:ee:
                    fb:e9:d7:40:50:34:4b:5b:42:d1:d6:42:f0:5d:1d:
                    6c:d0:a6:6c:4c:70:0a:dc:a2:1d:e6:2c:9c:99:18:
                    59:33:e9:4a:05:b7:19:5d:bf:2f:f0:f1:fe:2a:87:
                    7b:61:54:84:3a:68:49:4f:d8:53:17:7d:b4:b9:01:
                    68:9b:12:cc:5d:43:4b:af:27:7b:b1:95:79:1a:92:
                    73:c3:2c:e4:dd:cc:93:76:4e:fc:69:14:40:6e:73:
                    84:92:6a:49:46:de:3b:fe:6a:42:0a:6c:60:9e:ed:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F7:D5:08:1B:E4:C4:84:FE:F9:1F:AD:B2:A9:FA:0B:02:16:76:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72449e5e-c4db-389e-84cf-0740716042cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c4:56:21:f3:46:9c:eb:32:98:5c:c1:56:bb:be:24:e6:9a:
         13:73:07:b5:53:2c:78:0b:4d:34:1a:c2:69:f4:1d:d0:ed:a3:
         1a:13:08:7a:17:75:cd:74:20:8b:f0:62:3e:2b:32:b0:69:b9:
         27:b0:81:d5:01:84:77:80:95:1c:52:0c:66:16:9e:8e:27:f3:
         ee:52:91:61:7e:a5:e7:a2:4e:55:0d:c5:36:34:81:da:d5:b8:
         ad:29:98:e9:59:17:9a:cb:c8:58:a2:17:b5:a0:4d:8f:c9:88:
         2c:80:5c:16:a3:91:b0:c2:85:d3:20:0b:f9:c0:99:be:3e:a2:
         9a:01:4a:d2:20:49:45:54:24:28:e8:bf:2f:03:bb:28:12:8b:
         9a:18:4b:e6:e4:65:03:af:96:fb:79:ee:a1:e7:0b:3b:13:08:
         07:44:83:ed:bd:1b:6b:dd:c2:a0:ad:d3:a5:52:b4:41:38:95:
         0b:08:bb:46:b7:c0:62:13:86:50:72:05:c3:33:79:66:20:64:
         e2:d9:8e:56:1c:e8:40:4b:21:85:6a:af:d7:56:7a:55:fd:6c:
         d0:c2:69:81:03:01:08:03:da:b0:e5:f4:85:35:dd:73:9b:f2:
         26:3d:b5:f5:5c:ce:34:2b:96:11:d2:66:62:7c:ea:95:24:da:
         ce:a6:8f:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJVEwhIRx32R7WbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUwODE1NDEwOVoXDTI1MDgwNjE1NDEwOVowLzEtMCsGA1UEAxMk
MjFlMzViMGMtYjA1Yi00N2EzLWE0ZmItNDEyNmQ4MTNkNzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshOr/gDp5wtpf4CEqSY4tUbUeluYoNAItXXm
OcKs+GcCEx89wJsocmpm0zZppihvdA9y7IMKm4Ov52s3m1EGsFzqTSAskEEdNRl9
8Bsz6bSgndzs7cyV7DAX1YOxmrALXmzgmcXfmcU6zvB3NAqPiAJgTFSliv6A18XB
czXPD0LFfNI13bj3oAUm8/g0VHO1atwHYu776ddAUDRLW0LR1kLwXR1s0KZsTHAK
3KId5iycmRhZM+lKBbcZXb8v8PH+Kod7YVSEOmhJT9hTF320uQFomxLMXUNLryd7
sZV5GpJzwyzk3cyTdk78aRRAbnOEkmpJRt47/mpCCmxgnu0ZtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCj31Qgb5MSE/vkfrbKp+gsCFna4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzI0NDllNWUtYzRkYi0z
ODllLTg0Y2YtMDc0MDcxNjA0MmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHrEViHzRpzrMphcwVa7viTmmhNzB7VTLHgLTTQawmn0HdDtoxoTCHoX
dc10IIvwYj4rMrBpuSewgdUBhHeAlRxSDGYWno4n8+5SkWF+peeiTlUNxTY0gdrV
uK0pmOlZF5rLyFiiF7WgTY/JiCyAXBajkbDChdMgC/nAmb4+opoBStIgSUVUJCjo
vy8DuygSi5oYS+bkZQOvlvt57qHnCzsTCAdEg+29G2vdwqCt06VStEE4lQsIu0a3
wGIThlByBcMzeWYgZOLZjlYc6EBLIYVqr9dWelX9bNDCaYEDAQgD2rDl9IU13XOb
8iY9tfVczjQrlhHSZmJ86pUk2s6mj+k=
-----END CERTIFICATE-----
Generated at Sun May 11 06:12:51 2025 by rpki-client