Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/06819075-300b-33ec-ba63-9e81b352b7e1.roa
File:                     06819075-300b-33ec-ba63-9e81b352b7e1.roa (raw, json)
Hash identifier:          +/Ce/heKoFI61cy+vFZf452VC1QXaBIbMEPqaWdZldo=
Subject key identifier:   9F:A4:B8:92:12:99:64:1D:9D:86:42:C8:9E:26:49:58:33:32:FE:8B
Certificate issuer:       /CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
Certificate serial:       010D0C9F43285849BDDA2B6311EB7E666B349A00
Authority key identifier: A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/06819075-300b-33ec-ba63-9e81b352b7e1.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     26548
IP address blocks:        169.197.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:2b:63:11:eb:7e:66:6b:34:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=92b2a983-e5cf-4781-b1a1-6d3b01af6aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b1:a9:e2:4a:e6:02:a1:f7:78:f0:31:b0:e5:
                    29:af:30:08:74:2e:03:e0:80:42:6e:02:76:af:1a:
                    b5:d2:c7:f0:8e:c7:33:e5:e7:4d:21:7c:5f:9d:37:
                    51:4d:a5:8e:a8:6b:e5:47:42:87:17:03:eb:a9:e4:
                    43:7b:e9:b4:58:81:76:32:10:f9:c2:c8:47:0a:0c:
                    41:9c:d6:15:f0:da:1c:53:81:71:34:c0:ab:74:db:
                    25:bb:cd:ab:2f:53:0c:1d:82:5d:7c:6a:83:d6:c7:
                    57:e7:ca:6c:fa:1a:0d:03:af:26:08:41:2a:ee:e5:
                    a0:e0:13:85:98:16:32:16:6f:e7:60:71:90:f7:bd:
                    bd:53:17:1f:d7:87:00:38:9b:88:c6:1e:fc:62:8d:
                    dc:00:29:2d:e2:6e:4f:4f:e2:75:d6:36:1f:30:24:
                    ef:0f:cd:75:77:25:d2:d5:4f:d8:de:95:3e:b8:5e:
                    02:8b:0d:92:0d:6b:02:d3:60:d9:7c:3a:6a:e4:a8:
                    b1:80:f3:4d:01:be:56:73:18:c4:c7:78:5c:c5:3c:
                    f7:ae:be:34:04:e9:a3:79:07:72:7a:d5:4f:61:d0:
                    13:b7:9f:de:bb:51:85:96:2f:3d:bf:b0:9a:21:2e:
                    12:79:de:2d:e1:eb:15:1e:db:89:6b:a0:ef:68:ff:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A4:B8:92:12:99:64:1D:9D:86:42:C8:9E:26:49:58:33:32:FE:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/06819075-300b-33ec-ba63-9e81b352b7e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:cb:2f:29:93:08:23:27:c5:01:d9:15:f2:bf:44:d4:4e:2b:
         1b:15:fb:60:60:a1:56:a3:26:35:90:1c:c7:3d:c6:6f:b6:72:
         aa:72:f5:ba:cd:93:bd:8f:e0:e2:d8:6d:ee:4c:13:5e:87:67:
         a1:0c:b7:6a:7f:ec:a5:2a:ed:a6:e3:09:d6:ed:0c:e9:99:d1:
         7e:47:20:31:fa:d6:f5:d6:6b:59:44:65:d3:8d:5c:a0:84:b6:
         9f:69:25:76:b7:e2:a6:02:1c:c2:97:85:92:5b:4c:1d:bf:be:
         09:ba:f9:95:11:02:21:9e:4d:0c:d4:2c:26:c9:46:1f:74:a8:
         de:d2:3e:dd:2c:a1:dc:5e:e1:05:f9:88:14:2d:e0:f0:1a:7b:
         1b:05:2b:ad:15:42:85:70:98:ae:8b:79:e0:b0:03:12:9a:d9:
         8a:1e:1c:f4:8d:38:ad:b2:ce:a7:a9:19:b7:11:06:1f:9b:d7:
         02:43:a6:40:28:3f:85:fd:6d:e1:6a:a7:f2:ce:df:58:44:f2:
         a9:f1:0c:10:4a:27:90:f6:c6:f0:04:e2:f3:0a:bc:15:1c:5c:
         ba:7e:c6:1f:da:2b:a2:c9:f8:83:fc:a3:6c:ea:c3:b1:1e:a3:
         95:db:af:9f:43:65:69:a6:31:cf:c5:f7:82:a0:8d:ac:3e:b5:
         6c:7f:d8:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92itjEet+Zms0mgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM4YzdjYTQtM2E0MS00MTM0LWExMjctODFkYzE0MGJj
N2E5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk
OTJiMmE5ODMtZTVjZi00NzgxLWIxYTEtNmQzYjAxYWY2YWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bGp4krmAqH3ePAxsOUprzAIdC4D4IBCbgJ2
rxq10sfwjscz5edNIXxfnTdRTaWOqGvlR0KHFwPrqeRDe+m0WIF2MhD5wshHCgxB
nNYV8NocU4FxNMCrdNslu82rL1MMHYJdfGqD1sdX58ps+hoNA68mCEEq7uWg4BOF
mBYyFm/nYHGQ9729Uxcf14cAOJuIxh78Yo3cACkt4m5PT+J11jYfMCTvD811dyXS
1U/Y3pU+uF4Ciw2SDWsC02DZfDpq5KixgPNNAb5WcxjEx3hcxTz3rr40BOmjeQdy
etVPYdATt5/eu1GFli89v7CaIS4Sed4t4esVHtuJa6DvaP//MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+kuJISmWQdnYZCyJ4mSVgzMv6LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzhj
N2NhNC0zYTQxLTQxMzQtYTEyNy04MWRjMTQwYmM3YTkvMDY4MTkwNzUtMzAwYi0z
M2VjLWJhNjMtOWU4MWIzNTJiN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM4YzdjYTQtM2E0MS00MTM0LWEx
MjctODFkYzE0MGJjN2E5L2YzOGM3Y2E0LTNhNDEtNDEzNC1hMTI3LTgxZGMxNDBi
YzdhOS5jcmwwHwYDVR0jBBgwFoAUocfcL5AVBoPAPHxbaIA+jBhWHHkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzhjN2NhNC0zYTQxLTQxMzQtYTEyNy04MWRj
MTQwYmM3YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqcW4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHLLymTCCMnxQHZFfK/RNROKxsV+2BgoVajJjWQHMc9xm+2cqpy9brN
k72P4OLYbe5ME16HZ6EMt2p/7KUq7abjCdbtDOmZ0X5HIDH61vXWa1lEZdONXKCE
tp9pJXa34qYCHMKXhZJbTB2/vgm6+ZURAiGeTQzULCbJRh90qN7SPt0sodxe4QX5
iBQt4PAaexsFK60VQoVwmK6LeeCwAxKa2YoeHPSNOK2yzqepGbcRBh+b1wJDpkAo
P4X9beFqp/LO31hE8qnxDBBKJ5D2xvAE4vMKvBUcXLp+xh/aK6LJ+IP8o2zqw7Ee
o5Xbr59DZWmmMc/F94Kgjaw+tWx/2Nw=
-----END CERTIFICATE-----
Generated at Mon May 12 19:58:26 2025 by rpki-client