Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/d6db1e6e-64ef-361c-8b88-df2a79e3319f.roa
File:                     d6db1e6e-64ef-361c-8b88-df2a79e3319f.roa (raw, json)
Hash identifier:          4PeYYU2AGy1ww1odIlx9FVZO0j/ua9cH40tsIfTM2UQ=
Subject key identifier:   41:88:7B:67:F6:97:B9:F2:99:D1:17:0B:0F:D4:28:3E:66:2A:56:1D
Certificate issuer:       /CN=50554af3-8108-491d-84e4-240f4874833a
Certificate serial:       010D0C9F4328584A3E45A65EAB915EC4DF337300
Authority key identifier: 62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/d6db1e6e-64ef-361c-8b88-df2a79e3319f.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     3561
IP address blocks:        185.123.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a6:5e:ab:91:5e:c4:df:33:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50554af3-8108-491d-84e4-240f4874833a
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=35866bb5-edc2-484d-8a6f-dd634c4e52bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:4a:25:8a:49:49:69:b1:3c:f6:3e:32:ca:
                    90:c1:44:39:dc:39:de:2b:48:6d:d1:11:88:6a:ac:
                    3e:db:f3:20:52:c6:2d:49:e1:07:05:15:e8:b4:3c:
                    c0:db:a6:af:f9:0f:8d:9a:fc:68:69:8f:77:73:69:
                    0a:8e:3a:17:76:d6:51:b6:4d:14:ce:5b:48:fd:cc:
                    2d:7e:45:a6:83:97:36:9a:8d:96:02:26:84:bf:35:
                    2d:60:ac:ec:31:db:10:bf:0e:66:52:df:f4:12:a5:
                    b0:66:f3:23:9b:01:96:0c:45:ff:93:63:08:f9:e5:
                    24:0d:1c:83:7d:e5:cc:ff:25:83:28:0a:7d:fb:7a:
                    e1:df:f6:f8:1e:5c:2f:4d:4e:2e:fc:63:1a:b2:18:
                    59:11:4f:c1:fb:89:f4:30:4d:63:fe:6f:19:df:3f:
                    d1:ee:e5:83:6a:05:a7:4d:40:b0:c9:44:2f:1c:85:
                    48:56:d4:65:f4:e0:0d:62:8b:85:60:6c:a5:90:7a:
                    88:7c:75:43:91:dd:e3:4a:1e:6e:51:fa:28:69:83:
                    37:79:59:6d:8a:8c:df:98:7c:f6:9a:79:1c:8d:90:
                    3d:b3:70:ed:bd:1a:e2:34:53:2b:31:89:34:81:92:
                    b2:5d:cb:fd:5e:0a:09:78:14:d7:c9:d9:3e:92:55:
                    51:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:88:7B:67:F6:97:B9:F2:99:D1:17:0B:0F:D4:28:3E:66:2A:56:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/d6db1e6e-64ef-361c-8b88-df2a79e3319f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl

            X509v3 Authority Key Identifier:
                keyid:62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.123.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:74:33:ee:3c:58:0f:a9:33:ac:35:a3:0e:f9:6f:54:40:99:
         a3:35:56:1c:67:78:15:5c:51:2b:12:7f:ce:29:3d:fc:90:fb:
         ad:7e:d0:08:a8:68:b5:36:9c:66:17:4a:b9:d4:a0:28:b2:09:
         5d:e7:6a:b0:2b:b3:60:dd:81:48:ba:12:c9:0c:bc:e8:35:87:
         31:3a:c7:5f:92:4b:e0:a9:ac:ee:c2:b3:4d:be:70:f9:78:75:
         f3:5c:d7:d9:08:ad:c9:28:38:64:2f:31:16:55:57:01:6d:f9:
         95:b2:d7:87:5d:2b:87:12:6f:c5:44:3e:a4:14:27:c1:bd:ee:
         c7:c9:81:47:53:2f:fb:30:88:99:9d:2f:bc:76:05:f5:36:90:
         e6:fd:11:4c:c3:e8:3f:5d:69:f7:12:58:d5:a4:f7:1a:42:6c:
         ab:01:c4:59:49:9a:00:6e:0f:32:62:b9:dc:2e:20:d8:06:4b:
         c6:b1:0e:46:47:eb:7d:af:62:e5:20:6a:0d:6f:b6:a5:db:97:
         9f:8b:5a:00:e9:6e:da:17:3d:82:63:3b:4e:45:44:6c:a6:79:
         bd:3c:49:8c:51:d8:bb:45:54:11:7d:c3:89:c1:6a:81:69:fc:
         33:de:8d:c0:54:c4:10:bf:ba:8b:c9:75:9a:f1:5b:44:93:e6:
         c5:53:14:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RaZeq5FexN8zcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTA1NTRhZjMtODEwOC00OTFkLTg0ZTQtMjQwZjQ4NzQ4
MzNhMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk
MzU4NjZiYjUtZWRjMi00ODRkLThhNmYtZGQ2MzRjNGU1MmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4lKJYpJSWmxPPY+MsqQwUQ53DneK0ht0RGI
aqw+2/MgUsYtSeEHBRXotDzA26av+Q+NmvxoaY93c2kKjjoXdtZRtk0UzltI/cwt
fkWmg5c2mo2WAiaEvzUtYKzsMdsQvw5mUt/0EqWwZvMjmwGWDEX/k2MI+eUkDRyD
feXM/yWDKAp9+3rh3/b4HlwvTU4u/GMashhZEU/B+4n0ME1j/m8Z3z/R7uWDagWn
TUCwyUQvHIVIVtRl9OANYouFYGylkHqIfHVDkd3jSh5uUfooaYM3eVltiozfmHz2
mnkcjZA9s3DtvRriNFMrMYk0gZKyXcv9XgoJeBTXydk+klVRfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEGIe2f2l7nymdEXCw/UKD5mKlYdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81MDU1
NGFmMy04MTA4LTQ5MWQtODRlNC0yNDBmNDg3NDgzM2EvZDZkYjFlNmUtNjRlZi0z
NjFjLThiODgtZGYyYTc5ZTMzMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTA1NTRhZjMtODEwOC00OTFkLTg0
ZTQtMjQwZjQ4NzQ4MzNhLzUwNTU0YWYzLTgxMDgtNDkxZC04NGU0LTI0MGY0ODc0
ODMzYS5jcmwwHwYDVR0jBBgwFoAUYvmeS4QUp9StIhJM2+NZd5FvugwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81MDU1NGFmMy04MTA4LTQ5MWQtODRlNC0yNDBm
NDg3NDgzM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXuYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB90M+48WA+pM6w1ow75b1RAmaM1VhxneBVcUSsSf84pPfyQ+61+0Aio
aLU2nGYXSrnUoCiyCV3narArs2DdgUi6EskMvOg1hzE6x1+SS+CprO7Cs02+cPl4
dfNc19kIrckoOGQvMRZVVwFt+ZWy14ddK4cSb8VEPqQUJ8G97sfJgUdTL/swiJmd
L7x2BfU2kOb9EUzD6D9dafcSWNWk9xpCbKsBxFlJmgBuDzJiudwuINgGS8axDkZH
632vYuUgag1vtqXbl5+LWgDpbtoXPYJjO05FRGymeb08SYxR2LtFVBF9w4nBaoFp
/DPejcBUxBC/uovJdZrxW0ST5sVTFOQ=
-----END CERTIFICATE-----
Generated at Mon Jun 30 17:33:50 2025 by rpki-client