Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/61746f6a-fd7c-355d-9f05-6815b64818eb.roa
File:                     61746f6a-fd7c-355d-9f05-6815b64818eb.roa (raw, json)
Hash identifier:          8i6eOQ5WmkJQx2cPb9sTqYEAr9FmbcUNG20eGq2SUNU=
Subject key identifier:   EC:30:7F:0E:D6:C3:FC:2C:EB:BF:52:56:40:20:1B:29:57:E7:10:11
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849A4BB7457DAAB481F03F24B00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/61746f6a-fd7c-355d-9f05-6815b64818eb.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.250.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:74:57:da:ab:48:1f:03:f2:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=565fdfdc-ccfb-47d6-aaad-3ba1c32d33f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:95:2b:8a:89:0e:63:6f:8c:63:06:6b:1c:b4:
                    f4:41:47:50:00:bd:c8:0e:88:21:49:ae:81:4a:92:
                    24:16:a9:a0:6d:40:01:7c:45:3e:5a:0c:fd:d7:e4:
                    33:4c:38:5e:ae:e5:6a:48:5c:de:2b:d1:30:de:c6:
                    ab:f0:fa:5b:41:5a:2e:53:89:9e:4b:6f:2c:af:65:
                    4a:fc:7e:3f:85:70:ae:f0:be:f2:ba:85:02:a6:89:
                    f6:20:4a:16:d7:c1:9d:29:22:ae:53:91:3f:84:e8:
                    38:89:14:cd:2a:9e:10:e7:89:84:ad:46:dc:92:44:
                    bc:78:fa:58:0b:3e:ee:02:26:d6:18:5d:fc:2f:7f:
                    90:1c:ac:40:dd:18:9b:1d:08:d1:62:0c:c8:96:93:
                    90:73:d3:03:ce:39:7b:42:5a:04:32:8d:09:cb:39:
                    e6:51:f8:5e:7e:56:38:52:aa:12:21:50:2d:a2:8b:
                    f6:54:a6:36:9c:83:7c:6b:22:75:c6:86:6d:63:26:
                    85:cc:cb:d6:40:1c:8c:1f:e5:29:a0:c1:28:cb:1f:
                    fd:bc:d7:63:61:17:12:12:76:6e:97:5b:fb:05:fd:
                    9e:81:1d:a0:d7:69:66:c0:56:66:30:6e:b1:ce:e0:
                    5a:59:dc:09:9c:3c:06:1c:f0:d8:4b:f8:c0:54:b5:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:30:7F:0E:D6:C3:FC:2C:EB:BF:52:56:40:20:1B:29:57:E7:10:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/61746f6a-fd7c-355d-9f05-6815b64818eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7c:22:cc:31:78:4c:2c:ed:41:03:a4:62:e0:28:4e:1e:90:
         de:7b:cb:84:b1:00:2a:bc:e5:10:ec:0f:4b:1d:25:b1:18:98:
         1f:fe:68:c2:bb:11:28:18:2f:b0:02:88:24:8d:23:08:d2:45:
         47:ed:b4:92:a8:93:8b:72:79:33:70:72:fc:a3:2f:89:29:cf:
         a0:a6:8f:13:c3:45:64:bf:23:96:9c:b1:45:da:16:6e:a8:c3:
         96:ea:c3:20:da:a7:cc:a7:74:62:f8:51:14:3d:cf:f6:49:b0:
         4e:44:fe:ad:86:22:be:76:15:42:55:ba:52:56:df:e0:ee:d2:
         2c:07:cf:06:bd:cc:8c:22:6a:dd:05:d4:1c:a3:1c:91:79:f4:
         ed:65:4b:8f:af:99:dd:3b:a0:70:45:ac:c0:aa:39:fc:76:a2:
         8c:eb:da:ed:ab:af:cd:f8:b6:d8:5f:7b:04:3a:f1:fd:d5:38:
         e5:52:96:9d:df:a3:76:76:de:9a:27:e4:45:22:d5:7e:68:d5:
         48:6e:5a:10:17:9d:c4:a3:60:5f:2e:47:85:b8:cd:f3:54:c4:
         97:ba:fb:1a:04:1c:13:af:45:8e:23:a4:c5:55:fd:56:22:aa:
         66:a4:45:24:95:c4:21:cf:76:77:79:f2:4e:fd:df:d6:32:aa:
         d3:ea:7c:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3RX2qtIHwPySwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NTY1ZmRmZGMtY2NmYi00N2Q2LWFhYWQtM2JhMWMzMmQzM2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZUriokOY2+MYwZrHLT0QUdQAL3IDoghSa6B
SpIkFqmgbUABfEU+Wgz91+QzTDheruVqSFzeK9Ew3sar8PpbQVouU4meS28sr2VK
/H4/hXCu8L7yuoUCpon2IEoW18GdKSKuU5E/hOg4iRTNKp4Q54mErUbckkS8ePpY
Cz7uAibWGF38L3+QHKxA3RibHQjRYgzIlpOQc9MDzjl7QloEMo0JyznmUfheflY4
UqoSIVAtoov2VKY2nIN8ayJ1xoZtYyaFzMvWQByMH+UpoMEoyx/9vNdjYRcSEnZu
l1v7Bf2egR2g12lmwFZmMG6xzuBaWdwJnDwGHPDYS/jAVLWoSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOwwfw7Ww/ws679SVkAgGylX5xARMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjE3NDZmNmEtZmQ3Yy0z
NTVkLTlmMDUtNjgxNWI2NDgxOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHt8IswxeEws7UEDpGLgKE4ekN57y4SxACq85RDsD0sdJbEYmB/+aMK7
ESgYL7ACiCSNIwjSRUfttJKok4tyeTNwcvyjL4kpz6CmjxPDRWS/I5acsUXaFm6o
w5bqwyDap8yndGL4URQ9z/ZJsE5E/q2GIr52FUJVulJW3+Du0iwHzwa9zIwiat0F
1ByjHJF59O1lS4+vmd07oHBFrMCqOfx2oozr2u2rr834tthfewQ68f3VOOVSlp3f
o3Z23pon5EUi1X5o1UhuWhAXncSjYF8uR4W4zfNUxJe6+xoEHBOvRY4jpMVV/VYi
qmakRSSVxCHPdnd58k7939YyqtPqfHE=
-----END CERTIFICATE-----
Generated at Sun May 4 10:31:12 2025 by rpki-client