Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0289596d-80f8-35c4-b20d-9d576f2262cf.roa
File:                     0289596d-80f8-35c4-b20d-9d576f2262cf.roa (raw, json)
Hash identifier:          XIXx1KP7Taxsgk2I59yyc2OM5/U3Y/viXWshbvX/d5c=
Subject key identifier:   EC:E3:92:17:9E:A6:8E:D5:67:21:52:22:68:FF:0C:21:C3:E4:AC:E7
Certificate issuer:       /CN=0d51e326-4804-4f59-a629-20153f71b7fe
Certificate serial:       010D0C9F43285849D16502089ACF4E1C13A91A00
Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0289596d-80f8-35c4-b20d-9d576f2262cf.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        216.230.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:02:08:9a:cf:4e:1c:13:a9:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=43c62edf-7234-4d58-a329-fb199e63b02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:72:78:34:83:78:76:35:c5:70:0e:78:1e:
                    2c:c5:62:0f:71:ab:52:16:70:1a:e0:e0:1a:db:4c:
                    dc:41:83:c8:94:d5:94:21:5f:9e:36:87:92:fe:bd:
                    8d:0a:6f:67:98:ce:6d:12:53:e9:67:53:b9:b3:64:
                    25:eb:be:d9:c4:b7:c8:08:08:a2:3c:a1:23:e4:0d:
                    17:57:44:7a:5d:ae:f1:fd:2c:08:e7:0a:cc:30:4f:
                    99:cf:bb:0a:3a:67:8b:64:15:f6:0a:35:29:9c:4c:
                    0b:6f:b4:3b:31:5d:0b:d9:0e:e5:f0:ad:7d:24:ea:
                    a7:32:9d:04:87:cf:55:47:45:1f:e8:d3:92:50:70:
                    95:a0:04:8e:4c:3a:b9:c2:c2:28:c3:5c:f0:96:4e:
                    48:33:37:b2:59:ea:b8:f2:25:af:40:a5:fe:5b:2e:
                    66:0d:d8:9a:e9:45:26:32:85:c0:66:9a:10:4a:07:
                    05:c6:33:d2:27:27:99:71:3d:e3:33:05:06:22:1e:
                    5a:98:05:05:f6:7e:8b:f0:1d:bd:68:5a:75:51:f2:
                    65:29:2f:63:ab:b9:fb:94:66:a0:41:8b:94:c8:8f:
                    71:2f:36:44:21:c1:b6:28:5c:25:14:a6:1b:7d:d3:
                    65:bd:28:c9:72:16:3c:d1:3c:fe:62:78:8d:90:88:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E3:92:17:9E:A6:8E:D5:67:21:52:22:68:FF:0C:21:C3:E4:AC:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0289596d-80f8-35c4-b20d-9d576f2262cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl

            X509v3 Authority Key Identifier:
                keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:cd:d4:69:ca:74:b0:19:98:4d:ba:7e:41:ee:16:4f:45:cd:
         e0:60:64:e3:78:52:6f:03:ea:8a:88:49:a7:0a:ce:ae:bd:50:
         42:b8:70:86:d6:4a:9f:7d:10:67:b3:67:62:de:cd:0e:b3:df:
         70:22:b7:59:cd:1f:37:87:f7:3a:db:35:45:b4:cb:26:68:50:
         82:aa:26:e9:4e:a7:aa:18:30:af:e1:08:0d:68:1f:12:f2:c6:
         76:48:14:44:e6:88:e4:c8:e0:f9:26:de:e6:ed:44:3b:77:f2:
         5a:25:a9:10:e0:52:9f:32:f3:9c:d5:5c:86:c9:12:62:29:8e:
         c5:56:cf:ff:28:95:8b:8e:a0:e1:3a:47:78:01:44:96:03:14:
         95:52:8a:67:a9:e0:50:48:42:4f:c8:23:e4:30:13:5d:fd:40:
         96:1b:f7:f1:1f:18:1e:dd:68:f8:8b:51:4c:10:37:e7:e3:52:
         8f:fa:8f:25:bd:20:4f:15:b1:b1:7c:d8:64:d5:a4:f6:82:d0:
         7c:07:76:58:bb:fc:94:c2:89:3d:fe:2e:16:c8:22:19:9a:0a:
         9c:c4:9e:09:d9:21:9d:e6:78:e6:96:ed:14:ee:16:24:72:e2:
         0b:9c:86:b3:d2:25:a7:b3:42:06:e0:e7:df:25:bc:99:a9:f5:
         f7:51:c5:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQIIms9OHBOpGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ1MWUzMjYtNDgwNC00ZjU5LWE2MjktMjAxNTNmNzFi
N2ZlMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
NDNjNjJlZGYtNzIzNC00ZDU4LWEzMjktZmIxOTllNjNiMDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRhyeDSDeHY1xXAOeB4sxWIPcatSFnAa4OAa
20zcQYPIlNWUIV+eNoeS/r2NCm9nmM5tElPpZ1O5s2Ql677ZxLfICAiiPKEj5A0X
V0R6Xa7x/SwI5wrMME+Zz7sKOmeLZBX2CjUpnEwLb7Q7MV0L2Q7l8K19JOqnMp0E
h89VR0Uf6NOSUHCVoASOTDq5wsIow1zwlk5IMzeyWeq48iWvQKX+Wy5mDdia6UUm
MoXAZpoQSgcFxjPSJyeZcT3jMwUGIh5amAUF9n6L8B29aFp1UfJlKS9jq7n7lGag
QYuUyI9xLzZEIcG2KFwlFKYbfdNlvSjJchY80Tz+YniNkIghkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzjkheepo7VZyFSImj/DCHD5KznMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUx
ZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1M2Y3MWI3ZmUvMDI4OTU5NmQtODBmOC0z
NWM0LWIyMGQtOWQ1NzZmMjI2MmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQ1MWUzMjYtNDgwNC00ZjU5LWE2
MjktMjAxNTNmNzFiN2ZlLzBkNTFlMzI2LTQ4MDQtNGY1OS1hNjI5LTIwMTUzZjcx
YjdmZS5jcmwwHwYDVR0jBBgwFoAUT2EwmFSHFXGDXF5KpgiIJWQjOKAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUxZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1
M2Y3MWI3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF/N1GnKdLAZmE26fkHuFk9FzeBgZON4Um8D6oqISacKzq69UEK4cIbW
Sp99EGezZ2LezQ6z33Ait1nNHzeH9zrbNUW0yyZoUIKqJulOp6oYMK/hCA1oHxLy
xnZIFETmiOTI4Pkm3ubtRDt38lolqRDgUp8y85zVXIbJEmIpjsVWz/8olYuOoOE6
R3gBRJYDFJVSimep4FBIQk/II+QwE139QJYb9/EfGB7daPiLUUwQN+fjUo/6jyW9
IE8VsbF82GTVpPaC0HwHdli7/JTCiT3+LhbIIhmaCpzEngnZIZ3meOaW7RTuFiRy
4guchrPSJaezQgbg598lvJmp9fdRxco=
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:09:44 2025 by rpki-client