Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2009ebc9-d4a1-38a4-a8d7-4b0858e107cf.roa
File:                     2009ebc9-d4a1-38a4-a8d7-4b0858e107cf.roa (raw, json)
Hash identifier:          H9nYYS5tig6NVKLULorcomY/IJsiqkZAQE6ivY80U/w=
Subject key identifier:   DC:2F:F1:9E:CC:8E:95:35:F6:45:05:89:BB:7C:51:BA:35:28:35:DE
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849D85FA259C85603835F47F0C0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2009ebc9-d4a1-38a4-a8d7-4b0858e107cf.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     25899
IP address blocks:        216.110.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a2:59:c8:56:03:83:5f:47:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=0998bd8a-a606-47c5-854f-ad5f4dd46682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:5b:f5:78:86:fa:8d:6b:14:41:b1:e3:a7:
                    c8:f2:1e:4e:f6:9c:b2:c0:3e:3e:a3:01:d3:83:24:
                    42:ab:e6:c6:2d:6c:9e:5f:10:92:5f:19:66:26:06:
                    fb:45:30:81:59:51:c6:e5:f4:93:3e:59:36:87:a4:
                    ba:c8:50:26:d4:cc:b1:ba:b2:a1:f0:d7:a9:27:48:
                    10:1e:a1:ab:e7:93:61:4a:c5:61:b4:e2:33:1f:cd:
                    db:9c:e0:c9:d2:74:9d:d2:8e:68:43:2c:09:fc:6d:
                    ed:7c:4a:bb:51:5a:0f:3b:a3:9d:56:04:24:07:9b:
                    c8:bc:cc:c2:c4:18:51:a4:b1:12:13:f4:b4:2a:b3:
                    87:0c:6f:c6:ee:33:5b:50:80:4c:4e:37:24:44:a6:
                    ce:3d:93:38:f2:11:b7:5c:58:01:04:02:6f:8a:92:
                    23:b2:03:43:51:c9:f4:87:e6:c2:1a:e9:61:4b:a3:
                    48:a8:25:8d:18:ca:f9:6b:e5:32:ef:7c:28:15:0a:
                    fe:b4:d3:fb:e9:9e:76:8e:48:b5:24:5c:e6:b0:82:
                    01:7a:41:5c:99:bb:93:ea:3b:5b:a9:50:bb:7e:76:
                    48:54:39:fd:a8:21:49:2d:96:30:8a:9b:52:62:74:
                    88:a6:80:c9:7a:ff:db:fb:9d:07:93:92:40:8b:81:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2F:F1:9E:CC:8E:95:35:F6:45:05:89:BB:7C:51:BA:35:28:35:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2009ebc9-d4a1-38a4-a8d7-4b0858e107cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c3:61:74:92:cb:45:a4:98:20:63:1e:a3:fe:ae:86:be:e1:
         0c:a0:eb:08:3a:20:bf:0a:83:7d:e1:a5:89:35:1f:35:69:7e:
         f7:30:aa:3b:11:83:3b:4c:86:cb:49:32:13:b6:e6:b9:bb:62:
         8f:ec:0f:d5:5a:63:68:20:3f:cc:a0:fc:1f:09:c4:3c:a1:14:
         4a:8b:d3:8d:64:ca:6f:7b:35:14:00:50:ae:98:a4:f1:d4:33:
         31:9f:90:50:9b:35:df:22:ad:7c:ff:0a:80:76:e8:43:14:36:
         ed:93:44:c3:12:df:d0:80:d6:85:68:08:10:03:a2:58:0e:64:
         37:05:25:0e:66:84:d4:c7:b8:2d:f8:9b:66:52:3b:91:22:62:
         16:43:f3:f0:16:d7:b4:14:da:99:dc:53:ec:6a:84:25:b1:76:
         69:f8:ea:6b:db:64:95:11:d6:5e:cc:10:ef:99:3b:b4:a6:56:
         b4:f9:e1:15:60:8c:1b:a5:a1:2e:06:d6:ab:d8:0f:31:e4:dc:
         68:39:9b:79:10:ff:3f:95:64:4d:3c:9d:32:9c:fc:2a:8a:55:
         e6:63:e3:83:e5:b4:9a:99:ef:ae:31:66:c0:e8:00:af:42:e8:
         f3:cf:dc:f0:be:b8:44:4d:45:da:65:c3:3f:e1:4d:7e:9f:d0:
         10:54:aa:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6JZyFYDg19H8MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
MDk5OGJkOGEtYTYwNi00N2M1LTg1NGYtYWQ1ZjRkZDQ2NjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr29b9XiG+o1rFEGx46fI8h5O9pyywD4+owHT
gyRCq+bGLWyeXxCSXxlmJgb7RTCBWVHG5fSTPlk2h6S6yFAm1MyxurKh8NepJ0gQ
HqGr55NhSsVhtOIzH83bnODJ0nSd0o5oQywJ/G3tfEq7UVoPO6OdVgQkB5vIvMzC
xBhRpLESE/S0KrOHDG/G7jNbUIBMTjckRKbOPZM48hG3XFgBBAJvipIjsgNDUcn0
h+bCGulhS6NIqCWNGMr5a+Uy73woFQr+tNP76Z52jki1JFzmsIIBekFcmbuT6jtb
qVC7fnZIVDn9qCFJLZYwiptSYnSIpoDJev/b+50Hk5JAi4HNlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwv8Z7MjpU19kUFibt8Ubo1KDXeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMjAwOWViYzktZDRhMS0z
OGE0LWE4ZDctNGIwODU4ZTEwN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2G7MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfDYXSSy0WkmCBjHqP+roa+4Qyg6wg6IL8Kg33hpYk1HzVpfvcwqjsR
gztMhstJMhO25rm7Yo/sD9VaY2ggP8yg/B8JxDyhFEqL041kym97NRQAUK6YpPHU
MzGfkFCbNd8irXz/CoB26EMUNu2TRMMS39CA1oVoCBADolgOZDcFJQ5mhNTHuC34
m2ZSO5EiYhZD8/AW17QU2pncU+xqhCWxdmn46mvbZJUR1l7MEO+ZO7SmVrT54RVg
jBuloS4G1qvYDzHk3Gg5m3kQ/z+VZE08nTKc/CqKVeZj44PltJqZ764xZsDoAK9C
6PPP3PC+uERNRdplwz/hTX6f0BBUqqc=
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:44:19 2025 by rpki-client