Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/d2015878-4527-3557-82c5-f62f18fd4715.roa
File:                     d2015878-4527-3557-82c5-f62f18fd4715.roa (raw, json)
Hash identifier:          ubQaZK0Hc6Qo7/cDCzUu07u8pIuzU3/S1ee0khwyc2g=
Subject key identifier:   8D:44:24:AA:26:42:09:23:4F:8F:5C:32:F4:16:91:CC:55:75:B3:20
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F43285849CE9A66B90541B2A72E16D080
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/d2015878-4527-3557-82c5-f62f18fd4715.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     394927
IP address blocks:        204.155.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:66:b9:05:41:b2:a7:2e:16:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=6621012b-07ec-4da0-a248-92faf5ce42f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:27:63:89:7b:59:8c:81:0b:50:19:f1:ed:
                    1e:d2:b7:56:6b:ea:88:53:e0:9f:1e:3c:c7:b3:3b:
                    43:bb:c3:cc:d6:ad:24:51:66:e9:f0:8b:00:1f:49:
                    da:df:84:bd:97:79:50:6c:37:d4:3e:a0:73:47:34:
                    b3:a9:41:a6:f8:86:36:ae:56:51:25:c3:48:e9:40:
                    66:53:35:08:93:c0:24:61:6b:40:64:e6:3f:01:2f:
                    61:c5:ab:d7:43:b1:47:78:0d:7d:94:c0:14:5b:60:
                    c6:3d:2b:eb:65:af:11:9e:c5:59:9c:8d:3d:6b:76:
                    9f:43:b9:b7:8f:fb:ee:fd:3d:62:59:78:24:fd:6f:
                    fa:f8:8a:0d:c5:6c:a2:79:f6:20:b5:92:fd:35:8e:
                    38:89:8c:2b:e3:ed:dc:58:f8:fa:1b:22:63:c8:83:
                    9b:66:80:84:a2:5f:6a:91:94:8a:b9:e5:e3:32:24:
                    10:ab:d5:27:42:67:c0:6f:52:ec:f0:40:96:cb:46:
                    2b:35:be:2a:88:10:e3:53:d5:88:f0:da:0c:9f:7f:
                    db:05:9a:10:5a:fe:54:f8:1d:9e:84:95:3c:29:d3:
                    29:18:c0:6d:ca:a2:53:83:de:22:59:28:bb:a7:cc:
                    7b:05:c7:86:cf:99:b4:3f:52:73:1a:a1:6c:c9:e0:
                    b1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:44:24:AA:26:42:09:23:4F:8F:5C:32:F4:16:91:CC:55:75:B3:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/d2015878-4527-3557-82c5-f62f18fd4715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:11:b6:04:17:7c:54:f2:dd:fc:52:e0:6f:f0:e9:36:63:23:
         1d:50:3a:17:8f:2c:04:3f:7c:b9:94:fa:dc:c1:22:0c:57:3f:
         26:71:29:e7:d9:3a:7b:09:8f:af:ff:a8:28:8c:fa:3f:5e:b9:
         28:b4:8d:11:f5:ab:7c:1c:53:ec:41:45:3b:86:38:94:ff:54:
         11:73:fb:d8:0a:59:be:bc:24:41:72:8b:24:d9:d2:6e:ea:02:
         b2:dd:5e:17:91:56:85:be:8e:94:17:79:a5:76:a8:f1:df:6f:
         44:53:d1:ec:e5:63:d6:44:c3:ad:6a:de:b8:fe:cd:57:f7:22:
         4a:17:60:d0:c0:1b:10:2f:7c:d5:d6:84:c9:a2:3f:7b:0a:ad:
         33:56:9f:13:b3:06:4e:ec:bb:bb:e7:3b:ba:e2:2d:7a:76:e3:
         15:00:fd:1a:a8:6f:f1:f3:f3:b9:d9:b8:7d:f5:59:16:02:7f:
         8c:e7:fe:20:b1:cd:50:76:17:bd:48:a3:26:db:61:c0:3d:9a:
         8d:c2:af:6e:f7:02:4b:b4:c2:d1:37:0a:b3:3e:ae:a2:09:27:
         5c:e7:66:ab:c8:fb:65:4f:5f:14:d5:f7:9b:4c:d6:4c:f6:dc:
         ad:10:83:6d:3e:3c:4e:91:4f:cb:fc:de:5a:c2:09:0b:ba:60:
         0a:53:05:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmma5BUGypy4W0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3
NWFiMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
NjYyMTAxMmItMDdlYy00ZGEwLWEyNDgtOTJmYWY1Y2U0MmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS4nY4l7WYyBC1AZ8e0e0rdWa+qIU+CfHjzH
sztDu8PM1q0kUWbp8IsAH0na34S9l3lQbDfUPqBzRzSzqUGm+IY2rlZRJcNI6UBm
UzUIk8AkYWtAZOY/AS9hxavXQ7FHeA19lMAUW2DGPSvrZa8RnsVZnI09a3afQ7m3
j/vu/T1iWXgk/W/6+IoNxWyiefYgtZL9NY44iYwr4+3cWPj6GyJjyIObZoCEol9q
kZSKueXjMiQQq9UnQmfAb1Ls8ECWy0YrNb4qiBDjU9WI8NoMn3/bBZoQWv5U+B2e
hJU8KdMpGMBtyqJTg94iWSi7p8x7BceGz5m0P1JzGqFsyeCx1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1EJKomQgkjT49cMvQWkcxVdbMgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3
MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvZDIwMTU4NzgtNDUyNy0z
NTU3LTgyYzUtZjYyZjE4ZmQ0NzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj
ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3
NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz
NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIwRtgQXfFTy3fxS4G/w6TZjIx1QOhePLAQ/fLmU+tzBIgxXPyZxKefZ
OnsJj6//qCiM+j9euSi0jRH1q3wcU+xBRTuGOJT/VBFz+9gKWb68JEFyiyTZ0m7q
ArLdXheRVoW+jpQXeaV2qPHfb0RT0ezlY9ZEw61q3rj+zVf3IkoXYNDAGxAvfNXW
hMmiP3sKrTNWnxOzBk7su7vnO7riLXp24xUA/Rqob/Hz87nZuH31WRYCf4zn/iCx
zVB2F71IoybbYcA9mo3Cr273Aku0wtE3CrM+rqIJJ1znZqvI+2VPXxTV95tM1kz2
3K0Qg20+PE6RT8v83lrCCQu6YApTBck=
-----END CERTIFICATE-----
Generated at Sat May 10 22:04:56 2025 by rpki-client