Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/850556b3-dd11-3c58-ad75-038a96f5c625.roa
File:                     850556b3-dd11-3c58-ad75-038a96f5c625.roa (raw, json)
Hash identifier:          Gk2fizcZIAeyhAbuNY7PD5a9Pk+xfagfO4WD5ld6RL8=
Subject key identifier:   83:F7:F2:98:79:66:85:F6:FA:08:37:90:19:BE:75:69:A2:A3:07:66
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F92BB5C7227F62E468080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/850556b3-dd11-3c58-ad75-038a96f5c625.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     20115
IP address blocks:        174.87.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:92:bb:5c:72:27:f6:2e:46:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=1038f87c-c4b9-447e-a02e-20baabe16071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:35:b1:95:4b:cc:a8:23:da:31:1d:42:65:a3:
                    a3:43:f7:e1:7f:2a:0b:9a:66:eb:67:4e:c2:c2:83:
                    e7:bb:0d:b0:69:3a:cb:cc:d2:7b:6f:b7:d8:99:80:
                    a6:82:9e:72:7a:97:b3:77:ef:3a:c2:d2:ee:d1:67:
                    41:20:79:4e:59:d3:43:6d:e4:b2:fb:d9:c3:1a:af:
                    81:0a:aa:98:cd:55:d2:d0:23:cf:12:62:65:08:5f:
                    2e:28:80:04:07:e6:db:84:bf:88:73:40:e6:e0:21:
                    a4:4c:eb:2a:1d:2a:b6:8b:b6:d9:9c:85:1a:e8:af:
                    5d:63:c4:ec:08:c8:ad:bd:0f:9b:62:30:fc:75:17:
                    47:c3:c1:bf:7b:2a:d4:19:25:86:37:5b:7a:92:ea:
                    94:2a:a4:7c:fe:89:77:0b:31:8c:8d:fa:92:ca:05:
                    49:ed:59:2b:c4:33:35:55:53:ba:76:0a:2d:66:e1:
                    59:ca:d6:4d:72:2c:fa:85:8b:16:87:49:c7:e8:7b:
                    9b:98:c2:f6:3b:e3:51:d9:6d:11:1f:6c:3f:26:ae:
                    27:46:ea:4d:fd:fd:3a:44:5f:69:45:6c:a4:bf:41:
                    78:ab:d0:97:62:52:e7:83:9a:f2:d3:03:b6:d7:62:
                    e4:7e:2a:30:8f:e7:5b:3d:cd:66:29:c1:cd:44:51:
                    83:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F7:F2:98:79:66:85:F6:FA:08:37:90:19:BE:75:69:A2:A3:07:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/850556b3-dd11-3c58-ad75-038a96f5c625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.87.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:d4:b5:4f:b2:da:54:0d:35:65:ec:d0:15:b7:87:bf:7a:64:
         55:22:e9:0c:69:b1:ef:ef:50:29:07:82:82:89:de:22:33:b7:
         00:35:04:4f:23:7c:00:b2:3e:b0:d3:d9:64:63:70:fe:78:b9:
         39:41:bb:58:02:ec:1e:22:af:ac:f6:76:98:55:d5:d9:4f:da:
         98:ae:5a:ce:f5:a7:a7:25:c7:65:44:f6:bd:82:86:b5:4b:84:
         09:e4:cd:f0:6f:4a:c2:54:11:ce:54:37:4f:8c:03:38:b4:89:
         05:63:d8:a4:83:3a:5d:dc:13:45:72:21:f3:b1:40:8b:73:f7:
         3d:d4:33:35:5e:b9:16:a7:29:3a:54:7c:c4:2c:20:a5:ab:64:
         db:05:a7:5b:45:09:0a:95:ac:82:7b:bb:07:ed:9d:94:11:e3:
         a1:54:ad:73:27:c3:a3:b4:9c:6c:3a:8c:42:97:0b:98:c5:78:
         f1:87:16:7e:0b:db:16:06:f1:92:3f:0e:c8:4e:70:3f:29:61:
         40:b7:4f:e1:03:dc:b8:68:91:07:bf:51:2b:2c:66:0d:95:f5:
         51:b3:ee:3b:79:3d:38:9a:eb:7b:98:be:42:53:1c:07:26:36:
         40:fd:06:5b:f8:93:c2:de:1a:32:86:8f:ed:e1:d5:6b:50:23:
         b7:b8:54:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5K7XHIn9i5GgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
MTAzOGY4N2MtYzRiOS00NDdlLWEwMmUtMjBiYWFiZTE2MDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjWxlUvMqCPaMR1CZaOjQ/fhfyoLmmbrZ07C
woPnuw2waTrLzNJ7b7fYmYCmgp5yepezd+86wtLu0WdBIHlOWdNDbeSy+9nDGq+B
CqqYzVXS0CPPEmJlCF8uKIAEB+bbhL+Ic0Dm4CGkTOsqHSq2i7bZnIUa6K9dY8Ts
CMitvQ+bYjD8dRdHw8G/eyrUGSWGN1t6kuqUKqR8/ol3CzGMjfqSygVJ7VkrxDM1
VVO6dgotZuFZytZNciz6hYsWh0nH6HubmML2O+NR2W0RH2w/Jq4nRupN/f06RF9p
RWykv0F4q9CXYlLng5ry0wO212Lkfiowj+dbPc1mKcHNRFGDIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIP38ph5ZoX2+gg3kBm+dWmiowdmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODUwNTU2YjMtZGQxMS0z
YzU4LWFkNzUtMDM4YTk2ZjVjNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrlfAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjUtU+y2lQNNWXs0BW3h796ZFUi6Qxpse/vUCkHgoKJ3iIztwA1BE8j
fACyPrDT2WRjcP54uTlBu1gC7B4ir6z2dphV1dlP2piuWs71p6clx2VE9r2ChrVL
hAnkzfBvSsJUEc5UN0+MAzi0iQVj2KSDOl3cE0VyIfOxQItz9z3UMzVeuRanKTpU
fMQsIKWrZNsFp1tFCQqVrIJ7uwftnZQR46FUrXMnw6O0nGw6jEKXC5jFePGHFn4L
2xYG8ZI/DshOcD8pYUC3T+ED3LhokQe/USssZg2V9VGz7jt5PTia63uYvkJTHAcm
NkD9Blv4k8LeGjKGj+3h1WtQI7e4VFc=
-----END CERTIFICATE-----
Generated at Thu May 8 14:43:38 2025 by rpki-client