Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1b949b-bffc-3a6c-bc50-f17df077e577.roa
File:                     1e1b949b-bffc-3a6c-bc50-f17df077e577.roa (raw, json)
Hash identifier:          B7rWze6lzS5FiEiJ97pnHQxXmQ4P1hvXVJNH3TtUGEY=
Subject key identifier:   DE:AC:86:5C:C4:5A:53:CB:F3:CB:DC:E9:A3:4E:64:F7:06:7B:00:06
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849BB0F69D2F86E3B7324FC9F00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1b949b-bffc-3a6c-bc50-f17df077e577.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        172.217.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:69:d2:f8:6e:3b:73:24:fc:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=2721bb66-8c4d-487f-9197-224f9fab0f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:3e:95:ae:e4:25:cd:e2:c2:b8:f3:4d:05:
                    5c:2a:d9:b9:04:12:9d:0f:1c:4a:90:ae:23:70:94:
                    fe:8d:76:1d:e6:a9:a8:83:0c:02:c1:65:aa:a0:87:
                    41:64:d8:49:bc:9d:38:9b:70:74:7c:5b:aa:bb:b7:
                    1b:7e:89:ce:53:aa:ac:66:36:d8:1b:b2:10:e9:34:
                    d7:f0:ca:73:26:87:b3:08:44:c7:92:bc:4f:f8:f7:
                    dd:70:fe:2a:8b:af:88:84:f6:6a:76:f6:41:58:82:
                    9b:6e:43:d4:77:46:1a:26:22:a2:08:8d:50:66:86:
                    76:33:f1:fa:ad:58:d2:c5:17:9b:4d:92:1e:16:9c:
                    98:59:13:db:83:7e:e9:fe:ab:70:a5:dd:7c:f9:f5:
                    b7:00:61:c3:23:e4:fd:48:19:45:02:a4:1f:36:96:
                    14:22:a0:56:cf:17:1d:0c:26:79:df:a0:99:5d:2b:
                    4a:2f:06:20:93:10:ba:d1:a2:c1:5e:4d:7c:16:53:
                    0e:72:e7:60:97:5a:cd:5e:3c:9d:59:d9:98:e3:72:
                    c0:a1:fc:b9:66:ef:64:c6:80:3c:f0:13:fc:5c:5e:
                    18:e9:2c:fd:b7:b9:3e:b0:02:7e:1f:1f:79:d7:ff:
                    e7:1c:93:9b:c2:2c:94:29:fe:08:22:aa:fe:e9:24:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AC:86:5C:C4:5A:53:CB:F3:CB:DC:E9:A3:4E:64:F7:06:7B:00:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e1b949b-bffc-3a6c-bc50-f17df077e577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:26:a1:20:b5:11:35:99:78:dc:79:f9:b3:4a:31:74:99:77:
         2f:16:9c:f2:ac:f8:15:ec:7c:39:32:7d:ff:12:4c:ec:e6:1b:
         8e:c9:e6:57:f2:2d:71:4c:78:ec:f0:6b:23:82:bc:04:59:37:
         4f:41:00:5b:27:bb:21:45:5c:13:d6:61:95:28:d5:77:ff:bf:
         dc:70:2a:06:23:f1:7c:4a:e3:b2:8f:e1:e1:8e:73:59:ca:7e:
         10:ee:65:aa:e9:78:00:70:25:b3:28:3f:7c:a6:a8:49:44:ce:
         9b:eb:ae:2c:9d:74:66:bc:f6:d8:9c:29:ce:a5:49:e6:a6:d0:
         4f:ea:3b:35:3f:05:b6:4a:df:7b:f3:e4:f8:a9:69:34:1b:12:
         0f:14:82:f1:d1:75:bb:ed:74:44:26:1f:94:bc:3f:43:5e:8b:
         a1:2f:a6:00:51:38:b8:42:42:55:f7:e2:ec:03:a6:e8:6d:97:
         c5:0c:3a:82:16:72:75:b9:20:24:c5:bf:c3:07:5a:76:a0:f0:
         07:d8:4f:ba:b1:5b:07:3b:4b:eb:1c:9d:6a:51:4e:4f:f4:14:
         09:b5:6d:38:85:cb:de:30:84:46:24:51:7c:49:76:61:f9:3a:
         8b:30:83:7c:df:87:c6:26:45:7f:1b:49:d4:a0:cd:2b:c4:69:
         6f:6f:ac:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D2nS+G47cyT8nwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk
MjcyMWJiNjYtOGM0ZC00ODdmLTkxOTctMjI0ZjlmYWIwZjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPE+la7kJc3iwrjzTQVcKtm5BBKdDxxKkK4j
cJT+jXYd5qmogwwCwWWqoIdBZNhJvJ04m3B0fFuqu7cbfonOU6qsZjbYG7IQ6TTX
8MpzJoezCETHkrxP+PfdcP4qi6+IhPZqdvZBWIKbbkPUd0YaJiKiCI1QZoZ2M/H6
rVjSxRebTZIeFpyYWRPbg37p/qtwpd18+fW3AGHDI+T9SBlFAqQfNpYUIqBWzxcd
DCZ536CZXStKLwYgkxC60aLBXk18FlMOcudgl1rNXjydWdmY43LAofy5Zu9kxoA8
8BP8XF4Y6Sz9t7k+sAJ+Hx951//nHJObwiyUKf4IIqr+6SStuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6shlzEWlPL88vc6aNOZPcGewAGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWUxYjk0OWItYmZmYy0z
YTZjLWJjNTAtZjE3ZGYwNzdlNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKAmoSC1ETWZeNx5+bNKMXSZdy8WnPKs+BXsfDkyff8STOzmG47J5lfy
LXFMeOzwayOCvARZN09BAFsnuyFFXBPWYZUo1Xf/v9xwKgYj8XxK47KP4eGOc1nK
fhDuZarpeABwJbMoP3ymqElEzpvrriyddGa89ticKc6lSeam0E/qOzU/BbZK33vz
5PipaTQbEg8UgvHRdbvtdEQmH5S8P0Nei6EvpgBROLhCQlX34uwDpuhtl8UMOoIW
cnW5ICTFv8MHWnag8AfYT7qxWwc7S+scnWpRTk/0FAm1bTiFy94whEYkUXxJdmH5
Ooswg3zfh8YmRX8bSdSgzSvEaW9vrDg=
-----END CERTIFICATE-----
Generated at Sun May 4 10:18:41 2025 by rpki-client