Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/a71480e2-3165-3f8a-a371-6248b3e64558.roa
File:                     a71480e2-3165-3f8a-a371-6248b3e64558.roa (raw, json)
Hash identifier:          fd5uDm83Ay0WSLF8M8RgspO5+EQ3NjQpFU4m04osNLk=
Subject key identifier:   84:53:99:76:7F:C0:24:D1:01:81:71:C7:6B:06:DE:0A:D9:68:60:86
Certificate issuer:       /CN=512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2
Certificate serial:       010D0C9F4328584996C4B2221BC271C5A1DBDF80
Authority key identifier: 08:DE:39:A7:0E:01:3D:8D:65:B0:9E:22:68:F7:61:28:97:EE:3E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/a71480e2-3165-3f8a-a371-6248b3e64558.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     400948
IP address blocks:        205.236.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:b2:22:1b:c2:71:c5:a1:db:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=b9c542b9-707d-481b-8266-39b5fa5266d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:d0:20:da:27:73:27:33:9d:94:c9:56:4b:
                    07:8a:84:60:a0:26:4d:02:93:93:1d:64:95:82:c3:
                    bd:22:5d:67:38:a9:2e:33:aa:c8:c4:27:1c:6d:fc:
                    93:3c:fe:d9:a3:58:93:41:68:ac:df:2d:de:48:8b:
                    4b:15:08:c5:0a:a9:a6:50:79:c1:92:8f:13:2a:df:
                    3e:cb:25:9a:57:de:1a:a9:03:f9:1b:9e:cc:aa:69:
                    ce:0b:9e:28:e2:e9:36:0b:80:ab:09:f6:bc:81:61:
                    6f:08:ca:e3:67:18:9a:58:5f:e6:e1:08:ca:ff:3b:
                    dd:90:5e:fd:2b:b0:68:25:34:39:dd:e1:b6:f9:15:
                    fb:a2:b7:41:5e:ca:66:9f:99:34:55:c2:95:2a:86:
                    de:f4:8c:6a:0a:39:d6:0b:71:88:9b:4d:56:e4:17:
                    43:df:5a:61:21:07:e2:6f:a3:08:7e:1a:1e:4e:7e:
                    2c:24:5e:22:96:b2:26:bb:48:16:ad:df:ac:29:19:
                    37:66:8e:3a:0c:b4:95:52:fd:b0:da:0b:a4:e4:3b:
                    e1:21:7e:1d:0f:14:e8:5b:4c:4c:7c:ec:50:d9:7e:
                    9f:05:e5:03:0e:06:65:0b:52:be:d6:bf:35:cc:d3:
                    ec:4e:ff:5c:f6:af:40:57:31:5a:49:ad:66:56:22:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:53:99:76:7F:C0:24:D1:01:81:71:C7:6B:06:DE:0A:D9:68:60:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/a71480e2-3165-3f8a-a371-6248b3e64558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.crl

            X509v3 Authority Key Identifier:
                keyid:08:DE:39:A7:0E:01:3D:8D:65:B0:9E:22:68:F7:61:28:97:EE:3E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:80:f0:73:0c:66:28:99:62:42:30:7f:77:10:f2:8f:93:
         6d:cb:b5:67:d1:f5:24:38:b1:91:a4:9f:42:cf:78:0d:f2:0a:
         cd:2b:8f:c2:a8:20:9e:30:37:5b:3c:3c:6c:b3:96:87:b0:c5:
         41:4f:f1:04:5c:29:65:d4:8b:14:10:ab:55:fa:8e:43:e4:38:
         aa:0e:a9:ac:8a:ab:13:87:65:6e:f8:c2:34:56:15:ee:25:67:
         f9:58:2f:05:ed:91:af:e3:b3:49:d5:2a:eb:51:12:37:8f:da:
         e6:a0:ab:9e:f0:64:2b:0e:80:83:6a:54:b8:c4:9b:f3:aa:ce:
         a0:02:87:c6:7f:a4:97:aa:6a:5b:e1:18:4e:df:38:dc:ad:8a:
         a2:3f:ca:4d:07:2e:f9:2a:95:1f:27:7f:e9:18:d4:1e:3f:29:
         c2:b6:be:71:83:1c:0d:2d:9c:c9:39:e4:b9:8d:08:35:16:8e:
         73:6c:c0:17:08:58:61:97:2b:f7:6e:58:86:72:78:4b:7f:b6:
         be:71:2d:e1:b0:b0:f4:24:7f:fc:ea:e2:fe:6e:04:58:68:0b:
         19:ec:94:e4:f0:44:33:d3:a4:37:62:3e:84:7f:35:46:f6:23:
         35:9a:24:73:61:aa:4f:b2:8a:3a:a4:df:e4:7b:cb:3e:71:78:
         20:c8:9b:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLIiG8JxxaHb34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTEyYjI3ODMtYWEwYy00M2Q1LWI2MWQtNGZlMmM4YTNh
M2QyMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
YjljNTQyYjktNzA3ZC00ODFiLTgyNjYtMzliNWZhNTI2NmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxnQINoncycznZTJVksHioRgoCZNApOTHWSV
gsO9Il1nOKkuM6rIxCccbfyTPP7Zo1iTQWis3y3eSItLFQjFCqmmUHnBko8TKt8+
yyWaV94aqQP5G57MqmnOC54o4uk2C4CrCfa8gWFvCMrjZxiaWF/m4QjK/zvdkF79
K7BoJTQ53eG2+RX7ordBXspmn5k0VcKVKobe9IxqCjnWC3GIm01W5BdD31phIQfi
b6MIfhoeTn4sJF4ilrImu0gWrd+sKRk3Zo46DLSVUv2w2guk5DvhIX4dDxToW0xM
fOxQ2X6fBeUDDgZlC1K+1r81zNPsTv9c9q9AVzFaSa1mViICkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRTmXZ/wCTRAYFxx2sG3grZaGCGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MTJi
Mjc4My1hYTBjLTQzZDUtYjYxZC00ZmUyYzhhM2EzZDIvYTcxNDgwZTItMzE2NS0z
ZjhhLWEzNzEtNjI0OGIzZTY0NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTEyYjI3ODMtYWEwYy00M2Q1LWI2
MWQtNGZlMmM4YTNhM2QyLzUxMmIyNzgzLWFhMGMtNDNkNS1iNjFkLTRmZTJjOGEz
YTNkMi5jcmwwHwYDVR0jBBgwFoAUCN45pw4BPY1lsJ4iaPdhKJfuPpkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81MTJiMjc4My1hYTBjLTQzZDUtYjYxZC00ZmUy
YzhhM2EzZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzeyFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGb6gPBzDGYomWJCMH93EPKPk23LtWfR9SQ4sZGkn0LPeA3yCs0rj8Ko
IJ4wN1s8PGyzloewxUFP8QRcKWXUixQQq1X6jkPkOKoOqayKqxOHZW74wjRWFe4l
Z/lYLwXtka/js0nVKutREjeP2uagq57wZCsOgINqVLjEm/OqzqACh8Z/pJeqalvh
GE7fONytiqI/yk0HLvkqlR8nf+kY1B4/KcK2vnGDHA0tnMk55LmNCDUWjnNswBcI
WGGXK/duWIZyeEt/tr5xLeGwsPQkf/zq4v5uBFhoCxnslOTwRDPTpDdiPoR/NUb2
IzWaJHNhqk+yijqk3+R7yz5xeCDIm5A=
-----END CERTIFICATE-----
Generated at Thu May 8 15:17:56 2025 by rpki-client