Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ebd77ce6-0355-3c1a-b8a9-334d9a25341a.roa
File:                     ebd77ce6-0355-3c1a-b8a9-334d9a25341a.roa (raw, json)
Hash identifier:          veeXDSgpyolXucEe5bjCzLvoJksiXYN8Ksxwlu6IIuE=
Subject key identifier:   87:1A:45:D2:9E:64:37:A0:B7:1D:B2:74:24:30:EF:90:7A:40:FC:81
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F43285849C6A37A00A4065F0AFC589B40
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ebd77ce6-0355-3c1a-b8a9-334d9a25341a.roa
Signing time:             Wed 07 May 2025 16:33:16 +0000
ROA not before:           Wed 07 May 2025 16:33:16 +0000
ROA not after:            Tue 05 Aug 2025 16:33:16 +0000
asID:                     22903
IP address blocks:        204.251.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c6:a3:7a:00:a4:06:5f:0a:fc:58:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: May  7 16:33:16 2025 GMT
            Not After : Aug  5 16:33:16 2025 GMT
        Subject: CN=dbebf779-af97-4ee7-ac89-ed3efdc10002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:21:60:f8:49:d6:8c:0f:2c:e6:1e:db:15:60:
                    cd:24:b8:e7:20:ab:66:85:20:d9:60:31:22:37:9a:
                    05:87:ca:15:63:45:5a:5d:f6:5c:24:f2:c2:24:a9:
                    2d:3f:2a:46:5f:c7:00:15:a1:d1:05:1f:29:d7:6a:
                    da:b2:2c:2f:bf:35:a2:13:de:97:05:93:1e:89:d3:
                    3f:43:fa:50:b8:1c:61:f4:6f:af:bc:78:99:78:e0:
                    f1:2c:aa:01:35:0f:0b:a8:34:8c:8b:02:df:d6:d2:
                    9f:2d:6a:f5:f4:51:8e:a3:c5:98:51:40:f5:c6:00:
                    d1:2f:b9:a0:4c:5a:e8:cd:aa:1d:88:14:79:1f:73:
                    97:2b:70:de:f5:c9:01:28:d2:11:b5:cb:ce:9c:ac:
                    9c:b4:c4:79:3e:1e:a0:bb:d1:ba:d2:c3:8f:6b:dc:
                    c6:42:c2:d0:87:e1:f4:29:46:c3:70:b8:fa:da:50:
                    d0:2e:eb:18:0e:3c:e0:4a:35:9d:e3:94:29:df:72:
                    e1:40:3a:65:2a:13:7c:1f:94:f0:a7:4a:cb:bd:c9:
                    24:fb:2e:09:30:0c:92:94:50:b7:16:45:d0:4d:55:
                    01:6a:1f:9a:ba:28:12:81:61:6a:6e:c4:c0:18:47:
                    69:ba:0e:87:cb:f3:ed:26:b1:d6:4b:10:ce:77:92:
                    ae:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1A:45:D2:9E:64:37:A0:B7:1D:B2:74:24:30:EF:90:7A:40:FC:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ebd77ce6-0355-3c1a-b8a9-334d9a25341a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.251.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:eb:0d:da:56:45:9d:e6:82:17:ee:a0:da:4a:0f:e4:3f:07:
         64:7e:f8:6c:f0:ef:4d:39:b2:73:81:fc:55:4e:e5:01:e4:47:
         e5:82:08:3f:1e:02:f8:e9:cb:d1:cd:fa:69:82:7c:b6:4f:f9:
         e7:a4:f7:f2:43:e1:54:a8:80:fd:e9:de:3d:81:52:14:4b:07:
         f5:53:b6:99:64:69:cf:16:a2:89:e3:66:ec:08:96:24:08:a0:
         fe:33:5c:bd:fa:31:4c:22:67:79:d4:5e:a8:1a:4c:bd:fa:e4:
         55:ea:bf:c8:e4:15:b9:ff:87:5c:ec:51:0e:6b:01:d8:44:01:
         38:77:02:92:e1:57:fd:5b:9a:0c:84:44:f5:8e:08:61:64:e9:
         e1:73:35:6a:99:cc:29:8d:8e:f9:bf:04:f0:0f:5c:1f:63:dd:
         52:36:a0:5a:e7:56:a3:52:83:a3:f9:89:68:e5:25:46:67:b0:
         e1:89:6e:62:0a:49:02:b9:19:81:85:c1:fc:13:91:9b:c8:15:
         46:e7:d0:0e:5b:04:16:15:be:dd:51:08:a6:2d:df:bc:28:59:
         75:d4:a9:cc:08:75:0b:2e:e1:55:63:b6:80:c5:91:4e:c0:7d:
         f0:fe:c8:ab:c5:dd:71:ec:9f:96:c2:3e:28:0a:83:fd:4e:1a:
         7f:8d:6a:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnGo3oApAZfCvxYm0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy
Y2MyMB4XDTI1MDUwNzE2MzMxNloXDTI1MDgwNTE2MzMxNlowLzEtMCsGA1UEAxMk
ZGJlYmY3NzktYWY5Ny00ZWU3LWFjODktZWQzZWZkYzEwMDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCFg+EnWjA8s5h7bFWDNJLjnIKtmhSDZYDEi
N5oFh8oVY0VaXfZcJPLCJKktPypGX8cAFaHRBR8p12rasiwvvzWiE96XBZMeidM/
Q/pQuBxh9G+vvHiZeODxLKoBNQ8LqDSMiwLf1tKfLWr19FGOo8WYUUD1xgDRL7mg
TFrozaodiBR5H3OXK3De9ckBKNIRtcvOnKyctMR5Ph6gu9G60sOPa9zGQsLQh+H0
KUbDcLj62lDQLusYDjzgSjWd45Qp33LhQDplKhN8H5Twp0rLvckk+y4JMAySlFC3
FkXQTVUBah+auigSgWFqbsTAGEdpug6Hy/PtJrHWSxDOd5KuNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIcaRdKeZDegtx2ydCQw75B6QPyBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw
YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZWJkNzdjZTYtMDM1NS0z
YzFhLWI4YTktMzM0ZDlhMjUzNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz
MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1
MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0
NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzPuvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3rDdpWRZ3mghfuoNpKD+Q/B2R++Gzw7005snOB/FVO5QHkR+WCCD8e
Avjpy9HN+mmCfLZP+eek9/JD4VSogP3p3j2BUhRLB/VTtplkac8WoonjZuwIliQI
oP4zXL36MUwiZ3nUXqgaTL365FXqv8jkFbn/h1zsUQ5rAdhEATh3ApLhV/1bmgyE
RPWOCGFk6eFzNWqZzCmNjvm/BPAPXB9j3VI2oFrnVqNSg6P5iWjlJUZnsOGJbmIK
SQK5GYGFwfwTkZvIFUbn0A5bBBYVvt1RCKYt37woWXXUqcwIdQsu4VVjtoDFkU7A
ffD+yKvF3XHsn5bCPigKg/1OGn+Naho=
-----END CERTIFICATE-----
Generated at Sun May 11 05:20:39 2025 by rpki-client