Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/dd57c202-e1c7-37cf-abac-38faeee3e44d.roa
File:                     dd57c202-e1c7-37cf-abac-38faeee3e44d.roa (raw, json)
Hash identifier:          QscH4Jmr7xnjk0FXvMqjT+emzpo7Azf55w4/JfiE72g=
Subject key identifier:   4F:AA:1D:8F:53:91:8C:87:D6:CE:DC:60:8E:2F:27:27:A8:45:EB:8C
Certificate issuer:       /CN=5d613e84-be93-4d7a-a56c-57a378f2c325
Certificate serial:       010D0C9F43285849F7151D32CF6E9676C31E1480
Authority key identifier: 83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/dd57c202-e1c7-37cf-abac-38faeee3e44d.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     23188
IP address blocks:        206.83.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:1d:32:cf:6e:96:76:c3:1e:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d613e84-be93-4d7a-a56c-57a378f2c325
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=59ccfc4b-aa62-464f-9bd4-54c104ed182c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:b2:09:71:34:9a:a2:f8:59:e7:23:a9:82:
                    0c:97:c0:de:39:79:d8:e9:9a:ec:61:ad:da:2b:87:
                    6d:06:4e:03:8a:1f:6f:83:60:d6:eb:76:90:cc:ba:
                    9f:55:b0:86:d7:f1:72:04:07:16:23:ee:65:f8:3c:
                    d0:da:ac:5f:9a:58:4a:a1:64:31:07:94:d6:8d:77:
                    41:b5:5f:83:d2:2f:dc:ea:17:63:7a:17:b1:ea:0e:
                    e8:87:ad:48:a9:0f:48:0b:cb:8c:eb:80:1a:87:48:
                    54:90:59:4b:85:4f:2f:35:2e:58:89:a0:b2:6a:16:
                    59:17:f3:95:42:42:77:62:01:d3:4c:80:cf:ed:de:
                    fd:8c:32:42:90:c0:be:51:b7:9a:2c:67:1f:91:e1:
                    7e:1d:53:8d:03:5c:ab:79:29:2b:f2:d5:94:b5:28:
                    f6:89:44:a6:dc:2c:99:82:ab:cc:4f:1f:a5:9e:7b:
                    33:2b:01:d5:52:ec:8c:b1:2d:74:1f:c8:16:73:81:
                    76:09:f1:cc:de:97:24:9b:35:bf:f9:bd:14:90:39:
                    2c:39:aa:aa:42:3f:da:af:2b:de:a4:09:be:a0:77:
                    88:64:85:74:4a:bc:85:c2:08:22:fe:72:e9:26:7b:
                    2c:08:d9:83:b0:69:f1:7d:e0:36:2c:97:e9:09:55:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AA:1D:8F:53:91:8C:87:D6:CE:DC:60:8E:2F:27:27:A8:45:EB:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/dd57c202-e1c7-37cf-abac-38faeee3e44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl

            X509v3 Authority Key Identifier:
                keyid:83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c7:21:d2:87:84:86:e1:08:df:2e:13:2e:cd:00:3e:8b:f0:
         31:0d:64:25:cb:d3:ec:81:47:0d:67:66:2e:a8:97:67:65:92:
         4b:19:8e:08:8a:d7:81:00:3d:25:ff:ff:cf:71:ac:93:9e:59:
         f1:22:92:d2:b7:4d:2e:26:52:cd:01:69:49:9a:2a:4c:23:71:
         af:72:c9:b8:46:a0:74:ff:6a:1e:65:b7:44:1e:23:6b:b6:6b:
         f9:6d:7c:99:d1:96:2b:77:20:f9:c2:45:e8:ea:d2:21:fb:d6:
         ec:91:60:32:41:74:43:c1:c9:c7:50:b8:93:b5:0e:26:8a:a8:
         d5:a7:ee:4d:ea:19:a3:b4:aa:ae:a5:67:16:4d:d5:e5:67:f9:
         05:e9:b5:4a:ad:96:77:9e:65:db:a2:4c:35:24:3c:8e:0d:ed:
         25:5d:eb:e7:b4:1e:89:aa:07:b2:e5:d0:0d:95:c4:65:6f:65:
         d8:92:47:29:14:a2:c6:66:eb:65:44:96:bd:c9:7f:ff:61:c2:
         ca:53:c5:3d:88:5b:61:18:f6:c3:5d:1a:c2:d5:6c:c5:61:e6:
         65:89:8b:d7:ba:22:c3:8c:f1:a3:00:bf:65:e7:d1:12:fe:90:
         27:32:f3:ee:02:32:91:9f:05:ae:19:50:cf:c5:4b:e3:c3:a6:
         1e:94:16:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FR0yz26WdsMeFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ2MTNlODQtYmU5My00ZDdhLWE1NmMtNTdhMzc4ZjJj
MzI1MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
NTljY2ZjNGItYWE2Mi00NjRmLTliZDQtNTRjMTA0ZWQxODJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kyyCXE0mqL4WecjqYIMl8DeOXnY6ZrsYa3a
K4dtBk4Dih9vg2DW63aQzLqfVbCG1/FyBAcWI+5l+DzQ2qxfmlhKoWQxB5TWjXdB
tV+D0i/c6hdjehex6g7oh61IqQ9IC8uM64Aah0hUkFlLhU8vNS5YiaCyahZZF/OV
QkJ3YgHTTIDP7d79jDJCkMC+UbeaLGcfkeF+HVONA1yreSkr8tWUtSj2iUSm3CyZ
gqvMTx+lnnszKwHVUuyMsS10H8gWc4F2CfHM3pckmzW/+b0UkDksOaqqQj/aryve
pAm+oHeIZIV0SryFwggi/nLpJnssCNmDsGnxfeA2LJfpCVVMzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE+qHY9TkYyH1s7cYI4vJyeoReuMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZDYx
M2U4NC1iZTkzLTRkN2EtYTU2Yy01N2EzNzhmMmMzMjUvZGQ1N2MyMDItZTFjNy0z
N2NmLWFiYWMtMzhmYWVlZTNlNDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWQ2MTNlODQtYmU5My00ZDdhLWE1
NmMtNTdhMzc4ZjJjMzI1LzVkNjEzZTg0LWJlOTMtNGQ3YS1hNTZjLTU3YTM3OGYy
YzMyNS5jcmwwHwYDVR0jBBgwFoAUg9l+5YkNlHKjca9r0BTQzHTTHZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81ZDYxM2U4NC1iZTkzLTRkN2EtYTU2Yy01N2Ez
NzhmMmMzMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzlMQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnHIdKHhIbhCN8uEy7NAD6L8DENZCXL0+yBRw1nZi6ol2dlkksZjgiK
14EAPSX//89xrJOeWfEiktK3TS4mUs0BaUmaKkwjca9yybhGoHT/ah5lt0QeI2u2
a/ltfJnRlit3IPnCRejq0iH71uyRYDJBdEPBycdQuJO1DiaKqNWn7k3qGaO0qq6l
ZxZN1eVn+QXptUqtlneeZduiTDUkPI4N7SVd6+e0HomqB7Ll0A2VxGVvZdiSRykU
osZm62VElr3Jf/9hwspTxT2IW2EY9sNdGsLVbMVh5mWJi9e6IsOM8aMAv2Xn0RL+
kCcy8+4CMpGfBa4ZUM/FS+PDph6UFhU=
-----END CERTIFICATE-----
Generated at Sun Jun 29 22:17:55 2025 by rpki-client