Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/04e03083-6005-375e-b06f-889bfeb58794.roa
File:                     04e03083-6005-375e-b06f-889bfeb58794.roa (raw, json)
Hash identifier:          zX3Iji6poVwPdsNXfD6Sg512c1rBSMTtjOsCmF7PmN4=
Subject key identifier:   13:5A:22:AB:7D:E1:04:40:5A:6F:44:47:77:08:9B:2A:7B:F0:9F:0B
Certificate issuer:       /CN=44c9f20f-94d3-45ab-b941-cca94fba4981
Certificate serial:       010D0C9F4328584A45403400576C1FA17DB8D100
Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/04e03083-6005-375e-b06f-889bfeb58794.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     26342
IP address blocks:        170.194.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:34:00:57:6c:1f:a1:7d:b8:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=eba278e8-816c-4e35-9ec4-b01e5ff7ae3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0a:03:fe:6b:83:17:37:17:3b:79:2c:57:96:
                    8d:97:7f:da:cb:aa:9f:6f:22:4a:e5:1f:b2:0a:90:
                    c8:2e:f6:46:f4:d9:9f:3f:45:43:7a:e9:16:79:50:
                    af:e8:8a:e3:35:e6:78:58:59:48:0a:8b:39:1e:52:
                    93:14:54:9c:ef:44:ce:9e:ea:f5:c2:d2:37:7b:ce:
                    b9:a7:b9:7d:3c:a4:9a:89:35:8b:44:40:86:83:2f:
                    1c:8d:a7:3e:de:67:c6:b3:2b:d2:9f:cf:64:ba:e3:
                    2f:7f:c8:d2:07:42:38:10:a3:91:b0:cc:c0:d9:c9:
                    35:99:8b:de:ad:a2:3f:22:ce:c6:91:d8:26:6e:44:
                    99:0f:c2:fc:1c:96:33:5c:13:ec:46:d8:f9:fb:d2:
                    e7:18:a7:34:a4:20:d4:ed:33:e8:c9:1a:ea:45:35:
                    f0:dd:55:f4:63:0d:95:64:56:24:c1:a3:80:29:c5:
                    2e:82:34:9a:56:89:4d:37:4b:dc:9c:a9:b5:39:ab:
                    da:94:7b:6f:91:e2:62:82:e8:d0:96:9a:d5:1c:dd:
                    ae:e3:56:e1:9e:a8:b2:34:e3:49:d7:de:72:1c:05:
                    96:7e:d9:03:dd:0c:c4:d7:37:60:f2:3c:33:13:1e:
                    79:34:0f:0c:33:b1:eb:eb:66:8d:21:64:2f:65:eb:
                    96:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5A:22:AB:7D:E1:04:40:5A:6F:44:47:77:08:9B:2A:7B:F0:9F:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/04e03083-6005-375e-b06f-889bfeb58794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl

            X509v3 Authority Key Identifier:
                keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.194.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:34:d1:25:6a:19:a2:77:67:a4:0d:21:f1:f5:c8:2a:40:cc:
         26:ed:bd:1c:23:1b:61:0e:aa:18:db:6f:53:0c:c5:d3:a5:73:
         d1:b8:0f:34:1c:b1:2d:aa:96:13:b7:58:90:d0:dc:c9:01:ba:
         1f:9b:02:f0:c6:85:52:1e:fe:9c:7f:82:d2:97:1e:31:9c:4b:
         5d:68:60:c6:1e:b0:7d:2f:b5:71:bd:c3:51:be:8e:d9:06:8c:
         a8:da:82:7d:0c:43:12:fc:84:78:04:ee:24:18:20:2a:1f:89:
         63:7a:98:24:c3:9c:a8:7a:ad:fb:a5:58:63:b7:67:37:ca:58:
         3e:99:92:2b:8a:8c:34:f4:45:2f:bf:9d:dd:33:7b:78:65:1c:
         63:a0:a1:ba:85:84:c3:8f:ea:1c:03:79:7f:a6:72:cf:b7:a5:
         dd:c8:d9:ca:8b:38:ec:47:cb:3d:b4:63:18:23:28:44:5f:56:
         ba:ba:9a:8f:e6:06:f2:6e:cd:6c:a1:02:a9:1f:86:0a:08:3c:
         55:bc:e0:7b:84:45:24:cd:df:b3:d4:8e:e1:9e:58:2b:b5:93:
         98:9c:b3:91:ce:bb:cf:d0:8a:25:45:1a:b3:41:93:0e:1f:2e:
         91:bd:2b:30:cb:9f:85:27:58:3a:53:de:cd:c2:57:d7:0b:24:
         d3:0d:34:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQDQAV2wfoX240QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRjOWYyMGYtOTRkMy00NWFiLWI5NDEtY2NhOTRmYmE0
OTgxMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk
ZWJhMjc4ZTgtODE2Yy00ZTM1LTllYzQtYjAxZTVmZjdhZTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgoD/muDFzcXO3ksV5aNl3/ay6qfbyJK5R+y
CpDILvZG9NmfP0VDeukWeVCv6IrjNeZ4WFlICos5HlKTFFSc70TOnur1wtI3e865
p7l9PKSaiTWLRECGgy8cjac+3mfGsyvSn89kuuMvf8jSB0I4EKORsMzA2ck1mYve
raI/Is7GkdgmbkSZD8L8HJYzXBPsRtj5+9LnGKc0pCDU7TPoyRrqRTXw3VX0Yw2V
ZFYkwaOAKcUugjSaVolNN0vcnKm1OavalHtvkeJigujQlprVHN2u41bhnqiyNONJ
195yHAWWftkD3QzE1zdg8jwzEx55NA8MM7Hr62aNIWQvZeuWlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNaIqt94QRAWm9ER3cImyp78J8LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80NGM5
ZjIwZi05NGQzLTQ1YWItYjk0MS1jY2E5NGZiYTQ5ODEvMDRlMDMwODMtNjAwNS0z
NzVlLWIwNmYtODg5YmZlYjU4Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDRjOWYyMGYtOTRkMy00NWFiLWI5
NDEtY2NhOTRmYmE0OTgxLzQ0YzlmMjBmLTk0ZDMtNDVhYi1iOTQxLWNjYTk0ZmJh
NDk4MS5jcmwwHwYDVR0jBBgwFoAUA/b2HEJMx1KN3QUCfb302P0Ho4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80NGM5ZjIwZi05NGQzLTQ1YWItYjk0MS1jY2E5
NGZiYTQ5ODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsKHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHA00SVqGaJ3Z6QNIfH1yCpAzCbtvRwjG2EOqhjbb1MMxdOlc9G4DzQc
sS2qlhO3WJDQ3MkBuh+bAvDGhVIe/px/gtKXHjGcS11oYMYesH0vtXG9w1G+jtkG
jKjagn0MQxL8hHgE7iQYICofiWN6mCTDnKh6rfulWGO3ZzfKWD6ZkiuKjDT0RS+/
nd0ze3hlHGOgobqFhMOP6hwDeX+mcs+3pd3I2cqLOOxHyz20YxgjKERfVrq6mo/m
BvJuzWyhAqkfhgoIPFW84HuERSTN37PUjuGeWCu1k5ics5HOu8/QiiVFGrNBkw4f
LpG9KzDLn4UnWDpT3s3CV9cLJNMNNIY=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:23:38 2025 by rpki-client