Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/218554d8-43f0-3f50-97d7-546669505ebb.roa
File:                     218554d8-43f0-3f50-97d7-546669505ebb.roa (raw, json)
Hash identifier:          EQIIkZp5r5SQ0TwTOZIxL/10onlzWaebjsO2vkWmVHg=
Subject key identifier:   5C:9A:4B:A9:EE:5B:57:27:A9:9E:37:4D:68:5A:3C:59:0C:C3:2B:DF
Certificate issuer:       /CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481
Certificate serial:       010D0C9F4328584A5335A7341A11BA9BB2B94100
Authority key identifier: 76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/218554d8-43f0-3f50-97d7-546669505ebb.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     10310
IP address blocks:        206.222.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:a7:34:1a:11:ba:9b:b2:b9:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=869a4a6a-be3c-40b5-9778-0a6e0ca1d14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c5:49:56:61:4c:bd:0f:aa:fd:0c:61:30:70:
                    d4:e5:31:28:9d:5e:09:eb:d7:44:d2:10:e0:80:d0:
                    e3:79:3f:40:d5:af:0b:e0:50:d4:a1:eb:98:22:bb:
                    be:d3:65:10:f2:b1:47:4f:49:a1:53:73:e6:da:a4:
                    d7:b9:d6:f7:08:49:9d:12:ad:79:74:ef:2a:72:6a:
                    32:6c:e4:ec:f6:1a:07:28:80:e5:46:48:e0:38:3b:
                    0e:fc:57:1a:5d:07:89:61:86:1e:ca:9c:6b:5b:d0:
                    09:a9:68:1b:37:5b:b1:fe:7a:26:2d:a9:8e:46:22:
                    54:1b:6f:95:84:b9:44:e8:c5:12:2a:09:79:97:54:
                    26:64:6d:b4:d9:6f:97:aa:d4:ac:22:f1:a8:01:bc:
                    6e:5f:39:ba:6e:d7:1b:f8:b9:c6:50:24:62:12:65:
                    19:9a:b8:44:65:f3:1a:10:9c:02:81:d0:0a:55:79:
                    64:19:fd:63:d8:2e:8b:bf:c9:d4:f7:b6:bb:e1:ef:
                    88:a4:b8:cd:d5:f0:d8:88:ea:dd:24:73:93:ac:28:
                    be:79:64:d2:dc:3c:a8:ba:6a:8d:d1:35:55:1e:6c:
                    dc:3a:96:ac:83:b1:24:2d:56:8b:c6:2a:dc:75:9c:
                    a1:c7:4a:66:94:55:c8:f0:e2:b9:35:24:a5:b4:d5:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9A:4B:A9:EE:5B:57:27:A9:9E:37:4D:68:5A:3C:59:0C:C3:2B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/218554d8-43f0-3f50-97d7-546669505ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl

            X509v3 Authority Key Identifier:
                keyid:76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.222.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:7f:62:77:4f:17:0f:31:04:f9:7f:20:91:b1:22:32:6e:e9:
         10:e4:af:36:7c:64:f9:bf:d8:52:1a:d6:c1:3a:fe:ca:9e:f8:
         e6:79:9e:63:0f:9f:38:94:af:b2:66:f2:94:b5:7e:4d:f5:7e:
         6a:79:7c:5d:3b:54:ce:99:c1:ac:23:8c:e8:1d:85:7e:e1:74:
         d4:e7:1a:05:d4:b5:b2:f2:35:1a:13:d2:60:86:e8:d4:18:9d:
         3d:16:e5:3b:de:fa:9f:13:80:57:c2:58:1c:7c:39:86:ce:17:
         ab:9f:4c:cb:70:26:13:d8:df:79:2e:17:99:45:b9:5d:b0:e6:
         19:5e:11:aa:ca:c1:38:9c:e7:9a:94:e3:55:c9:67:6d:96:38:
         c3:42:71:96:30:2f:ff:a2:d4:f4:5a:0e:c1:fe:65:4b:7f:0a:
         dc:bf:37:d7:45:5c:97:83:16:3e:46:75:71:2d:23:ee:01:4f:
         2a:af:d0:44:d8:a4:20:3f:ba:52:62:5f:9e:97:d1:81:0a:4b:
         4a:1b:28:3f:1e:f6:30:f7:61:1c:6b:9d:16:b4:e7:21:79:f9:
         b3:93:bd:87:9c:e3:6c:75:c7:13:3a:63:70:b5:64:f6:35:d8:
         1e:0d:da:db:ea:47:0b:7b:be:2c:13:d5:7b:f0:83:9d:e6:6c:
         1e:66:36:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNac0GhG6m7K5QQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWIzNTgwY2EtMmZjMy00OGY1LWJkNjUtZGNjOWYwYjE5
NDgxMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk
ODY5YTRhNmEtYmUzYy00MGI1LTk3NzgtMGE2ZTBjYTFkMTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisVJVmFMvQ+q/QxhMHDU5TEonV4J69dE0hDg
gNDjeT9A1a8L4FDUoeuYIru+02UQ8rFHT0mhU3Pm2qTXudb3CEmdEq15dO8qcmoy
bOTs9hoHKIDlRkjgODsO/FcaXQeJYYYeypxrW9AJqWgbN1ux/nomLamORiJUG2+V
hLlE6MUSKgl5l1QmZG202W+XqtSsIvGoAbxuXzm6btcb+LnGUCRiEmUZmrhEZfMa
EJwCgdAKVXlkGf1j2C6Lv8nU97a74e+IpLjN1fDYiOrdJHOTrCi+eWTS3DyoumqN
0TVVHmzcOpasg7EkLVaLxircdZyhx0pmlFXI8OK5NSSltNUDbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFyaS6nuW1cnqZ43TWhaPFkMwyvfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1
ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5ZjBiMTk0ODEvMjE4NTU0ZDgtNDNmMC0z
ZjUwLTk3ZDctNTQ2NjY5NTA1ZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWIzNTgwY2EtMmZjMy00OGY1LWJk
NjUtZGNjOWYwYjE5NDgxLzFiMzU4MGNhLTJmYzMtNDhmNS1iZDY1LWRjYzlmMGIx
OTQ4MS5jcmwwHwYDVR0jBBgwFoAUdhsmo+k9oZH15B4eSC33NoIS0XYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5
ZjBiMTk0ODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzt7hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEF/YndPFw8xBPl/IJGxIjJu6RDkrzZ8ZPm/2FIa1sE6/sqe+OZ5nmMP
nziUr7Jm8pS1fk31fmp5fF07VM6ZwawjjOgdhX7hdNTnGgXUtbLyNRoT0mCG6NQY
nT0W5Tve+p8TgFfCWBx8OYbOF6ufTMtwJhPY33kuF5lFuV2w5hleEarKwTic55qU
41XJZ22WOMNCcZYwL/+i1PRaDsH+ZUt/Cty/N9dFXJeDFj5GdXEtI+4BTyqv0ETY
pCA/ulJiX56X0YEKS0obKD8e9jD3YRxrnRa05yF5+bOTvYec42x1xxM6Y3C1ZPY1
2B4N2tvqRwt7viwT1Xvwg53mbB5mNow=
-----END CERTIFICATE-----
Generated at Tue Jul 1 22:28:09 2025 by rpki-client