Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822/91a392ad-4f56-3d13-89cf-a95fc1cf573c.roa
File:                     91a392ad-4f56-3d13-89cf-a95fc1cf573c.roa (raw, json)
Hash identifier:          fNk55NK3APKXo1Zfw6wcoGmK54nX9V5UdIwBYzsbab0=
Subject key identifier:   58:98:8D:47:71:A6:C4:83:05:4C:2F:B0:CE:DE:AC:14:CD:83:37:44
Certificate issuer:       /CN=4da678cc-bb39-4893-b12b-7aba94870822
Certificate serial:       010D0C9F43285849F17FC1786D46454B87AD9C80
Authority key identifier: 0C:09:6F:58:87:96:6C:6C:51:5B:79:F0:1C:5F:D9:CF:29:E1:6C:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822/91a392ad-4f56-3d13-89cf-a95fc1cf573c.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397554
IP address blocks:        192.52.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822/4da678cc-bb39-4893-b12b-7aba94870822.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822/4da678cc-bb39-4893-b12b-7aba94870822.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c1:78:6d:46:45:4b:87:ad:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da678cc-bb39-4893-b12b-7aba94870822
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=17d72760-f8ef-4c63-9898-e37096f4288d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:14:ab:c2:33:9e:6e:38:04:8c:36:fc:9c:60:
                    43:62:19:e7:4c:7c:52:bf:4c:f7:6e:57:06:a8:7a:
                    a2:0a:12:b7:64:96:14:91:4b:4e:b6:6a:39:2e:59:
                    1f:6e:17:d1:9c:ec:08:e3:6d:62:be:3c:a7:2f:4a:
                    67:4d:b2:90:c8:52:f6:d1:68:d1:2a:1a:7e:90:95:
                    89:09:24:e8:2e:99:5a:10:df:b9:c5:65:b1:56:ce:
                    34:d1:c4:4b:83:4b:90:8b:33:ea:4c:86:70:d7:a8:
                    6e:26:26:a6:58:d7:b3:e2:04:33:17:9f:34:cc:9b:
                    c9:5a:6a:37:04:bd:27:35:dd:89:13:1d:62:6c:84:
                    8b:db:d0:4a:4f:d4:cf:6f:3a:59:26:33:87:65:46:
                    64:b6:64:d5:3f:ed:f2:28:88:b0:77:0a:4b:46:9f:
                    f0:61:dc:20:db:ab:9c:cd:ec:6e:68:f5:c3:28:5a:
                    72:ad:6a:50:50:e1:34:3a:9d:b1:35:e5:78:4a:27:
                    e5:f4:2e:b2:16:cf:45:c0:1c:e3:91:04:b5:f0:a5:
                    99:6b:a1:89:a2:6c:69:82:6a:c2:cc:6f:ef:7d:dd:
                    b7:f5:46:34:36:6c:a7:c2:de:31:a5:e0:60:26:5f:
                    f8:be:d0:54:a7:f7:51:7c:de:7e:b8:57:6b:8c:a8:
                    da:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:98:8D:47:71:A6:C4:83:05:4C:2F:B0:CE:DE:AC:14:CD:83:37:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822/91a392ad-4f56-3d13-89cf-a95fc1cf573c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822/4da678cc-bb39-4893-b12b-7aba94870822.crl

            X509v3 Authority Key Identifier:
                keyid:0C:09:6F:58:87:96:6C:6C:51:5B:79:F0:1C:5F:D9:CF:29:E1:6C:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4da678cc-bb39-4893-b12b-7aba94870822.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:39:ea:7c:76:e5:f6:6a:f8:a6:ec:63:f3:34:73:6b:f4:d4:
         2d:0e:73:8f:d6:0f:1b:94:10:99:60:f7:53:41:05:c4:72:03:
         7e:59:b8:e6:7b:b5:0a:12:88:d1:55:aa:8b:5d:fe:c7:c3:b9:
         57:1a:9a:90:18:29:5e:9a:da:19:25:d7:6a:78:68:c9:09:0a:
         bd:6a:03:81:4e:0a:3b:14:88:23:e7:e5:46:66:8a:87:49:df:
         1e:98:7f:b6:5d:b2:57:0b:c3:7d:f6:8e:d6:d0:64:4c:58:52:
         4f:7f:86:6b:61:c9:ff:6c:cb:df:31:b1:99:00:fb:0d:39:73:
         4f:3e:9a:7e:cd:8a:e6:5e:d5:b4:b2:04:57:a0:4a:42:e8:5d:
         f0:ba:e5:72:17:00:0a:79:a0:8c:e7:35:f1:45:b8:3f:01:2b:
         f4:ae:0e:1f:2d:08:80:5d:c9:7c:d4:b4:c5:98:7b:a8:58:f4:
         e2:d7:61:c0:09:9e:dc:b2:47:00:e4:7d:da:f0:be:6f:5f:43:
         64:a1:90:90:28:96:7c:cf:96:bf:5c:fe:f7:16:91:44:e7:65:
         96:73:5d:0b:d4:6a:77:78:c6:38:ce:b4:de:da:98:5a:f4:e1:
         d5:db:95:b7:9e:22:1d:f6:bb:2c:9c:65:74:8e:32:cf:bc:3f:
         64:e5:e7:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8F4bUZFS4etnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGRhNjc4Y2MtYmIzOS00ODkzLWIxMmItN2FiYTk0ODcw
ODIyMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
MTdkNzI3NjAtZjhlZi00YzYzLTk4OTgtZTM3MDk2ZjQyODhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RSrwjOebjgEjDb8nGBDYhnnTHxSv0z3blcG
qHqiChK3ZJYUkUtOtmo5LlkfbhfRnOwI421ivjynL0pnTbKQyFL20WjRKhp+kJWJ
CSToLplaEN+5xWWxVs400cRLg0uQizPqTIZw16huJiamWNez4gQzF580zJvJWmo3
BL0nNd2JEx1ibISL29BKT9TPbzpZJjOHZUZktmTVP+3yKIiwdwpLRp/wYdwg26uc
zexuaPXDKFpyrWpQUOE0Op2xNeV4Sifl9C6yFs9FwBzjkQS18KWZa6GJomxpgmrC
zG/vfd239UY0Nmynwt4xpeBgJl/4vtBUp/dRfN5+uFdrjKja3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFiYjUdxpsSDBUwvsM7erBTNgzdEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80ZGE2
NzhjYy1iYjM5LTQ4OTMtYjEyYi03YWJhOTQ4NzA4MjIvOTFhMzkyYWQtNGY1Ni0z
ZDEzLTg5Y2YtYTk1ZmMxY2Y1NzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGRhNjc4Y2MtYmIzOS00ODkzLWIx
MmItN2FiYTk0ODcwODIyLzRkYTY3OGNjLWJiMzktNDg5My1iMTJiLTdhYmE5NDg3
MDgyMi5jcmwwHwYDVR0jBBgwFoAUDAlvWIeWbGxRW3nwHF/ZzynhbN4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80ZGE2NzhjYy1iYjM5LTQ4OTMtYjEyYi03YWJh
OTQ4NzA4MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDT6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOM56nx25fZq+KbsY/M0c2v01C0Oc4/WDxuUEJlg91NBBcRyA35ZuOZ7
tQoSiNFVqotd/sfDuVcampAYKV6a2hkl12p4aMkJCr1qA4FOCjsUiCPn5UZmiodJ
3x6Yf7ZdslcLw332jtbQZExYUk9/hmthyf9sy98xsZkA+w05c08+mn7NiuZe1bSy
BFegSkLoXfC65XIXAAp5oIznNfFFuD8BK/SuDh8tCIBdyXzUtMWYe6hY9OLXYcAJ
ntyyRwDkfdrwvm9fQ2ShkJAolnzPlr9c/vcWkUTnZZZzXQvUand4xjjOtN7amFr0
4dXblbeeIh32uyycZXSOMs+8P2Tl570=
-----END CERTIFICATE-----
Generated at Tue Jul 1 02:31:54 2025 by rpki-client